Privacy Policy
With this privacy policy we would like to inform you about how we process personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal stipulations on data protection.
1. Name, Contact Details of the Responsible Party, Our Role and the Scope of This Policy
YouScan Limited,
2 Agias Elenis, 6th Floor,
1060, Nicosia, Cyprus
This Privacy Policy explains how YouScan processes personal data about website visitors, users of the Services and business contacts when acting as a controller. This includes processing for account administration, contracting, billing, relationship management, service communications, support and security.
We also act as an independent controller for public-source personal data that we collect and maintain independently, including historical data maintained as part of that processing. Our handling of online-author data, and our customers’ separate responsibilities for their own use of that data, are explained in our Author Privacy Policy (available at https://youscan.io/author-privacy-policy/).
Where a customer provides personal data for us to process on its behalf, we act as a processor or sub-processor for that activity. This also applies where we expressly agree to carry out a separate processing activity exclusively on the customer’s documented instructions and without an independent purpose of our own. Our role depends on the actual processing and applicable data protection law.
Our Data Processing Addendum (available at https://youscan.io/data-processing-addendum/) sets out our data-protection obligations to customers. It does not limit your rights under applicable data protection law.
2. Data Protection Officer
Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our data protection officer as follows:
External Data Protection Officer
ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer and Stefanie Bauer
Bei den Mühren 5, 20457, Hamburg, Germany
If you have any questions or concerns regarding your information, please contact privacy@youscan.io.
If you wish to communicate directly with our data protection officer (because you have a particularly sensitive matter for example), please contact them by post, as communication by e-mail could always have security gaps. Please state in your request that your concern relates to the company “YOUSCAN Limited”.
3. Personal Data
Personal data is all information about identified or identifiable person. This includes the following categories of personal data that we process:
Your contact details (such as first and last name, address, e-mail address, phone number);
Your correspondence with us;
Log files with information about your visit to our website;
Identification numbers (such as social security number, tax number, tax ID, passport or ID card number, insurance numbers);
Payment data (such as bank account number, credit card number, financial institution);
Online identifiers (such as cookie IDs, IP addresses, advertising IDs);
Customer data (such as invoice data, user profiles, address, order history, payment data).
4. Use of Cookies
A cookie is a text file containing an identification number which, when the website is used, is transmitted to the user's computer together with the other data actually requested and stored there. The file is kept there for later access and serves to authenticate the user. Since cookies are only simple files and not executable programs, they do not pose any danger to the computer.
Depending on the settings selected by the user in their internet browser, the latter automatically accepts cookies. However this setting can be changed and the storage of cookies deactivated or set in such a way that the user is informed as soon as a cookie is set. If the use of cookies is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the internet browser used and thus permanently object to the setting of cookies.
Cookies that are already active can be deleted at any time via the settings of your internet browser or other software programs. We may work together with advertising partners who help us to make our online offer more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (cookies from third parties).
Our website primarily uses the following four types of cookies:
Operationally Necessary Cookies
These cookies are essential for the operation of our website. They make it possible for you to browse and use our website. If you disable these cookies, the website will not function correctly.
Performance Cookies
These cookies gather information about how visitors use and interact with our Services. For example, performance cookies tell us which pages are popular, monitor traffic to our website and compile anonymous analytic information. Performance cookies can also be used to identify and remedy operational problems with the website.
Functionality Cookies
These cookies are used to recognise and remember your preferences. For example, functionality cookies may use information, such as your location, to make sure that you arrive at a version of our Site that is specific to your city or region.
Advertising Cookies
These cookies are used to show relevant advertising about our Services on third party websites (i.e. websites that we do not own or operate). When you visit our website, we will serve a cookie on your device. This cookie will have information about how you interacted with our website, such as what pages on the site you looked at. Then, if you visit a website within an ad network that we work with, the ad network will read the cookie from your device and show you relevant advertising about our Services.
5. Purpose of Processing
We collect and collate information that you either directly provide or that we infer about you while using our Services. If you can be identified from this information, and it relates to you, then it will be your Personal Data.We may also collect data about you from public sources, advertising networks, internet service providers (ISPs), analytics providers, social networks and operating systems and platforms.
Depending on the services used, YouScan may process the data for the following purposes:
providing the Services, including technical support;
providing this website and keeping it updated;
identification and authentication;
billing;
product and operational improvements, monitoring of the quality of the Services;
introducing new features;
market research and business development;
as well as marketing and advertising.
The purposes listed above do not apply automatically to every category of personal data. In particular, they do not authorise us to use personal data processed on a customer’s behalf for our own marketing, advertising or unrelated product development. Processing on a customer’s behalf remains subject to the customer’s documented instructions, the applicable Data Processing Addendum and applicable data protection law.
6. Legal Basis
We base the processing of your data on the following legal bases:
Your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR);
The initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR);
The fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR);
The implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR).
We base our processing activities either on our legitimate interest to provide services that are technically functional and user-friendly, or as a part of the contract for the provision of YouScan Services. In certain cases, we may process your data to comply with legal or contractual obligations.
When processing your data, we pursue the following legitimate interests:
The improvement of our Services;
The protection of our Services and products against misuse;
The production of statistics.
Where you act on behalf of a customer or business partner, we generally process your business contact and account-administration data on the basis of our legitimate interests in managing that relationship, administering and securing accounts, handling billing and providing support, unless another legal basis applies. We assess those interests against your rights and freedoms. We rely on contractual necessity where processing is necessary for a contract with you personally, or for steps you request before entering into such a contract. The purposes and legal bases for our independent processing of online-author data are explained in our Author Privacy Policy.
7. Requirement or Obligation to Provide Data
Unless this is expressly stated, the provision of your data is not required or obligatory.
8. Storage Period
We retain personal data that we process as a controller only for as long as necessary for the purposes described in this policy and permitted by applicable law. The retention period depends on the type of data, the purpose of processing, our relationship with you, applicable legal retention requirements and relevant security needs. We also take account of valid requests to delete, restrict or stop processing personal data.
Personal data that we process on a customer’s behalf is retained, returned and deleted in accordance with the applicable Data Processing Addendum, the customer’s documented instructions and applicable law. This includes the treatment of backup copies and any legally required retention.
Public-source personal data that we maintain independently is subject to the retention criteria described in our Author Privacy Policy, including applicable source requirements and data-protection obligations. Ending a customer’s subscription does not, by itself, require deletion of data that we lawfully maintain independently.
9. Data Recipients and Data Sources
The disclosures described in this section depend on the relevant data and processing purpose and remain subject to applicable data protection law. Where we process personal data on a customer’s behalf, disclosure to affiliates, service providers or other recipients is also governed by the applicable Data Processing Addendum and the customer’s documented instructions.
Affiliated entities
We may share your data with any member of our company group (our subsidiaries, parent companies, and affiliates).
Unaffiliated entities
When processing your data, we work together with the following service providers who have access to your data:
business partners, suppliers, and sub-contractors – for the performance of any contract we enter into with them;
analytics, ISPs, and search engine providers – for analytics and improving our website and Services;
advertising networks and social networks – for marketing and communications;
government entities, law enforcement and others – for fraud protection, security and verification services;
for potential threats, violations and legal process;
to comply with the law;
prospective buyers – if a third party acquires us or our assets, your Personal Data may be part of the transferred company or assets;
provider of web analysis tools;
web hosting and web development providers;
service provider for it development services;
sales service provider;
payment service provider;
call center;
e-mail and newsletter provider;
service provider for editing and translations;
CRM system service provider;
cloud services;
conference and webinar software;
service provider for online surveys;
service provider for chat software;
social media platforms;
service provider for bookkeeping and invoicing;
provider for external document management;
provider for application management software.
Service Providers, Subprocessors and Security Review
We use service providers to support our Services, including hosting, security, technical support and AI-enabled functionality. Where a provider processes personal data on our behalf while we act as a controller, it acts as our processor. Where it assists us in processing personal data on a customer’s behalf, it acts as a subprocessor for that activity. A provider’s role depends on the processing it performs.
