Privacy Policy
This Privacy Policy describes the exhaustive protocols Yandaz USA Inc. ("Yandaz," "we," "us," or "our") follows regarding the collection, use, and disclosure of personal information. This document is designed to comply with U.S. federal regulations and state-specific privacy laws including the California Consumer Privacy Act (CCPA/CPRA), VCDPA, and CPA. By using our services, you consent to the data practices described herein.
1. Entity & Data Responsibility
Yandaz USA Inc., a Delaware corporation, is the primary entity responsible for your data. We operate as a "Business" under the CCPA and a "Controller" under various state privacy laws. Our data compliance infrastructure is designed to protect users across all 50 U.S. states, ensuring federal standards of data integrity and transparency.
2. Categories of Information Collected
Within the last 12 months, Yandaz has collected the following categories of personal information:
Identifiers: Legal name, alias, postal address, unique personal identifier, online identifier, IP address, email address, and account name.
Commercial Information: Records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
Internet Activity: Browsing history, search history, and information regarding your interaction with our website, application, or advertisements.
Geolocation Data: Precise physical location (if permitted via device settings) or approximate location derived from IP address.
3. Sources of Information
We aggregate data from three primary streams:
- Directly From You: Information provided during registration, profile completion, ad posting, and customer support communications.
- Automated Technologies: Data collected via cookies, web beacons, and pixels regarding your device hardware and software interaction.
- Third-Party Partners: Identity verification services, social media platforms (if you link your account), and credit reporting agencies for professional seller verification.
4. Business & Commercial Purposes
Yandaz processes your information for the following business purposes:
- Marketplace Integrity: Verifying accounts to prevent fraud and ensuring a high-trust environment for buyers and sellers.
- Targeted Advertising: Using behavioral data to show you advertisements and listings that are relevant to your interests and geographic location.
- Operational Improvements: Debugging to identify and repair errors that impair existing intended functionality.
- Legal Compliance: Responding to law enforcement requests and as required by applicable law, court order, or governmental regulations.
5. Biometrics & Automated Decision Making
Biometric Privacy Notice
Face Scanning & Identity Verification: To prevent identity theft, Yandaz may use automated biometric technology to compare a "selfie" with your government-issued ID. Under the Biometric Information Privacy Act (BIPA) and similar laws, we do not store raw biometric templates; we use encrypted mathematical representations solely for verification. These are purged after the verification window is closed or upon account termination.
Profiling: We use automated systems to detect patterns of fraudulent activity. If an automated decision results in account suspension, you have the right to request a manual human review of the decision.
6. Disclosure to Third Parties
Yandaz does not "sell" your personal information in the traditional sense. However, we "share" or "disclose" information for the following:
- Service Providers: Cloud hosting (AWS/Google), payment processing (Stripe/PayPal), and customer service software.
- Advertising Partners: We share pseudonymized IDs with ad networks to facilitate relevant marketing.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
7. State-Specific Privacy Rights
7.1 California Privacy Rights (CCPA/CPRA)
California residents have the right to:
- The Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- The Right to Delete: Request the deletion of personal information, subject to certain exceptions (e.g., completing a transaction).
- The Right to Correct: Request correction of inaccurate personal information.
- The Right to Opt-Out: Request that we do not "sell" or "share" your personal information for cross-context behavioral advertising.
Residents of Virginia, Colorado, Connecticut, and Utah possess similar rights under their respective state statutes. To exercise these rights, please visit our "Privacy Request Portal" or email our legal team.
8. Children's Online Privacy (COPPA)
Yandaz USA is a general audience platform and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information without parental consent, we will take immediate steps to delete such information and terminate the associated account.
9. Security & Data Retention
We implement industry-standard security measures, including TLS/SSL encryption and SOC 2 Type II compliant data centers. We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, inactive accounts are purged of sensitive data after 24 months of total dormancy.
If you have questions about this Policy or our privacy practices, please contact our Data Protection Office:
- Email: legal@yandaz.com
- Privacy Toll-Free (USA): 1-800-YANDAZ-HELP
- Mailing Address: Yandaz USA Inc., Legal Compliance Dept., [Insert US Address], USA.
© 2026 Yandaz USA Inc. This document was last updated on April 13, 2026.
