Privacy Policy
Last updated: March 26, 2026
1. Introduction
Yipiit ("we," "us," or "our") operates the Yipiit Stewardship platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.
2. Information We Collect
Account Information: When you create an account via our OAuth authentication system, we collect your name, email address, and profile information provided by the authentication provider.
Company Claim Information: When you claim a company, we collect your full name, job title, corporate email address, LinkedIn profile URL (optional), and any supporting documentation you provide.
Payment Information: Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or card expiration date. We receive and store your Stripe customer ID and subscription ID for account management.
User-Generated Content: Content you post on the Service, including forum posts, voting guides, company updates, campaign contributions, and job applications.
Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, device information, and IP address.
Cookies: We use essential cookies for authentication and session management. See Section 7 for details.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process account registration and authentication
- Process company claims and verification
- Process payments and manage subscriptions
- Send transactional notifications (payment confirmations, claim status updates)
- Respond to support requests and inquiries
- Detect and prevent fraud, abuse, and security threats
- Analyze usage patterns to improve the Service
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party services that help us operate the Service (e.g., Stripe for payments, authentication providers, hosting services)
- Public Display: Information you choose to make public (forum posts, company profiles, voting guides) is visible to all users
- Legal Requirements: When required by law, subpoena, court order, or to protect our rights, safety, or property
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your data for certain purposes
- Withdrawal of Consent: Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Cookies
We use the following types of cookies:
- Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
- Preference Cookies: Store your settings and preferences (e.g., sidebar state, theme).
- Analytics Cookies: Help us understand how users interact with the Service. These are anonymized.
You can manage cookie preferences through the cookie consent banner or your browser settings.
8. GDPR Compliance (European Users)
If you are in the EEA, UK, or Switzerland: We process data based on consent, contract performance, legal obligations, or legitimate interests. Your data may be transferred to the United States with appropriate safeguards. You have the right to lodge a complaint with your local data protection authority.
9. CCPA Compliance (California Residents)
California residents have the right to know what personal information we collect, request deletion, opt out of sale (we do not sell personal information), and non-discrimination for exercising privacy rights. Contact [email protected] to exercise these rights.
10. Data Security
We implement industry-standard security measures including encryption in transit (TLS/SSL), secure authentication, and access controls. No method of transmission is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Service is not intended for individuals under 16. We do not knowingly collect personal information from children under 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised date. Continued use constitutes acceptance.
13. Contact Us
Email: [email protected]
Support: Support Center