YoBool Logo

YoBool LLC Privacy Policy

Effective Date: January 31st, 2025

1. Introduction

Welcome to YoBool LLC (“YoBool,” “we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform (the “Platform”), which facilitates crowdsourced shipping by connecting travelers who have extra baggage space with individuals needing to send parcels internationally.

This Privacy Policy is designed to comply with applicable global privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using our Platform, you agree to the terms and conditions of this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of our Platform.

2. Data Controller and Contact Information

For the purposes of the GDPR (where applicable), the “data controller” is:

YoBool LLC
Registered Address:
131 Continental Dr, Suite 305
Newark, Delaware 19713
USA

Business Mailing Address:
10685-B Hazelhurst Dr. #38941
Houston, TX 77043
USA

Contact Information:
Email: [email protected]
Attention: Privacy Compliance Officer

3. Information We Collect

We collect various types of information from and about you depending on your interactions with our Platform. This may include:

  1. Personal Identifiers: Such as your name, email address, phone number, home or business address, and government-issued identification (for identity verification purposes).
  2. Account Information: Username, password, and profile information used to create or maintain an account on our Platform.
  3. Transaction Information: Details about shipments you send or carry, payment information (including partial credit card details through Stripe Connect), shipping history, and communications with other users.
  4. Payment and Financial Information: We use Stripe Connect to process payments; we do not store full payment card details. Stripe may collect certain financial information needed to process payments.
  5. Communication Data: Your messages, emails, or other communications with our support team or with other users via our Platform’s messaging services.
  6. Technical Information: IP address, browser type, operating system, device identifiers, and geolocation data (if you have enabled location services).
  7. Cookies and Similar Technologies: We use cookies, pixels, and similar tracking technologies to collect information about your browsing activities.

Sensitive Personal Information (SPI): We generally do not request or require you to provide sensitive data (e.g., health information, racial or ethnic origins, religious beliefs, etc.). If you voluntarily provide such information, we will process it in accordance with this Privacy Policy and applicable law.

4. How We Collect Your Information

  • Directly from You: When you register for an account, fill out forms, communicate with us, or otherwise provide information to us.
  • Automatically: Through the use of cookies and other tracking technologies when you visit or use our Platform.
  • From Third Parties: We may receive information about you from our payment processors (e.g., Stripe), identity verification services, or social media networks (if you choose to link your account).

5. Purposes for Processing Your Information

We use your personal information for the following purposes:

  1. Provision of Services: To operate our Platform, facilitate shipments, enable user communications, and provide customer support.
  2. Payment Processing: To process payments, facilitate cross-border payouts via Stripe Connect, and manage related accounting and tax obligations.
  3. Identity Verification: To verify the identity of travelers and senders, reduce fraud, and maintain a trusted environment.
  4. Compliance with Legal Obligations: To comply with applicable laws, regulations, and contractual obligations, including shipping, customs, and consumer protection regulations.
  5. Analytics and Platform Improvements: To monitor usage, perform analytics, improve the Platform’s performance and user experience, and develop new features.
  6. Marketing and Communications: To send promotional materials, newsletters, and other information about our services that may be of interest to you, subject to your marketing preferences.
  7. Security and Fraud Prevention: To protect the integrity of our Platform, investigate and mitigate fraudulent or illegal activities, and enforce our Terms of Service.

6. Legal Bases for Processing (GDPR)

For individuals located in the European Economic Area (EEA), Switzerland, or the UK, our legal bases for collecting and using your personal information as described above include:

  1. Performance of a Contract: We process data to provide our Platform and fulfill our contractual obligations to you.
  2. Consent: Where we rely on your consent to process personal data (e.g., for certain marketing activities), you have the right to withdraw your consent at any time.
  3. Legitimate Interests: We may process data for our legitimate business interests, such as improving and securing our Platform, provided our interests are not overridden by your data protection rights.
  4. Compliance with Legal Obligations: We process data to comply with laws, regulations, and legal processes.

7. How We Share Your Information

We do not sell your personal data. We may share your personal information in the following circumstances:

  1. With Other Users: To the extent necessary to facilitate shipments (e.g., sharing sender’s or traveler’s contact information).
  2. Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, analytics, customer support, payment processing).
  3. Business Transfers: If we merge, acquire, or sell part of our business or assets, user information may be transferred as part of that transaction.
  4. Legal Compliance: When required to comply with a legal obligation, protect our rights, or respond to lawful requests by public authorities.
  5. Affiliates: We may share information with our corporate affiliates for legitimate business purposes consistent with this Privacy Policy.

