NEW WEBINAR! Year-End Q&A: Everything UserGuiding Users Need to Know (12/11)
Register now! →UserGuiding is an intuitive and customizable onboarding software where companies can design continuous-seamless onboarding processes, provide real-time & interactive customer support, and discover what users think about their product.
To provide our services, we collect personal data from our users. We value your data and we are committed to being transparent about the data we collect from you.
This Privacy Policy applies to YNOT PARTNERS, INC. (owned solely by YNOT Partners Yazilim Pazarlama Danismanlik Anonim Sirketi, located in Istanbul - Turkiye), which provides a SaaS solution to present new and existing users with a smooth experience on your websites (hereinafter ‘’UserGuiding’’). The terms ‘’we’’, or ‘’our’’ used in this Policy mean our organization as the context requires.
Userguiding respects the privacy of individuals, and is committed to protecting the information of visitors to the website ("Visitors") where Userguiding acts as the data controller, and representatives or end users of the entities that register to use the Userguiding products and services through the Website ("Subscriber") where we act as a data processor.
Your data privacy questions and requests should be submitted to the Subscriber in its capacity as your Controller while you are interacting with the product or services of the Subscriber.
To ensure transparency this privacy policy ("Privacy Policy") governs how we process personal data we collect or receive from or about you including, but not limited to the following use cases:
Table of contents:
Information we collect and how we process it
When you visit our Website
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Please refer to our cookie policy in order to see details regarding how we keep your data.
Consequence of Not Providing Data:
When you create an account and when you log in to our product
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
When you download our Chrome Extension and create content using it
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
However, certain metadata are still maintained by Google Web Store per their privacy policy.
Consequence of Not Providing Data:
When you install our JS snippet and interact with guides, tours, NPS and provide us feedback
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period outlined in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
User Analytics Feature
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Consequence of Not Providing Data:
When we acquire your personal data from third-party sources (such as analytics tools)
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
When we use the personal data of subscribers
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
Providing Customer Support
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
When you interact with us through our marketing events, on our social media profiles and our blog (e.g., Facebook, Reddit, Twitter, LinkedIn)
Personal Data:
Source:
Purpose of Collecting:
Legal Basis:
Third Parties We Share Data With:
Retention Period:
Please note that we may retain it for a longer or shorter period in accordance with data retention laws.
Consequence of Not Providing Data:
We may also use some other information like session and usage information for fraud prevention and security purposes.
The information inside the log files includes IP addresses, browser type, Internet Service Provider, date/time stamp, referring/exit pages, clicked pages and any other information your browser may send to us. We use such information for security purposes and to analyze trends, administer the Website, track users’ movement around the Website, and gather demographic information.
Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement between UserGuiding and its Customers unless Userguiding is required to retain the Personal Data for a longer period to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
We have implemented commercially reasonable technical, organizational, and security measures designed to protect your data. However, please note that we cannot guarantee that the information will not be compromised as a result of unauthorized penetration to our servers.
Personal data collected by us is securely stored on Amazon Web Services (AWS) servers located in the European Union and the United States. For international data transfers, we rely on Standard Contractual Clauses (SCCs) to ensure compliance with applicable regulations. Customers subscribed to our Pro Plan have the flexibility to select their preferred data residency, choosing between EU or US data centers to align with their specific governance requirements. Additionally, if your organization requires tailored data residency options to meet strict data governance frameworks, we can accommodate those needs. For transfers of personal data outside the EU/EEA, we ensure that recipients commit to robust contractual agreements to safeguard your data.
In addition to the third parties mentioned above, we may share your data as follows: (i) with courts or competent authorities, to comply with applicable laws, regulations, and requests of law enforcement; (ii) in case we sell or transfer, or we consider selling or transferring, some or all of our business, shares or assets to a third party; (iii) if we are acquired by, or merged with, a third party entity, or in the event of bankruptcy; (iv) where you have provided your consent to us sharing or transferring your data.
The EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF)
If you are a resident of the EEA or the UK, we will protect your data when it is transferred outside of the EEA and the UK by processing it in a territory that the European Commission has determined provides an adequate level of protection for personal data; or otherwise ensuring appropriate safeguards are in place to protect your personal data. For transfers of your data to:
UserGuiding complies with the EU-U.S. DPF, and the UK-U.S. DPF as set forth by the U.S. Department of Commerce. Imagine Privacy, Inc. has certified to the U.S. Department of Commerce that it adheres to (i) the EU-U.S. DPF Principles concerning the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles DPF Principles, the Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, UserGuiding commits to resolve DPF Principles-related complaints about our collection and use of your Personal Information. EU and UK individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF, and/or the UK Extension to the EU-U.S. DPF should first contact UserGuiding through our privacy@userguiding.com
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, UserGuiding commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (“DPAs“), the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Under certain conditions, it may be possible to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, see here for additional information.
UserGuiding remains responsible if its service provider, when acting on its behalf, processes personal data in a manner inconsistent with the DPF Principles, unless it is not responsible for the event giving rise to the damage.
The Federal Trade Commission has jurisdiction over UserGuiding’s compliance with the EU-U.S. Data Privacy Framework EU-U.S. DPF, the UK Extension to the EU-U.S. DPF.
Californian Residents Privacy Notice Section
The following section applies specifically to the personal data of California residents, as defined by the California Consumer Privacy Act (CCPA).
Processing Californian Personal Data
UserGuiding acts as a Service Provider under the CCPA when processing Californian Personal Data. We process such data strictly to perform the SaaS Agreement ("Business Purpose") or as otherwise permitted by the CCPA.
As a Service Provider, we certify that:
(i) We will not sell or share Californian Personal Data.
(ii) We will not process Californian Personal Data outside the direct business relationship between UserGuiding and its customers, except as required by applicable law.
(iii) We will not combine Californian Personal Data with data collected from other sources unless it is received in connection with our obligations under the SaaS Agreement.
Compliance with CCPA Obligations
UserGuiding complies with all requirements applicable to a Service Provider under the CCPA, ensuring the same level of privacy protection required by the law. If we determine that we are unable to meet our obligations under the CCPA, we will promptly notify our customers.
We may retain, use, or disclose Californian Personal Data solely for the following purposes:
(i) Retaining and employing another Service Provider as a subcontractor, provided the subcontractor also meets the requirements of a Service Provider under the CCPA.
(ii) Detecting data security incidents or protecting against fraudulent or illegal activity.
(iii) Complying with federal, state, or local laws.
(iv) Responding to civil, criminal, or regulatory inquiries, investigations, subpoenas, or summons from federal, state, or local authorities.
(v) Cooperating with law enforcement agencies regarding activities that we reasonably and in good faith believe may violate laws.
(vi) Exercising or defending legal claims.
Ensuring Ongoing CCPA Compliance
Our customers may take reasonable and appropriate steps to verify that UserGuiding is processing Californian Personal Data by CCPA requirements and may act to stop and remediate any unauthorized use of such data. UserGuiding and its customers acknowledge and agree that the disclosure of Californian Personal Data by our customers to UserGuiding does not constitute monetary or other valuable consideration exchanged between the parties.
For more details about your rights under the CCPA and how UserGuiding processes personal data, please contact us at privacy@userguiding.com .
We enable you to interact with third-party websites, products or services that are not controlled by us (“Third Party Service”). Please be aware that Third Party Services can collect Personal Data from you. Therefore, we encourage you to read the terms and conditions and privacy policies of each Third Party Service.
We conduct due diligence on such third-party service providers prior to sharing your Personal Data with them. We share your Personal Data with such third-party service providers only on a contract basis where such service providers assure that they are and shall be in compliance with the applicable data protection laws.
We reserve the right to remove or add new sub-processors, which shall be notified to you and included in our Data Processing Agreement.
The following rights shall apply to certain individuals (some of which only apply to individuals protected by the GDPR):
When processing your request, we may ask you for additional information to confirm or verify your identity and for security purposes. We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. You can exercise your rights by submitting a request here.
You may delete your account by submitting a request to privacy@userguiding.com. If you delete your account, any association between your account and personal data we store will no longer be accessible.
We do not offer our products or services for use by children and, therefore, we do not knowingly collect personal data from, and/or about children under the age of 18. If you are under the age of 18, do not provide any personal data to us without the consent of a parent or a legal guardian.
Business Website: https://userguiding.com/
If you have any questions, concerns, or complaints, or if you wish to exercise your rights, we encourage you to contact us at privacy@userguiding.com.