Privacy Policy

a man and a woman are reading a book

UserGuiding is an intuitive and customizable onboarding software where companies can design continuous-seamless onboarding processes, provide real-time & interactive customer support, and discover what users think about their product.

To provide our services, we collect personal data from our users. We value your data and we are committed to being transparent about the data we collect from you.

Business Name: YNOT Partners, INC

Business Address: 320 Cobble Creek Curve 101 Newark, DE 19702

Business Website: https://userguiding.com/

This Privacy Policy applies to YNOT PARTNERS, INC., which provides a SaaS solution to present new and existing users with a smooth experience on your websites (hereinafter ‘’UserGuiding’’). The terms ‘’we’’, or ‘’our’’ used in this Policy mean our organization as the context requires.

Userguiding respects the privacy of individuals, and is committed to protecting the information of visitors to the website ("Visitors") where Userguiding acts as the data controller, and representatives or end users of the entities that register to use the Userguiding products and services through the Website ("Subscriber") where we act as a data processor. 

Your data privacy questions and requests should be submitted to the Subscriber in its capacity as your Controller while you are interacting with the product or services of the Subscriber.

To ensure transparency this privacy policy ("Privacy Policy") governs how we process personal data we collect or receive from or about you including, but not limited to the following use cases:

  • When you visit our Website
  • When you create an account and when you log in to our  product
  • When you download and create guides by embedding Javascript snippets and set up our Chrome Extension
  • When you interact with onboarding material and provide us with feedback
  • When we acquire your data from third-party sources
  • When we use the personal data of our subscribers (e.g. contact details, payment information)
  • Providing Customer Support
  • When you interact with us on our social media profiles and our blog (e.g., Facebook, Reddit, Twitter, LinkedIn)

 

Table of contents:

  1. Information We Collect and How We Process It
  2. Retention and Security of Personal Data
  3. Transfers of Personal data
  4. Californian Residents Privacy Notice Section
  5. Third-Party Services
  6. Your Rights
  7. Use by Children 
  8. How to Contact Us

Information we collect and how we process it

When you visit our Website

Personal Data:

  • IP address
  • Browser type
  • Operating system
  • referring URLs
  • your use of our website, and other clickstream data.

Source: 

  • We obtain the personal data directly from you
  • We obtain personal data from third parties

Purpose of Collecting:

  • To provide certain features of the Website
  • To enhance your user experience
  • To understand and save your preferences for future visits
  • To advertise to you on other sites
  • To compile aggregate data about site traffic and site interaction so that we can offer better Website experiences and tools in the future

Legal Basis:

  • Legitimate interest (e.g. activity and session logs)
  • Consent (e.g. marketing)

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Intercom (communication, analytics)
  • Cloudflare (security)
  • Hubspot (CRM)
  • Linkedin (analytics and advertising)
  • Facebook (analytics and advertising)
  • Quora (analytics and advertising)
  • Reddit (analytics and advertising)
  • Twitter (analytics and advertising)

Retention Period:

Please refer to our cookie policy in order to see details regarding how we keep your data.

Consequence of Not Providing Data:

  • Certain Website features may not be available
  • Cannot enhance your user experience
  • Cannot understand and save your preferences for future visits
  • Cannot advertise to you on other sites
  • Cannot compile aggregate data about site traffic and site interaction so that we can offer better Website experiences and products in the future.

 

When you create an account and when you log in to our product

Personal Data:

  • First name
  • Last name
  • Company 
  • Email address
  • Telephone
  • Session Information
  • Usage Information
  • Any other information that you provide us (e.g. in the context of product support) 

Source:

  • We obtain the personal data directly from you

Purpose of Collecting:

  • To be able to create a user account/profile
  • To be able to log in and use the service
  • To perform activities within the product,
  • To receive notifications and to collaborate within the product.
  • To provide you with our services

Legal Basis:

  • Processing is necessary for the performance of a contract
  • Legitimate interest (e.g. to analyze aggregate data).

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Intercom (communication, analytics)
  • Cloudflare (security)
  • Amplitude (analytics)
  • Sendgrid (transactional emails)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • You can not create an account.
  • You can not log in.
  • You can not use the service
  • You can not perform activities within the product
  • You can not receive notifications and collaborate within the product.
  • We can not provide you with our services

 

When you download our Chrome Extension and create content using it

Personal Data:

  • Unique ID
  • Operating System
  • Country

Source:

  • We obtain the personal data from the Chrome Web Store

Purpose of Collecting:

  • To be able to create interactive onboarding materials
  • To be able to share your interactive guides with end users
  • To receive feedback and communicate with the end users
  • To provide you with our services

Legal Basis:

  • Processing is necessary for the performance of a contract to which the data subject is a party 

Third Parties We Share Data With:

  • Google Chrome Web Store
  • Google Workspace

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

However, certain metadata are still maintained by Google Web Store per their privacy policy.

