Last Updated: 06 Jan, 2026
Introduction
UserGuiding is an intuitive and customizable onboarding software that enables companies to design seamless onboarding processes, provide real-time interactive customer support, and gather user feedback about their products.
This Privacy Policy applies to YNOT PARTNERS, INC. (a wholly-owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık Anonim Şirketi, located in Istanbul, Türkiye), which provides a SaaS platform to deliver smooth onboarding experiences on websites (hereinafter "UserGuiding," "we," "us," or "our").
UserGuiding respects the privacy of individuals and is committed to protecting the information of:
- Visitors to our website (userguiding.com) where we act as a data controller
- Subscribers (representatives and employees of entities that register to use UserGuiding products and services) where we also act as a data controller
Important: Scope of This Policy
What This Policy Covers
This Privacy Policy governs how awe collect, use, and protect personal data in the following contexts:
- When you visit our website (userguiding.com)
- When you create a UserGuiding account or log into our platform
- When you subscribe to our services and interact with us as a customer
- When you contact our customer support
- When you interact with our marketing activities, social media profiles, or blog
- When you download and use our Chrome Extension to create onboarding content
What This Policy Does NOT Cover
End Users of Our Subscribers' Websites: When our Subscribers embed UserGuiding's JavaScript snippet on their websites, we process personal data of their end users on behalf of, and under the instructions of, our Subscribers. In this context:
- UserGuiding acts as a Data Processor (not a Controller)
- Our Subscribers are the Data Controllers for their end users' data
- End users should refer to their service provider's (our Subscriber's) privacy policy for information about how their data is handled
The processing of end user data is governed by our Data Processing Agreement (DPA) with each Subscriber, not by this Privacy Policy. If you are an end user of a website that uses UserGuiding, please contact that website's operator directly with any privacy questions or data subject requests.
Information We Collect
When You Visit Our Website
Personal Data Collected
Browser type, operating system, referring URLs, clickstream data, and your use of our website
Source
Collected directly from you and through cookies/tracking technologies
Purpose
To provide website features, enhance user experience, save preferences, advertise on other sites, and compile aggregate analytics
Legal Basis
Legitimate interest (activity logs, analytics); Consent (marketing cookies)
When You Create an Account or Log In
Personal Data Collected
First name, last name, company name, email address, telephone number, session information, usage information
Source
Collected directly from you,
Purpose
To create and manage your account, provide our services, enable product features, send notifications, and facilitate collaboration
Legal Basis
Performance of a contract; Legitimate interest (analytics)
When You Use Our Chrome Extension
Personal Data Collected
Unique ID, operating system, country
Source
Chrome Web Store
Purpose
To enable creation and sharing of interactive onboarding materials
Legal Basis
Performance of a contract
When You Subscribe to Our Services
Personal Data Collected
Full name, email address, phone number, company name, payment information
Source
Collected directly from you
Purpose
To provide products and services, process payments, fulfill contractual obligations, and communicate with you
Legal Basis
Performance of a contract; Legal obligation (financial records)
When You Contact Customer Support
Personal Data Collected
Contact information, problem specifications, session and usage information
Source
Collected directly from you
Purpose
To troubleshoot issues, improve your experience, and enhance platform security
Legal Basis
Performance of a contract; Legitimate interest
When You Engage with Our Marketing
Personal Data Collected
Contact information, company name, job title, session and usage information
Source
Collected directly from you and from third-party sources
Purpose
To show relevant content, send newsletters, improve products, and generate leads
Legal Basis
Legitimate interest (marketing); Consent (where required)
How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery: To provide, maintain, and improve our platform and services
- Account Management: To manage your relationship with us and process transactions
- Communication: To respond to inquiries, provide support, and send service-related notices
- Security: To detect, prevent, and investigate security incidents, fraud, and abuse
- Compliance: To comply with legal obligations and enforce our agreements
- Marketing: To send promotional communications (with your consent where required)
- Analytics: To understand usage patterns and improve our products
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze website traffic, and deliver personalized content. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
Third-Party Service Providers
We work with third-party service providers to help us operate our business and deliver our services. These providers are contractually obligated to protect your data and may only use it for the purposes we specify.
