Privacy Policy
How Yoink collects, uses, shares, and protects your personal data — and the privacy rights you have under the GDPR and CCPA/CPRA.
Effective date: [DATE]
This document is a template provided for convenience. Have qualified legal counsel review and adapt it for Yoink before launch.
This Privacy Policy explains how [Company legal entity] (“Yoink”, “we”, “us”) collects, uses, shares, and protects personal data when you use the Yoink website and services (the “Service”), and the rights you have over your data. It applies to creators, members, and visitors.
1. Data we collect
- Account data: name, email address, profile handle, avatar, and authentication credentials (including passkeys and magic-link tokens).
- Creator data: your space handle, products, prices, course and community content, and payout account identifiers held by our payment processor.
- Transaction data: purchases, entitlements, order history, and platform fees. We do not store full card numbers — card details are handled by our payment processor, Stripe.
- Community and usage data: posts, comments, reactions, XP and level activity, and interactions with the Service.
- Technical data: IP address, device and browser information, and log data, collected to operate and secure the Service.
- Communications: messages you send to support and your email preferences.
2. How we use data
- To provide and operate the Service, including accounts, storefronts, communities, courses, and entitlements.
- To process payments, calculate platform fees, and enable creator payouts through our payment processor.
- To send transactional messages such as receipts, sign-in links, and important account or security notices.
- To secure the Service, prevent fraud and abuse, enforce our Acceptable Use & Content Policy, and comply with law.
- To improve the Service and develop new features.
3. Legal bases (GDPR/UK GDPR)
Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, operate, and improve the Service); legal obligation (for tax, accounting, and compliance); and consent (where required, for example certain cookies or marketing — which you may withdraw at any time).
4. How we share data
- With creators: when you buy from or join a creator’s space, the creator receives the data necessary to fulfill the purchase and operate their community (such as your name, email, and order details). Each creator is an independent controller of that data.
- From creators: a creator may give us the email addresses of members of their existing community so those people can join the creator's space when they sign in. We use those addresses only to recognize the invited person, show them to that creator, and never email them on the creator's behalf. The creator is the controller of that list and can withdraw an invitation at any time.
- With service providers (processors) that help us run the Service, including Stripe (payments and payouts), our authentication and database provider, our email provider, and hosting and analytics providers.
- For legal reasons: to comply with law, enforce our terms, or protect the rights, safety, and property of Yoink, our users, or the public.
- In a business transfer: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. International transfers
We may process and store data in countries other than where you live. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or other legally recognized mechanisms.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for the period required to comply with legal, tax, accounting, and dispute-resolution obligations. We may retain de-identified or aggregated data indefinitely.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal data; to object to or restrict certain processing; and to withdraw consent. Under the GDPR/UK GDPR you may also lodge a complaint with your supervisory authority. Under the CCPA/CPRA, California residents may request access to, deletion of, and correction of personal information, and may opt out of any “sale” or “sharing” and limit use of sensitive personal information — and we will not discriminate against you for exercising these rights.
To exercise any of these rights, email support@yoink.pro. We will verify your request and respond within the time required by applicable law. Note that some data is controlled by the creators you transact with; we will direct or assist requests to the appropriate controller where relevant.
8. Cookies and tracking
We use strictly necessary cookies to operate the Service (for example, sign-in sessions) and may use limited analytics. See our Cookie Notice for details and choices.
9. Security
We use technical and organizational measures designed to protect personal data, including encryption in transit, scoped database access controls, and signed, short-lived URLs for paid downloads. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. We will update the effective date and, for material changes, provide additional notice where appropriate.
12. Contact
For privacy questions or to reach our data-protection contact, email support@yoink.pro or write to [Company legal entity, mailing address]. [If you appoint an EU/UK representative or DPO, list them here.]