Privacy Policy | YunoBase

1. Introduction

At YunoBase, we take privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform, including our websites, services, and any related tools.

This policy applies to all users — including creators, fans, and visitors — and complies with applicable privacy laws, including the UK General Data Protection Regulation (UK GDPR).

By using YunoBase, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Data We Collect

We may collect the following categories of data from users:

Account Information: Name, username, email address, password (hashed), and account preferences.
Profile Details: Bio, avatar, social links, and any public or private profile content you upload.
Content Data: Blogs, videos, music, podcasts, courses, products, and other user-generated content.
Payment and Payout Data: Stripe or Payoneer IDs (we don't store card or banking details directly).
Usage Data: IP address, browser type, device data, pages visited, and interactions with the Platform.
Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analytics.

We do not collect sensitive personal data such as race, political beliefs, or health information unless you explicitly provide it.

3. How We Use Your Data

We use your data to provide, maintain, and improve the YunoBase experience. Specifically, we may use your information to:

Create and manage your account
Process payments and facilitate payouts
Personalize your dashboard and feed
Send transactional or promotional emails (e.g., receipts, product updates)
Provide customer support and respond to inquiries
Analyze usage for performance, analytics, and security
Enforce our Terms and prevent fraud or abuse

We do not sell your personal data to third parties. Ever.

4. Sharing and Disclosure

We only share your data when it’s necessary for the operation of the Platform or when legally required. We may share data with:

Service Providers: Including Stripe (payments), Payoneer (payouts), Vercel (hosting), Supabase (database), and Resend (email).
Legal & Compliance: If required by law, court order, or governmental authority.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that deal.

We ensure all service providers handle your data securely and only as necessary for providing their services to us.

Public-facing data such as your username, profile, and published content may be visible to other users and visitors.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy — including providing services, complying with legal obligations, resolving disputes, and enforcing our agreements.

Account data is retained for the lifetime of your account.
Deleted accounts are anonymized or securely wiped after a reasonable period, unless required to retain data by law.
Billing and transaction records are retained for up to 7 years for tax and financial reporting purposes.

We regularly review the data we hold and remove what’s no longer needed. Backups and logs may persist briefly but are also purged systematically.

You can request account deletion at any time, but certain data may still be retained to comply with our legal obligations.

6. Your Rights

Under the UK GDPR and other applicable laws, you have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct any inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal and operational limits.
Objection: Object to processing based on legitimate interests or direct marketing.
Portability: Request your data in a machine-readable format to transfer elsewhere.
Restriction: Ask us to temporarily stop processing your data under certain conditions.
Withdraw Consent: If you’ve given us consent, you can withdraw it at any time.

To exercise these rights, contact us at privacy@yunobase.com. We may require identity verification before fulfilling certain requests.

You also have the right to file a complaint with the UK Information Commissioner’s Office (ICO) if you're not satisfied with how we handle your data.

7. Data Security

We implement strong administrative, technical, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

All data is encrypted in transit using HTTPS and TLS protocols.
Passwords are hashed using industry-standard algorithms (e.g., bcrypt).
Access to databases and services is strictly limited via service roles and access controls.
We monitor our systems for vulnerabilities and regularly update our infrastructure.

While no platform can guarantee 100% security, we take every reasonable step to protect your data and respond quickly to any breaches or incidents.

If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable laws.

8. International Transfers

YunoBase is a global platform. This means your personal data may be transferred to, and processed in, countries outside the United Kingdom — including the United States and other jurisdictions where our service providers are located.

Whenever we transfer your data internationally, we ensure it is protected by appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the UK or EU
Partnering only with GDPR-compliant services like Supabase, Vercel, Stripe, and Payoneer
Security audits and access controls on all third-party platforms

By using the Platform, you consent to the transfer of your data to countries outside your jurisdiction, in accordance with this Privacy Policy.

Table of Contents