Consequence of Not Providing Data:

  • You can not create interactive guides, hotspots, or NPS
  • You can not show your interactive guides, hotspots, or NPS to end users
  • You can not communicate and receive feedback from the end users
  • You can not perform activities within the product

 

When you install our JS snippet and interact with guides, tours, NPS and provide us feedback 

Personal Data:

  • Unique ID
  • Custom Attributes (determined solely by subscribers) 
  • End User Segment
  • Session Information
  • User Information
  • Any other information provided by the subscribers

Source:

  • We obtain the personal data from the subscriber. We act as the sole facilitator of the transactions and are deemed as a data processor under the instructions of the subscribers

Purpose of Collecting:

  • To allow subscribers to manage their onboarding materials through UserGuiding
  • To provide subscribers with our services through our service contract
  • To receive notifications and communicate with the end users
  • Troubleshooting and securing the platform

 Legal Basis:

  • Processing is necessary for the performance of a contract

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform(analytics)
  • Intercom (communication, analytics)
  • Cloudflare (security)
  • Sendgrid (transactional emails)
  • Zoho Desk (customer support)
  • FullStory (Session recording)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period outlined in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • Subscribers can not use our product
  • Subscribers can not perform activities within the product
  • You cannot receive notifications and to interact with the content

User Analytics Feature

Personal Data:

  • End User Unique ID
  • Custom Attributes (determined solely by subscribers) 
  • End User Segment (determined solely by subscribers)
  • Session Information
  • Any other information that provided by the subscribers

Source:

  • We obtain the personal data directly from you

Purpose of Collecting:

  • To be able to deliver comprehensive reports to Subscribers regarding how end users  interact with onboarding materials created using the Userguiding platform 
  • To be able to better monitor the usage and communicate with the end users

Legal Basis:

  • Processing is necessary for the performance of a contract

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Intercom (communication, analytics)
  • Amplitude (analytics)
  • Cloudflare (security)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Consequence of Not Providing Data:

  • You can not use our analytics features and services
  • You can not receive comprehensive reports regarding how end users  interact with onboarding materials created using the Userguiding platform 
  • You can not monitor the usage and provide a better communication to the end users

 

When we acquire your personal data from third-party sources (such as analytics tools)

Personal Data:

  • Unique ID
  • Country
  • City
  • Session Information
  • Usage Information
  • Operating System

Source:

  • We obtain personal data from third parties

Purpose of Collecting:

  • To allow us to help show more targeted and relevant content
  • To provide subscribers with our services
  • To gather analysis or valuable information so that we can improve our product
  • To monitor the usage of our Service
  • To advertise to you on other sites

  Legal Basis:

  • Legitimate Interest (marketing)
  • Consent

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Intercom (communication, analytics)
  • Cloudflare (security)
  • Sendgrid (transactional emails)
  • Linkedin (analytics and advertising)
  • Facebook (analytics and advertising)
  • Quora (analytics and advertising)
  • Reddit (analytics and advertising)
  • Twitter (analytics and advertising)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • Certain Website features may not be available
  • Cannot enhance your user experience
  • Cannot understand and save your preferences for future visits
  • Cannot advertise to you on other sites
  • Cannot compile aggregate data about site traffic and site interaction so that we can offer better Website experiences and tools in the future.

 

When we use the personal data of subscribers 

Personal Data:

  • Full name
  • Email address
  • Phone number
  • Company
  • Payment information
  • Any other information that you decide to provide/supply us

Source:

  • We obtain the personal data directly from you

Purpose of Collecting:

  • To provide our products and services
  • To perform the applicable agreement
  • To communicate with our subscribers

Legal Basis:

  • Processing is necessary for the performance of a contract to which the data subject is party
  • Compliance with a legal obligation

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Intercom (communication, analytics)
  • Cloudflare (security)
  • Sendgrid (transactional emails)
  • Stripe (payments)
  • Profitwell (subscription data)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • Cannot provide our products and services
  • Cannot perform our contractual obligations
  • Cannot communicate with our customers

 

Providing Customer Support

Personal Data:

  • Contact Information
  • Problem Specifications
  • Session Information
  • Usage Information
  • Any other information that you provide us (e.g. in the context of product support)

Source: 

  • We obtain the personal data directly from you

Purpose of Collecting:

  • To enhance your user experience
  • Troubleshooting and securing the platform
  • To compile aggregate data about site traffic and site interaction so that we can offer better experiences

Legal Basis:

  • Processing is necessary for the performance of a contract

Third Parties We Share Data With:

  • Jira (troubleshooting)
  • Loom (troubleshooting)
  • Intercom (troubleshooting)
  • Zoho (troubleshooting)

Retention Period:

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period of time set forth in the Data Processing Agreement executed between UserGuiding and its Customers.