8. International Data Transfers

Our servers and databases are primarily hosted on AWS EU-West-1 (Ireland). However, we are a Delaware LLC with operations in France, the U.S., and other locations. This means that your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from (and potentially less protective than) those in your country.

Where required by law, we implement measures such as Standard Contractual Clauses (SCCs) to ensure that personal data transferred remains protected in accordance with this Privacy Policy and applicable data protection laws.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations. The retention period may vary based on the type of data and the relevant legal or regulatory obligations in each jurisdiction.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, or alteration. These include:

  • Encrypted Data Transfer: Using HTTPS/TLS protocols for data in transit.
  • Restricted Access: Limiting access to personal data to authorized employees and service providers with a need to know.
  • AWS Security: Utilizing Amazon Web Services’ robust security features, including encryption at rest and network firewalls.

Despite our efforts, no security measure is entirely foolproof, and we cannot guarantee absolute security of your data.

11. Your Rights Under GDPR

If you are located in the EEA, Switzerland, or the UK, you have certain rights regarding your personal data, including:

  • Right to Access: Request a copy of personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Ask us to delete or remove personal data when there is no legitimate reason for us to keep it.
  • Right to Restrict Processing: Request to suspend processing of your personal data in certain scenarios.
  • Right to Data Portability: Request to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to processing of your personal data if we are relying on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise these rights, please contact us at [email protected]. We will respond to legitimate requests within one month or as required by local law.

12. Your Rights Under CCPA (for California Residents)

If you are a California resident, you have specific rights under the CCPA regarding your personal information:

  1. Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, including how the information is used and shared.
  2. Right to Delete: You can request that we delete your personal information, subject to certain exceptions (e.g., for legal compliance).
  3. Right to Opt-Out of Sale: We do not sell personal information. If that practice changes, we will update this Privacy Policy and provide a “Do Not Sell My Personal Information” link.
  4. Right to Non-Discrimination: You will not receive any discriminatory treatment for exercising your CCPA rights.

To exercise these rights, please submit a verifiable request to [email protected]. We may need to verify your identity before fulfilling your request.

13. Account Deletion & Data Erasure

  1. Eligibility for Deletion

    • User-Initiated Deletion: You may request deletion of your YoBool account if (i) it is your own account and (ii) you have no active listings, no pending or active bookings, and no open disputes.
    • Administrator Rights: Only an administrator or the rightful account holder (meeting the above criteria) can initiate this process.

  2. 72-Hour Delay and Cancellation Condition

    • Once an account deletion is requested or approved, YoBool places the request in a 72-hour waiting period.
    • If the user signs in again within these 72 hours, the deletion request will be canceled to prevent accidental or unauthorized account removal.

  3. Deletion Method

    • After the 72-hour waiting period, YoBool runs an automated job to anonymize or remove your personal data. Specifically, we will:
      • Replace or clear personal fields (email, phone number, first/last name) with non-identifiable “dummy” data.
      • Purge profile images or attachments, if any.
      • Cancel any pending or active bookings that were still in the process of cancellation.
      • Archive or mark as expired any active listings.
      • Maintain minimal records necessary for legal obligations (e.g., tax, customs, anti-fraud), but only in anonymized or aggregated form.

  4. Legal and Business Exceptions

    • Retention for Compliance: Certain data may be retained if required by law, regulation, or legitimate business need (e.g., tax audit, fraud prevention, dispute resolution). Any such retained data will be restricted in its usage and access.
    • Open Disputes: Accounts with unresolved disputes or ongoing investigations will not be eligible for full deletion until the matter is resolved.

  5. Effect of Account Deletion

    • Upon completion of the deletion process, you will no longer be able to access your account, and your personal data will be rendered irretrievable.
    • If you wish to use YoBool again after your account has been deleted, you must create a new account.

  6. Questions and Assistance

    • For any questions about account deletion, please contact [email protected]. Our support team can guide you through the process or advise on any exceptions.

14. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Platform to:

  • Remember your preferences and settings.
  • Keep you logged in to your account.
  • Analyze how our Platform is performing and being used.
  • Personalize content and advertisements.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect some functionality of our Platform.

15. Children’s Privacy

Our Platform is not directed to individuals under the age of 16 (or the relevant age of consent in your jurisdiction). We do not knowingly collect personal information from children without parental consent. If you believe we have collected information from a minor without consent, please contact us so we can take appropriate steps to delete such information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations or data processing practices. Any updates will be posted on this page with a new “Effective Date.” We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or comments regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Address:

YoBool LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713, USA

Business Mailing Address (for correspondence):
10685-B Hazelhurst Dr. #38941
Houston, TX 77043, USA

Last Updated: October 20th, 2018