Politique de Confidentialité

a man and a woman are reading a book

Last Updated: 06 Jan, 2026

Introduction

UserGuiding is an intuitive and customizable onboarding software that enables companies to design seamless onboarding processes, provide real-time interactive customer support, and gather user feedback about their products.

This Privacy Policy applies to YNOT PARTNERS, INC. (a wholly-owned subsidiary of YNOT Partners Yazılım Pazarlama Danışmanlık Anonim Şirketi, located in Istanbul, Türkiye), which provides a SaaS platform to deliver smooth onboarding experiences on websites (hereinafter "UserGuiding," "we," "us," or "our").

UserGuiding respects the privacy of individuals and is committed to protecting the information of:

  • Visitors to our website (userguiding.com) where we act as a data controller
  • Subscribers (representatives and employees of entities that register to use UserGuiding products and services) where we also act as a data controller

Important: Scope of This Policy

What This Policy Covers

This Privacy Policy governs how awe collect, use, and protect personal data in the following contexts:

  • When you visit our website (userguiding.com)
  • When you create a UserGuiding account or log into our platform
  • When you subscribe to our services and interact with us as a customer
  • When you contact our customer support
  • When you interact with our marketing activities, social media profiles, or blog
  • When you download and use our Chrome Extension to create onboarding content

What This Policy Does NOT Cover

End Users of Our Subscribers' Websites: When our Subscribers embed UserGuiding's JavaScript snippet on their websites, we process personal data of their end users on behalf of, and under the instructions of, our Subscribers. In this context:

  • UserGuiding acts as a Data Processor (not a Controller)
  • Our Subscribers are the Data Controllers for their end users' data
  • End users should refer to their service provider's (our Subscriber's) privacy policy for information about how their data is handled

The processing of end user data is governed by our Data Processing Agreement (DPA) with each Subscriber, not by this Privacy Policy. If you are an end user of a website that uses UserGuiding, please contact that website's operator directly with any privacy questions or data subject requests.

Information We Collect

When You Visit Our Website

Personal Data Collected

Browser type, operating system, referring URLs, clickstream data, and your use of our website

Source

Collected directly from you and through cookies/tracking technologies

Purpose

To provide website features, enhance user experience, save preferences, advertise on other sites, and compile aggregate analytics

Legal Basis

Legitimate interest (activity logs, analytics); Consent (marketing cookies)

When You Create an Account or Log In

Personal Data Collected

First name, last name, company name, email address, telephone number, session information, usage information

Source

Collected directly from you,

Purpose

To create and manage your account, provide our services, enable product features, send notifications, and facilitate collaboration

Legal Basis

Performance of a contract; Legitimate interest (analytics)

When You Use Our Chrome Extension

Personal Data Collected

Unique ID, operating system, country

Source

Chrome Web Store

Purpose

To enable creation and sharing of interactive onboarding materials

Legal Basis

Performance of a contract

When You Subscribe to Our Services

Personal Data Collected

Full name, email address, phone number, company name, payment information

Source

Collected directly from you

Purpose

To provide products and services, process payments, fulfill contractual obligations, and communicate with you

Legal Basis

Performance of a contract; Legal obligation (financial records)

When You Contact Customer Support

Personal Data Collected

Contact information, problem specifications, session and usage information

Source

Collected directly from you

Purpose

To troubleshoot issues, improve your experience, and enhance platform security

Legal Basis

Performance of a contract; Legitimate interest

When You Engage with Our Marketing

Personal Data Collected

Contact information, company name, job title, session and usage information

Source

Collected directly from you and from third-party sources

Purpose

To show relevant content, send newsletters, improve products, and generate leads

Legal Basis

Legitimate interest (marketing); Consent (where required)

How We Use Your Information

We use your personal data for the following purposes:

  • Service Delivery: To provide, maintain, and improve our platform and services
  • Account Management: To manage your relationship with us and process transactions
  • Communication: To respond to inquiries, provide support, and send service-related notices
  • Security: To detect, prevent, and investigate security incidents, fraud, and abuse
  • Compliance: To comply with legal obligations and enforce our agreements
  • Marketing: To send promotional communications (with your consent where required)
  • Analytics: To understand usage patterns and improve our products

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze website traffic, and deliver personalized content. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

Third-Party Service Providers

We work with third-party service providers to help us operate our business and deliver our services. These providers are contractually obligated to protect your data and may only use it for the purposes we specify.