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • Cannot provide troubleshooting
  • Cannot enhance your user experience
  • Cannot compile aggregate data about site traffic and site interaction so that we can offer better Website experiences and products in the future

When you interact with us through our marketing events, on our social media profiles and our blog (e.g., Facebook, Reddit, Twitter, LinkedIn)

Personal Data:

  • Contact Information
  • Company Name 
  • Job title
  • Session Information
  • Usage Information

Source:

  • We obtain the personal data directly from you
  • We obtain personal data from third parties

Purpose of Collecting:

  • To help us show more targeted and relevant content
  • To send weekly newsletters 
  • To gather analysis or valuable information so that we can improve our product
  • To generate leads and contact prospective customers

Legal Basis:

  • Legitimate Interest (marketing)
  • Consent

Third Parties We Share Data With:

  • Amazon Web Services (hosting)
  • Google Cloud Platform (analytics)
  • Cloudflare (security)
  • Linkedin (analytics and advertising)
  • Facebook (analytics and advertising)
  • Quora (analytics and advertising)
  • Reddit (analytics and advertising)
  • Twitter (analytics and advertising)
  • Slack (community management)
  • Zoom (online event management)

Retention Period:

Please note that we may retain it for a longer or shorter period in accordance with data retention laws.

Consequence of Not Providing Data:

  • Certain blog features may not be available
  • Cannot measure the success of marketing events and webinars
  • Cannot advertise to you on other sites
  • Cannot compile aggregate data about interactions so that we can offer better experiences in the future

Internal Logs

We may also use some other information like session and usage information for fraud prevention and security purposes. 

The information inside the log files includes IP addresses, browser type, Internet Service Provider, date/time stamp, referring/exit pages, clicked pages and any other information your browser may send to us. We use such information for security purposes and to analyze trends, administer the Website, track users’ movement around the Website, and gather demographic information.

Retention and Security of Personal Data

Personal information that Userguiding processes on behalf of its Customers as a processor is retained for the period set forth in the Data Processing Agreement between UserGuiding and its Customers unless Userguiding is required to retain the Personal Data for a longer period to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. 

We have implemented commercially reasonable technical, organizational, and security measures designed to protect your data. However, please note that we cannot guarantee that the information will not be compromised as a result of unauthorized penetration to our servers. 

 

Transfers of personal data

Personal data collected by us is securely stored on Amazon Web Services (AWS) servers located in the European Union and the United States. For international data transfers, we rely on Standard Contractual Clauses (SCCs) to ensure compliance with applicable regulations. Customers subscribed to our Pro Plan have the flexibility to select their preferred data residency, choosing between EU or US data centers to align with their specific governance requirements. Additionally, if your organization requires tailored data residency options to meet strict data governance frameworks, we can accommodate those needs. For transfers of personal data outside the EU/EEA, we ensure that recipients commit to robust contractual agreements to safeguard your data.

In addition to the third parties mentioned above, we may share your data as follows: (i) with courts or competent authorities, to comply with applicable laws, regulations, and requests of law enforcement; (ii) in case we sell or transfer, or we consider selling or transferring, some or all of our business, shares or assets to a third party; (iii) if we are acquired by, or merged with, a third party entity, or in the event of bankruptcy; (iv) where you have provided your consent to us sharing or transferring your data.

 

The EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. Data Privacy Framework (UK Extension to the EU-U.S. DPF)

If you are a resident of the EEA or the UK, we will protect your data when it is transferred outside of the EEA and the UK by processing it in a territory that the European Commission has determined provides an adequate level of protection for personal data; or otherwise ensuring appropriate safeguards are in place to protect your personal data. For transfers of your data to:

  • UserGuiding is based in the US, we rely on the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), and the UK Extension to the EU-U.S. DPF (“UK-U.S. DPF”) as set forth by the U.S. Department of Commerce. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit https://www.dataprivacyframework.gov/;
  • recipients who are located outside of the EEA or the UK, we rely on the EU-U.S. DPF or UK-U.S. DPF-U.S. DPF where those recipients are located in the US or for onward transfers from the US, and otherwise we rely on the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA).

UserGuiding complies with the EU-U.S. DPF, and the UK-U.S. DPF as set forth by the U.S. Department of Commerce.  Imagine Privacy, Inc. has certified to the U.S. Department of Commerce that it adheres to (i) the EU-U.S. DPF Principles concerning the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles DPF Principles, the Principles shall govern.  To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, UserGuiding commits to resolve DPF Principles-related complaints about our collection and use of your Personal Information. EU and UK individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF, and/or the UK Extension to the EU-U.S. DPF should first contact UserGuiding through our [email protected] 

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, UserGuiding commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (“DPAs“), the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Under certain conditions, it may be possible to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms, see here for additional information.