Categories of service providers include:
- Cloud Infrastructure: Hosting and data storage
- Analytics: Website and product analytics
- Communication: Customer support and email services
- Security: Platform security and CDN services
- Payment Processing: Subscription billing
- Marketing: Advertising and CRM platforms
Data Retention and Security
Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- For the duration of your account or subscription
- As required to comply with legal obligations
When data is no longer needed, we securely delete or anonymize it. For details on specific retention periods and criteria, please see our Data Retention Policy, which provides information about how long we retain different categories of personal data and the rationale for those retention periods
Security
We implement commercially reasonable technical, organizational, and administrative safeguards to protect your data, including:
- Encryption of data in transit and at rest
- Role-based access controls
- Regular security assessments and monitoring
- Incident response procedures
While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.
International Data Transfers
Personal data collected by UserGuiding is stored on Amazon Web Services (AWS) servers located in the European Union and the United States.
Transfer Mechanisms
For transfers of personal data outside the EU/EEA to countries without an adequacy decision, we rely on:
- EU-U.S. Data Privacy Framework (DPF): UserGuiding complies with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles. To learn more about the DPF program and view our certification, please visit https://www.dataprivacyframework.gov/.
- Standard Contractual Clauses (SCCs): For transfers not covered by the DPF, we use EU SCCs and the UK International Data Transfer Agreement (IDTA).
DPF Complaints
In compliance with the EU-U.S. DPF and UK Extension, we commit to resolving complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints should first contact us at privacy@userguiding.com.
We commit to cooperate with the panel established by EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) regarding unresolved complaints. Under certain conditions, binding arbitration may be available for DPF compliance complaints not resolved by other mechanisms.
UserGuiding is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you
Rectification
Request correction of inaccurate or incomplete data
Erasure
Request deletion of your data (subject to legal retention requirements)
Restriction
Request limitation of processing in certain circumstances
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests or for direct marketing
Withdraw Consent
Withdraw previously given consent at any time
Lodge a Complaint
File a complaint with your local data protection supervisory authority
How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@userguiding.com. We may ask you to verify your identity before processing your request. We will respond within the timeframes required by applicable law.
Deleting Your Account
You may delete your account by submitting a request to privacy@userguiding.com. Upon deletion, any association between your account and personal data we store will no longer be accessible.
California Privacy Notice (CCPA/CPRA)
This section applies to California residents as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Our Role Under CCPA
When processing personal information of California residents on behalf of our Subscribers, UserGuiding acts as a Service Provider under the CCPA. We process such data strictly to perform the services outlined in our agreement with Subscribers ("Business Purpose") or as otherwise permitted by the CCPA.
Service Provider Certifications
As a Service Provider, we certify that we:
- Will not sell or share California personal information
- Will not process California personal information outside the direct business relationship with our customers, except as required by law
- Will not combine California personal information with data collected from other sources, unless received in connection with our service obligations
Permitted Uses
We may retain, use, or disclose California personal information solely for:
- Retaining and employing another Service Provider as a subcontractor (meeting CCPA requirements)
- Detecting security incidents or protecting against fraudulent or illegal activity
- Complying with federal, state, or local laws
- Responding to lawful government inquiries, subpoenas, or summons
- Cooperating with law enforcement regarding suspected legal violations
- Exercising or defending legal claims
Your California Rights
California residents have the right to:
- Know what personal information we collect and how it is used
- Request deletion of personal information
- Opt-out of the sale or sharing of personal information (we do not sell or share)
- Non-discrimination for exercising privacy rights
For more information or to exercise your rights, contact us at privacy@userguiding.com.
Children's Privacy
We do not offer our products or services for use by children. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, please do not provide any personal data to us without the consent of a parent or legal guardian.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@userguiding.com. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email and/or a prominent notice on our website (where appropriate)
We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
UserGuiding Privacy Team
Company Information: YNOT PARTNERS, INC.
For users in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.
Previous Privacy Policy Updates: