Legal
Privacy Policy
Last updated: October 28, 2026
Your privacy matters to us. This policy explains what data Yubbox collects, why we collect it, and how we protect it. We are committed to transparency and handling your data responsibly.
1. Information We Collect
We collect the following categories of information: Account data: Name, email address, and hashed password provided at registration. Listing data: Ad titles, descriptions, images, web links, and targeting preferences you provide. Behavioural signals: When a visitor views or clicks your ad, we record anonymised signals including scroll depth, time on ad, device type, session ID, and geographic country (derived from IP address). We do not store raw IP addresses beyond 24 hours. Payment data: Payments are processed by Stripe. We store only the transaction amount, status, and date — never your card details. Usage data: Pages visited, actions taken, and feature usage within the platform, used to improve the product.
2. Identity Verification (Optional)
Advertisers can choose to verify their identity to earn the ✓ Verified badge. Verification is never required to use Yubbox. What we collect: your full legal name, a photo of a government-issued ID (passport, national ID card or driver's licence) and, for businesses, the registered business name and a business registration certificate. Why: only to confirm that you are who you say you are, display the Verified badge on your listings, and prevent fraud and impersonation. We do not use these documents for marketing, profiling or any other purpose, and we never show them to other users. How we protect them: • Documents are stored in private, access-restricted storage that is not reachable from the internet, under random file names that contain no personal details. • Location and device data (EXIF/GPS) is removed from photos when you upload them. • Only authorised members of our verification team can view a document, inside a secure viewer that blocks downloading and printing and watermarks every view with the reviewer's identity. • Every view is recorded in an audit log. How long we keep them: documents are permanently deleted 30 days after a verification decision (approval, rejection or revocation). After that we keep only the outcome — your verification status, the date, and the reviewer — for as long as your account exists. Legal basis: your consent, which you give when you submit your documents. You can withdraw it at any time by contacting [email protected]; we will delete any documents we still hold and remove your Verified badge. We do not sell or share verification documents with third parties, except our storage provider (under a data processing agreement) or where required by law.
3. How We Use Your Information
We use collected data to: • Operate and improve the Yubbox platform • Deliver your ads to the correct target audiences • Provide analytics and intelligence insights to advertisers • Process payments and send receipts • Send important account notifications (expiry alerts, policy updates) • Detect and prevent fraud and abuse We do not use your data for automated decision-making that produces legal effects.
4. How We Share Your Information
We do not sell your personal data. We share data only in these limited circumstances: • Stripe: For payment processing. Governed by Stripe's Privacy Policy. • Infrastructure providers: Hosting, storage, and CDN providers operate under strict data processing agreements. • Legal obligation: If required by law, court order, or to protect the rights and safety of Yubbox and its users. All intelligence benchmarks shown in the platform (Yubbox Spy, category comparisons) are fully anonymised and aggregated across a minimum cohort of 5 advertisers before being displayed.
5. Cookies & Tracking
Yubbox uses: • Session cookies: Required for authentication and to keep you logged in. • Analytics signals: Behavioural data (scroll depth, time on page) is collected server-side via our own analytics system — we do not use third-party tracking pixels or Google Analytics. You can disable cookies in your browser settings, but this will prevent login functionality.
6. Data Retention
• Account data: Retained for the lifetime of your account plus 90 days after deletion. • Analytics events: Retained for 24 months, then aggregated and anonymised. • Payment records: Retained for 7 years as required by financial regulations. • Ad content: Removed 30 days after listing expiry unless you relist. • Identity documents: Permanently deleted 30 days after a verification decision; only the outcome is kept (see section 2).
7. Your Rights
Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your account and associated data • Object to or restrict certain processing • Data portability (receive your data in a machine-readable format) To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data Security
We implement industry-standard security measures including: • Passwords hashed with bcrypt • All data transmitted over HTTPS/TLS • Database access restricted to application servers only • Identity documents kept in separate private storage, viewable only by authorised reviewers, with every access logged • Regular security reviews No system is completely secure. If you suspect unauthorised access to your account, contact us immediately.
9. International Transfers
Yubbox operates globally. Your data may be stored and processed in countries outside your own. We ensure appropriate safeguards are in place for all international transfers, including standard contractual clauses where required.
10. Children's Privacy
Yubbox is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email for material changes. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact
For privacy-related enquiries, contact our Data Protection contact at: [email protected]