UserGuiding remains responsible if its service provider, when acting on its behalf, processes personal data in a manner inconsistent with the DPF Principles, unless it is not responsible for the event giving rise to the damage.

The Federal Trade Commission has jurisdiction over UserGuiding’s compliance with the EU-U.S. Data Privacy Framework EU-U.S. DPF, the UK Extension to the EU-U.S. DPF.

 

Californian Residents Privacy Notice Section

The following section applies specifically to the personal data of California residents, as defined by the California Consumer Privacy Act (CCPA).

Processing Californian Personal Data
UserGuiding acts as a Service Provider under the CCPA when processing Californian Personal Data. We process such data strictly to perform the SaaS Agreement ("Business Purpose") or as otherwise permitted by the CCPA. 

As a Service Provider, we certify that:

(i) We will not sell or share Californian Personal Data.

(ii) We will not process Californian Personal Data outside the direct business relationship between UserGuiding and its customers, except as required by applicable law.

(iii) We will not combine Californian Personal Data with data collected from other sources unless it is received in connection with our obligations under the SaaS Agreement.

Compliance with CCPA Obligations
UserGuiding complies with all requirements applicable to a Service Provider under the CCPA, ensuring the same level of privacy protection required by the law. If we determine that we are unable to meet our obligations under the CCPA, we will promptly notify our customers.

We may retain, use, or disclose Californian Personal Data solely for the following purposes:

(i) Retaining and employing another Service Provider as a subcontractor, provided the subcontractor also meets the requirements of a Service Provider under the CCPA.

(ii) Detecting data security incidents or protecting against fraudulent or illegal activity.

(iii) Complying with federal, state, or local laws.

(iv) Responding to civil, criminal, or regulatory inquiries, investigations, subpoenas, or summons from federal, state, or local authorities.

(v) Cooperating with law enforcement agencies regarding activities that we reasonably and in good faith believe may violate laws.

(vi) Exercising or defending legal claims.

Ensuring Ongoing CCPA Compliance

Our customers may take reasonable and appropriate steps to verify that UserGuiding is processing Californian Personal Data by CCPA requirements and may act to stop and remediate any unauthorized use of such data. UserGuiding and its customers acknowledge and agree that the disclosure of Californian Personal Data by our customers to UserGuiding does not constitute monetary or other valuable consideration exchanged between the parties.

For more details about your rights under the CCPA and how UserGuiding processes personal data, please contact us at [email protected] .

Third-Party Services

We enable you to interact with third-party websites, products or services that are not controlled by us (“Third Party Service”). Please be aware that Third Party Services can collect Personal Data from you. Therefore, we encourage you to read the terms and conditions and privacy policies of each Third Party Service.

We conduct due diligence on such third-party service providers prior to sharing your Personal Data with them. We share your Personal Data with such third-party service providers only on a contract basis where such service providers assure that they are and shall be in compliance with the applicable data protection laws.

We reserve the right to remove or add new sub-processors, which shall be notified to you and included in our Data Processing Agreement.

Your Rights

The following rights shall apply to certain individuals (some of which only apply to individuals protected by the GDPR):

  • You can access the personal data we held about you. This can normally be exercised free of charge, however, we reserve the right to charge an appropriate fee where applicable;
  • You can request that we correct any personal data we hold that is inaccurate;
  • You can request the deletion of your data. Please note that in certain situations we are required to keep your data where applicable;
  • You can object to or request restrictions on processing your data;
  • You can request to receive your data in a structured, commonly used, and machine-readable format, and transmit that data to another controller;
  • You can object to profiling;
  • You can withdraw your consent at any time. 
  • You can request certain details of the basis on which your data is transferred outside the European Economic Area.
  • You have a right to lodge a complaint with your local data protection supervisory authority. 

When processing your request, we may ask you for additional information to confirm or verify your identity and for security purposes. We reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive. You can exercise your rights by submitting a request here.

Deleting your account

You may delete your account by submitting a request to [email protected]. If you delete your account, any association between your account and personal data we store will no longer be accessible.

Use by children

We do not offer our products or services for use by children and, therefore, we do not knowingly collect personal data from, and/or about children under the age of 18. If you are under the age of 18, do not provide any personal data to us without the consent of a parent or a legal guardian. 

Contact us

If you have any questions, concerns, or complaints, or if you wish to exercise your rights, we encourage you to contact us at [email protected].