Privacy Policy

Interpretation and definitions

Interpretation

Capitalized terms used in this Privacy Policy have the meanings set out below. These definitions apply whether terms appear in the singular or plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique profile created for you to access all or part of the Service.
• Company refers to YukoPay Inc., operating from Canada.
• Cookies are small text files placed on your device by a website to remember preferences and support core functionality.
• Device means any hardware capable of accessing the Service, such as a computer, smartphone, or tablet.
• Personal Data means information that identifies or could reasonably identify an individual.
• Service means the YukoPay website, Google Forms add-on, checkout experiences, and related offerings we make available from time to time.
• Service Provider means a third party that processes data on our behalf to help deliver, secure, or analyze the Service.
• Usage Data means technical information generated automatically when you interact with the Service.
• Website means yukopay.com and its subpages.
• You means the individual or organization accessing or using the Service.

Information we collect

We may collect information you provide directly—such as when you fill out a form, install an add-on, or contact support—as well as information generated automatically when you use the Service. This may include Personal Data, Google account data, payment-related metadata, Usage Data, and Device Data.

Personal data

Depending on how you use the Service, Personal Data may include:

• Name and email address
• Phone number or mailing address, if you choose to provide them
• Account and support correspondence
• IP address and other Usage Data described below

Google data

Our add-ons integrate with Google Workspace. When you authorize YukoPay, you may grant access to data within your Google account. You are responsible for ensuring your collection and use of respondent or customer information complies with applicable laws, including rules governing consent, notice, and retention of personal data.

We request and use only the Google data needed to configure checkout, calculate amounts due, send payment requests, and update payment status in your connected Form and response spreadsheet. Examples include:

• Installer email address and locale preferences
• Form respondent email addresses used to deliver payment links
• Form identifiers, titles, descriptions, and theme settings for checkout pages
• Form response fields needed to calculate payment amounts
• Read/write access to your connected Google Form and linked spreadsheet to record payment status
• Limited Google Drive metadata when you select forms to connect

We do not sell Google user data. Google data is shared only with your chosen payment processor—and with support or infrastructure providers strictly as needed to operate the Service—after you connect and authorize those integrations.

YukoPay’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payment data

YukoPay does not collect or store full payment card numbers. Card and banking details you enter at checkout are transmitted directly to your selected payment provider. That provider is responsible for securing payment credentials. We may receive confirmation of payment status and limited transaction metadata to update your Google documents and provide reporting to you.

Usage data

We automatically collect Usage Data when you use the Service, such as your IP address, browser type and version, pages visited, timestamps, time spent on pages, device identifiers, operating system, and diagnostic logs. We use this information to maintain, secure, and improve the Service.

Cookies and similar technologies

We use cookies and similar technologies to operate the Website, remember preferences, and understand how visitors use our pages. These may include session cookies (removed when you close your browser) and persistent cookies (stored for a defined period).

• Essential cookies enable core features such as security, load balancing, and locale or currency preferences.
• Functional cookies remember choices you make—such as language or display currency—so you do not need to reselect them on every visit.
• Analytics cookies help us measure traffic and improve content. You can limit cookies through your browser settings, though some features may not work correctly if cookies are disabled.

How we use personal data

We may use Personal Data to:

• Provide, operate, and maintain the Service
• Create and manage your account and authorized integrations
• Process transactions and fulfill requests you initiate
• Send service, security, and support communications
• Respond to inquiries and troubleshoot issues
• Analyze usage trends and improve products and documentation
• Detect, prevent, and address fraud, abuse, or technical problems
• Comply with legal obligations and enforce our agreements
• Evaluate or complete a business transaction such as a merger or asset sale, with notice where required

We do not share your personal information with third parties for their independent marketing purposes without your consent.

We may disclose information to Service Providers under contract, to affiliated entities bound by this policy, in connection with a business transfer, when required by law, or with your explicit consent.

Third-party service providers

We work with carefully selected providers who process data on our behalf. They may access personal data only as needed to perform contracted services and must protect it appropriately. Current categories of providers include:

• Amazon Web Services — cloud hosting, storage, email delivery, and related infrastructure in Canada and other regions where we operate.
• Cloudflare — bot protection and security services on public-facing forms and pages.
• Google — APIs and Workspace integrations that power our Google Forms add-on.
• Payment processors you connect (such as Stripe, PayPal, or Square) — to authorize and settle transactions you initiate.

How long we keep data

We retain Personal Data only for as long as necessary for the purposes described in this policy, to meet legal obligations, resolve disputes, and enforce agreements. Usage Data is generally kept for a shorter period unless needed for security, debugging, or compliance.

• Test transaction records may be deleted after twelve (12) months.
• Live payment and order records may be retained for up to six (6) years to satisfy financial record-keeping requirements, after which they are deleted or anonymized.

International transfers

Your information may be processed in Canada and in other countries where we or our Service Providers maintain facilities. Data-protection laws in those jurisdictions may differ from the laws where you live. Where required, we implement appropriate safeguards for cross-border transfers.

When we disclose information

Business transactions

If YukoPay is involved in a merger, acquisition, financing, or sale of assets, Personal Data may be transferred as part of that transaction. We will provide notice before your data becomes subject to a different privacy policy.

Legal requirements

We may disclose Personal Data when we believe in good faith that disclosure is necessary to comply with law, respond to lawful requests by public authorities, protect the rights and safety of YukoPay, our users, or the public, or defend against legal claims.

Security and breach notification

We use administrative, technical, and physical safeguards designed to protect Personal Data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a breach is likely to pose a risk to your rights and freedoms, we will notify affected users without undue delay and, where required by law, within seventy-two (72) hours of becoming aware of the incident. Notice will describe the nature of the breach, the data involved, and the steps we are taking to address it.

Your privacy rights

Access

Where applicable law provides a right of access, you may request a copy of the personal information we hold about you by emailing support@yukopay.com. We will respond within thirty (30) days unless a longer period is permitted by law.

Erasure

You may request deletion of your personal data where applicable privacy laws allow. Submit requests to support@yukopay.com. Please note that deleting your data may disable your connected Google Form add-on, prevent outstanding payment links from being completed, and limit your ability to use YukoPay in the future.

California residents (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we collect, request deletion or correction, and opt out of the sale or sharing of personal information. YukoPay does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. Contact support@yukopay.com to submit a verifiable request; we will respond within forty-five (45) days where required.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child has provided us data without consent, contact us and we will take steps to delete it.

Links to other websites

Our Service may link to third-party websites or services we do not control. We encourage you to review the privacy policies of every site you visit. YukoPay is not responsible for the content or privacy practices of third-party sites.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when changes take effect. Material updates may also be communicated by email or a prominent notice on the Service. Continued use after changes are posted constitutes acceptance of the revised policy.

Contact us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please reach out:

• Email: support@yukopay.com
• Website contact form: yukopay.com (Contact section)

You may also contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province or state if you wish to lodge a complaint.