Categories of service providers include:

  • Cloud Infrastructure: Hosting and data storage
  • Analytics: Website and product analytics
  • Communication: Customer support and email services
  • Security: Platform security and CDN services
  • Payment Processing: Subscription billing
  • Marketing: Advertising and CRM platforms

Data Retention and Security

Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • For the duration of your account or subscription
  • As required to comply with legal obligations

When data is no longer needed, we securely delete or anonymize it. For details on specific retention periods and criteria, please see our Data Retention Policy, which provides information about how long we retain different categories of personal data and the rationale for those retention periods

Security

We implement commercially reasonable technical, organizational, and administrative safeguards to protect your data, including:

  • Encryption of data in transit and at rest
  • Role-based access controls
  • Regular security assessments and monitoring
  • Incident response procedures

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

International Data Transfers

Personal data collected by UserGuiding is stored on Amazon Web Services (AWS) servers located in the European Union and the United States.

Transfer Mechanisms

For transfers of personal data outside the EU/EEA to countries without an adequacy decision, we rely on:

  1. EU-U.S. Data Privacy Framework (DPF): UserGuiding complies with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. DPF Principles. To learn more about the DPF program and view our certification, please visit https://www.dataprivacyframework.gov/.
  2. Standard Contractual Clauses (SCCs): For transfers not covered by the DPF, we use EU SCCs and the UK International Data Transfer Agreement (IDTA).

DPF Complaints

In compliance with the EU-U.S. DPF and UK Extension, we commit to resolving complaints about our collection and use of your personal information. EU and UK individuals with inquiries or complaints should first contact us at privacy@userguiding.com.

We commit to cooperate with the panel established by EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) regarding unresolved complaints. Under certain conditions, binding arbitration may be available for DPF compliance complaints not resolved by other mechanisms.

UserGuiding is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access

Request a copy of the personal data we hold about you

Rectification

Request correction of inaccurate or incomplete data

Erasure

Request deletion of your data (subject to legal retention requirements)

Restriction

Request limitation of processing in certain circumstances

Portability

Receive your data in a structured, machine-readable format

Objection

Object to processing based on legitimate interests or for direct marketing

Withdraw Consent

Withdraw previously given consent at any time

Lodge a Complaint

File a complaint with your local data protection supervisory authority

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@userguiding.com. We may ask you to verify your identity before processing your request. We will respond within the timeframes required by applicable law.

Deleting Your Account

You may delete your account by submitting a request to privacy@userguiding.com. Upon deletion, any association between your account and personal data we store will no longer be accessible.

California Privacy Notice (CCPA/CPRA)

This section applies to California residents as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

Our Role Under CCPA

When processing personal information of California residents on behalf of our Subscribers, UserGuiding acts as a Service Provider under the CCPA. We process such data strictly to perform the services outlined in our agreement with Subscribers ("Business Purpose") or as otherwise permitted by the CCPA.

Service Provider Certifications

As a Service Provider, we certify that we:

  • Will not sell or share California personal information
  • Will not process California personal information outside the direct business relationship with our customers, except as required by law
  • Will not combine California personal information with data collected from other sources, unless received in connection with our service obligations

Permitted Uses

We may retain, use, or disclose California personal information solely for:

  • Retaining and employing another Service Provider as a subcontractor (meeting CCPA requirements)
  • Detecting security incidents or protecting against fraudulent or illegal activity
  • Complying with federal, state, or local laws
  • Responding to lawful government inquiries, subpoenas, or summons
  • Cooperating with law enforcement regarding suspected legal violations
  • Exercising or defending legal claims

Your California Rights

California residents have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of personal information
  • Opt-out of the sale or sharing of personal information (we do not sell or share)
  • Non-discrimination for exercising privacy rights

For more information or to exercise your rights, contact us at privacy@userguiding.com.

Children's Privacy

We do not offer our products or services for use by children. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, please do not provide any personal data to us without the consent of a parent or legal guardian.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@userguiding.com. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email and/or a prominent notice on our website (where appropriate)

We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

UserGuiding Privacy Team

Company Information: YNOT PARTNERS, INC. 

For users in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.

Previous Privacy Policy Updates: