Privacy Policy
Last updated: January 1, 2025. This policy describes how YesGO collects, uses, and protects your data. We are SOC 2 Type II certified and fully GDPR/CCPA compliant.
1. Information We Collect
We collect information you provide directly: your name, email address, and payment details when you create an account or upgrade your plan. We also collect the content you create on YesGO, including page copy, images, and form configurations.
When your visitors interact with pages you publish, we collect analytics data on your behalf: page views, clicks, scroll depth, form submissions, and device information. This data belongs to you and is processed only to provide our analytics and optimization services.
We also collect technical data automatically: your IP address, browser type, operating system, referring URLs, and how you use the YesGO dashboard. This helps us improve the platform and maintain security.
2. How We Use Your Information
We use your account information to provide the service, process payments, and send you important updates about your account or changes to our terms. We will never use your data for advertising without your explicit consent.
Visitor analytics data is used exclusively to power your dashboards, run A/B tests, generate heatmaps, and train the optimization models that improve your pages. We aggregate anonymized data across all accounts to improve our AI models, but this never includes personally identifiable information from your visitors.
We may use your contact information to send product updates, feature announcements, and marketing emails. You can opt out of marketing communications at any time from your account settings or by clicking the unsubscribe link in any email.
3. Data Storage and Security
All data is stored on encrypted servers in the United States and the European Union. We use AES-256 encryption at rest and TLS 1.3 for data in transit. Access to production systems requires multi-factor authentication and is limited to authorized engineering staff.
We are SOC 2 Type II certified and undergo annual third-party security audits. Our infrastructure is hosted on AWS with automatic backups, failover, and 99.99% uptime SLA.
In the event of a data breach, we will notify affected users within 72 hours as required by GDPR, provide details on what data was affected, and outline the steps we are taking to prevent future incidents.
4. Cookies and Tracking
YesGO uses essential cookies to keep you logged in and maintain your session across the dashboard. These cookies are required for the platform to function and cannot be disabled.
We also use analytics cookies on your published pages to track visitor behavior for heatmaps, A/B testing, and conversion tracking. These cookies are first-party (set on your custom domain) and do not share data with third-party advertising networks.
Your visitors can opt out of analytics tracking via the cookie consent banner on your pages. You can configure the consent banner appearance and behavior from your dashboard settings.
5. Your Rights (GDPR / CCPA)
You have the right to access, correct, or delete your personal data at any time. Export your data from the dashboard (Settings > Data Export) or email privacy@yesgo.bond for a complete data package within 30 days.
Under GDPR, you can request data portability, restrict processing, or object to automated decision-making. Under CCPA, you have the right to know what data we collect, request deletion, and opt out of the sale of your information (we do not sell data).
To exercise any of these rights, contact our Data Protection Officer at privacy@yesgo.bond. We will respond within 30 days and verify your identity before processing any request.
6. Third-Party Integrations
When you connect third-party tools (Google Ads, Meta, HubSpot, Mailchimp, etc.), we share only the data necessary for that integration to function. For example, connecting Mailchimp sends form submission data (name, email) to your Mailchimp account.
We do not share your data with third parties for their own marketing purposes. Each integration is opt-in and can be disconnected at any time from your dashboard.
Third-party services have their own privacy policies. We recommend reviewing those policies before connecting any integration.
7. Data Retention
We retain your account data for as long as your account is active. If you cancel, we keep your data for 90 days so you can reactivate without losing anything. After 90 days, all data is permanently deleted from our systems.
Visitor analytics data on your published pages is retained for 24 months on active accounts. Historical data beyond 24 months is available on Pro and Enterprise plans.
You can request immediate deletion of all data at any time by contacting support or using the account deletion option in Settings.
8. Children and Minors
YesGO is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a minor has provided us with personal data, we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes via email or a prominent notice on our website at least 30 days before the changes take effect. Continued use of YesGO after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related questions, data requests, or complaints, contact our Data Protection Officer:
Email: privacy@yesgo.bond Mail: YesGO Inc., 548 Market Street, Suite 420, San Francisco, CA 94104 EU Representative: YesGO Europe B.V., Keizersgracht 241, 1016 EA Amsterdam