At YOOtraffic.com, we are committed to protecting the privacy and security of our users' personal information. This Privacy Policy describes how we collect, use, and disclose personal data when you use our website, our dashboard at app.yootraffic.com, or any other online services that we offer (collectively, the "Services"). It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
YOOtraffic is the controller of the personal data described in this policy. For any question about this policy or your data, or to exercise any of your rights, contact us at support@yootraffic.com.
Information we collect
- Account data: your name, email address, and password (stored only in hashed form), and a record of the legal documents you accepted or acknowledged at registration (the Terms and Conditions and this Privacy Policy), with their revision dates, the time, and the IP address and browser from which you did so.
- Payment data: the amount, currency, date, payment method, and status of each payment, and your confirmations given at checkout (such as the acceptance of the Terms). Card details are entered on the payment processor's page and are never received or stored by us; from payment providers we receive only the transaction data needed to confirm the payment.
- Campaign data: the websites, pages, keywords, settings, schedules, and statistics of the campaigns you create.
- Technical data: IP address, approximate location derived from the IP address (country), device and browser type, operating system, and logs of access to the Services.
- Marketing attribution data: the advertising source (UTM tags) and referral code through which you arrived, stored in cookies.
- Communications: messages you send us by email or through the chat widget.
- Refund and verification data: only when you request a refund or when we carry out checks under the Terms and Conditions (sections 12 and 20): the sending and receiving wallet addresses and transaction hashes of the payment and the refund, the results of screening these against sanctions lists and fraud and money laundering risks, documents you send us (such as an export of your exchange transaction history, an identity document, or an explanation of the source of funds), the amount of a test transfer and your confirmation of it, and, for larger refunds, a recording of a video call in which you show your exchange account.
Why we use your data and on what legal basis
- To provide the Services (create and run your account, process payments and campaigns, provide support): performance of the contract with you (Article 6(1)(b) GDPR).
- To keep accounting and tax records and respond to lawful requests: compliance with legal obligations (Article 6(1)(c) GDPR).
- To keep proof of your acceptance of the Terms and your checkout confirmations, to handle complaints, chargebacks, and disputes, and to establish or defend legal claims: our legitimate interests (Article 6(1)(f) GDPR).
- To prevent fraud and abuse and to secure the Services, including showing the payment methods available in your country: our legitimate interests (Article 6(1)(f) GDPR).
- To verify refund requests and the source of payments, and to prevent money laundering and sanctions violations (including the refund and verification data above): compliance with legal obligations where sanctions or anti-money laundering law applies to us (Article 6(1)(c) GDPR), and otherwise our legitimate interests in making sure that refunds reach their rightful owner and that our Services are not used to launder money (Article 6(1)(f) GDPR). We tell you before a video call is recorded. You are not required to provide these data, but without them we cannot make a refund to a source other than the one the payment was sent from, and your balance remains available for the Services.
- To measure website traffic and the effectiveness of our advertising (analytics and advertising cookies): your consent (Article 6(1)(a) GDPR), which you can withdraw at any time in the cookie banner.
- To send you news and promotional messages about our Services: our legitimate interests in direct marketing of similar services to existing customers, or your consent where the law requires it. You can opt out at any time using the link in each message or by contacting us.
We do not sell your personal data and we do not share it with third parties for their own marketing purposes. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Who we share your data with
We share personal data only with service providers that process it on our behalf and under our instructions, and only to the extent needed for the purposes above:
- Payment processors: Stripe, Enot, and Bitcart.
- Hosting and infrastructure providers that run our servers and databases.
- Email delivery providers that send account and service emails.
- Tawk.to, which provides the support chat widget.
- Google (Google Analytics and Google Ads measurement), only if you consent to analytics or advertising cookies.
- CookieScript, which manages your cookie consent.
- Blockchain screening providers (such as Chainalysis), which check wallet addresses against sanctions lists and fraud and money laundering risks; they receive the wallet addresses and transaction hashes, not your name or documents.
- Video conferencing providers, when we hold a verification call with you.
We may also disclose personal data to courts, law enforcement, or other authorities when required by law, and to professional advisers (such as lawyers and accountants) under a duty of confidentiality.
International transfers
Some of these providers are located, or process data, outside the European Economic Area, including in the United States. Where this happens, we rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.
How long we keep your data
- Account and campaign data: for as long as your account is active, and deleted or anonymized within 12 months after the account is closed, unless a longer period applies below.
- Payment records and invoices: for as long as required by accounting and tax law, typically five years from the end of the year in which the payment was made.
- Records of accepted or acknowledged legal documents, checkout confirmations, and data related to complaints or disputes: until the related claims become time-barred under applicable law.
- Refund and verification data, including documents and video call recordings: five years from the end of the year in which the refund request was decided, whether the refund was made or refused.
- Technical logs: up to 12 months.
- Cookies: for the period shown in the cookie banner.
Cookies
We use strictly necessary cookies to run the website and the dashboard (for example, to keep you signed in and to remember your cookie choices), and cookies that store the advertising source and referral code through which you arrived. Analytics and advertising cookies are used only with your consent, which you give, refuse, or withdraw in the cookie banner at any time.
Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased, where there is no legal reason for us to keep it;
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests, including direct marketing at any time;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, write to support@yootraffic.com from the email address registered on your account. We respond within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or in Poland with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).
Providing your account and payment data is necessary to conclude and perform the contract; without it we cannot provide the Services.
Children
The Services are not directed to children. You may register only if you meet the minimum age to enter into contracts in your country, and in any case not under the age of 16.
Security
We take appropriate technical and organizational measures to protect personal data, including encrypted connections (TLS) and hashed passwords. No method of transmission or storage is completely secure, and we cannot guarantee that unauthorized third parties will never be able to bypass these measures.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time by posting a revised version on our website. If we make any material changes, we will notify registered users by email or by a notice in the dashboard before the changes take effect.
Contact us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at support@yootraffic.com.
Date of Last Revision: October 12, 2026