We maintain information about our subprocessors in our Trust Center (available at https://trust.youscan.io/). Their engagement, and any required change notices and objection rights, are governed by the applicable Data Processing Addendum and data protection law.
Before engaging processors or subprocessors, we assess their security and privacy arrangements and put appropriate contractual safeguards in place. The assessment takes account of the services provided, the data involved and the relevant processing risks.
Data Sources
If we do not receive the data from you, or from the devices you use, we receive it from the following sources:
Social media platforms but only if the data is publicly available;
Advertising networks (like SEMRush, Snov, Crozdesk, etc.);
Data on B2B contacts of specialised service providers (like ZoomInfo, Lusha, Prospect.io, etc.);
Marketing platfroms (like Netfeedr, Rainfocus, Statamic, etc.);
Professional collaboration tools and platforms (like, Notion, Oreilly, Phantombuster, Jetbrains, etc.);
Analytical networks and solutions (like, Sherlockscore, Amplitude, Segment, etc.);
10. Transfer to Third Countries
Personal data may be transferred to, or accessed from, countries outside the European Economic Area, including the United States and Ukraine.
Where a transfer is covered by an applicable European Commission adequacy decision, we may rely on that decision. Otherwise, we use appropriate safeguards, such as European Commission-approved standard contractual clauses, or another transfer mechanism permitted by applicable data protection law. The safeguards reflect the roles of the parties and the relevant processing, and we apply supplementary measures where required.
International transfers governed by our Data Processing Addendum are also subject to its transfer provisions.
You may contact privacy@youscan.io for information about the safeguards applicable to your personal data and to request a copy. Where necessary, we may redact confidential information while providing the information required by applicable law.
11. Your Rights
As a data subject, you have the following rights:
To request information about the processing of your data, as well as to receive a copy of your personal data. Among other things you may request information on the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
To receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge;
To correct your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
To have your data deleted or blocked;
To have the processing restricted;
To object to the processing of your data;
To revoke your consent to the processing of your data for the future; and
To complain to the responsible supervisory authority about unauthorised data processing.
We respond to requests concerning personal data for which we act as a controller. Where a request concerns data that we process solely on a customer’s behalf, we assist the relevant customer and may direct or forward the request to the responsible customer or controller, where appropriate and legally permitted. This does not affect our responsibility for our own independent processing or your rights under applicable data protection law.
You may file your request (revoke your consent, etc.) via Data Subject Access/Opt-Out Request Form available at https://youscan.io/gdpr-request/ or by sending email to privacy@youscan.io
12. Use of YouTube API Services & Google Privacy Policy
Our API utilizes YouTube API services as a component of its operations to provide you with an enhanced user experience. As such, by using our API, you are acknowledging and agreeing to the connected use of YouTube API Services under the terms usually available at https://www.youtube.com/t/terms
In addition, the usage of YouTube API Services is subject to the Privacy Policy of Google, which usually can be accessed through the following link: http://www.google.com/policies/privacy (“Google's Privacy Policy”). We encourage you to review Google's Privacy Policy, as it provides important information about how your data is handled when you use YouTube API Services through our API.
Please note that your interactions with YouTube API Services are not covered by our Privacy Policy, but rather by Google's Privacy Policy. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party services, including YouTube API Services.
Your use of our API and YouTube API Services signifies your agreement to this Section of our Privacy Policy. If you do not agree to our Privacy Policy and to this Section, in particular, please refrain from using our API and YouTube API Services. Your continued use of our API following the posting of changes to this Privacy Policy shall be deemed as your acceptance of those changes.
Your acceptance of these terms is required in order to use our API and YouTube API Services. If you do not agree to Google's Privacy Policy, please refrain from using our API and the associated YouTube API Services.
Version of the Privacy Policy
If our processes change, we adjust the information in this privacy policy.
Status of this privacy policy: September 11, 2026.