Privacy Policy

YoZombie Privacy Policy

YoZombie, L.L.C. ("YoZombie," "we," "us," or "our") operates the YoZombie mobile application and related websites (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use YoZombie.

By using our Platform, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use.

1. Information We Collect

We collect information to provide, operate, secure, and improve our services for all users of the Platform, including both Businesses and independent Workers ("Workers").

A. Information You Provide

• Account Information – Name, email, password, phone number, profile photo, and verification information (for example, government-issued ID or other verification documents where required for trust and safety).
• Payment Information – Stripe Connect account details, linked payout account information, and information required for tax reporting where applicable. YoZombie does not store full payment card numbers.
• Profile Details – Skills, bio, and preferences (for Workers); business name, address, and contact details (for Businesses).
• Communications – Messages you send through in-app chat, support requests, and emails you send to us.
• Gig Data – Gig posts, acceptances, cancellations, completions, ratings, and QR check-in/out scans and related verification data.

B. Information We Collect Automatically

When you use YoZombie, we automatically collect certain information about your device and usage:

• Device and App Data – Device identifiers, operating system version, app version, browser type, IP address, and diagnostic data (including crash logs and similar technical logs).
• Usage Data – Pages and screens viewed, features used, Gigs viewed, and actions taken (for example, posted, accepted, cancelled, completed), including timestamps and related technical signals.
• Location Data –
  • Approximate location (for example, derived from your IP address) to help display relevant Gigs and improve matching; and
  • Precise location only if you grant device permission. We do not require precise location to use the Platform.
  
  Check-in/out verification may use QR scans and time-based signals. Where permitted and available, location data may be used as an additional fraud, trust, and safety signal.
• Cookies & Analytics – We use tools such as Firebase Analytics and Crashlytics to collect usage, performance, and diagnostic data (for example, feature usage patterns and crash reports) to improve Platform stability and user experience. Where feasible, we use aggregated and/or de-identified data for analytics and performance monitoring.
• Operational Communication Metadata – We may collect limited technical metadata related to operational communications (for example, delivery status events, device push tokens, or similar identifiers needed for routing notifications). We use this information to support deliverability, troubleshoot issues, and prevent abuse.

C. Information from Third Parties

• Stripe Connect – Provides payment account verification, compliance-related status information, payout status, and dispute/chargeback status information.
• Referral System – We track referrals using unique codes and associated attribution data to apply bonuses and prevent referral abuse.
• Legal and Compliance Sources – Where legally permitted, we may verify certain business or identity information (for example, business registrations or identification information) through third-party verification providers or public records.

2. How We Use Information

We use the information we collect to operate, maintain, and improve the Platform, ensure compliance, and protect both Businesses and Workers.

YoZombie processes personal information only where we have a lawful basis to do so—such as when it is necessary to provide our services, fulfill legal obligations, or pursue legitimate business interests (for example, maintaining Platform security and preventing fraud). We collect, use, and retain only the minimum amount of personal data reasonably necessary to achieve the purposes described in this Privacy Policy.

A. Providing Our Services

We use personal information to:

• Create and manage user accounts for both Businesses and Workers;
• Facilitate Gig postings, acceptances, cancellations, and completions;
• Process payments through Stripe Connect. Stripe may authorize, hold, or restrict funds availability in connection with a Gig until completion, cancellation, or dispute outcomes under our Terms and Stripe's policies. YoZombie does not take custody of funds and is not a bank, money transmitter, or escrow agent;
• Deliver operational communications such as in-app notifications, messages, and updates; and
• Track referrals and apply bonuses accurately.

B. Maintaining Compliance and Platform Integrity

We use information to:

• Support compliance and Platform integrity (for example, maintaining records of Gig activity and payments; facilitating identity and payment verification through Stripe; and responding to lawful requests). YoZombie does not determine any user's employment status;
• Generate, maintain, or transmit necessary forms and records for tax, accounting, and compliance purposes where applicable (for example, information used by payment processors to issue tax forms, and receipts/invoices for Businesses); and
• Maintain acceptance, cancellation, and completion history for auditing, fraud prevention, and dispute resolution purposes.

C. Communicating With You

We may use contact information to:

• Send Gig confirmations, status updates, and payout notifications;
• Respond to inquiries and provide customer support; and
• Notify you about changes to our Terms of Service, Privacy Policy, or material Platform updates.

D. Improving and Securing the Platform

We use information (including aggregated and/or de-identified data where feasible) to:

• Detect fraud, abuse, and unauthorized activity;
• Improve performance, reliability, user experience, and matching accuracy; and
• Develop and test new features and maintain Platform stability.

If automated systems are used to help detect fraud, suspicious activity, or policy violations, they are used for Platform integrity and safety purposes and are not used to make employment, credit, housing, or insurance eligibility decisions.

E. Legal and Safety Purposes

We may use information to:

• Enforce our Terms of Service and prevent misuse of the Platform;
• Comply with applicable laws, regulations, court orders, and lawful government requests; and
• Protect YoZombie, its users, and the public from harm, fraud, and security threats.

Our data practices are intended to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and similar laws in other jurisdictions. YoZombie does not sell, rent, or trade personal information for monetary gain, and does not share personal information for cross-context behavioral advertising as defined by applicable law.

3. How We Share Information

We share personal information only as necessary to operate the Platform, provide requested services, comply with law, and protect YoZombie, our users, and the public. We apply reasonable administrative, technical, and contractual safeguards designed to help protect information shared with third parties.

No Sale / No Targeted Advertising. YoZombie does not sell personal information and does not share personal information for cross-context behavioral advertising (also referred to as "targeted advertising") as those terms are defined by applicable law.

A. With Your Consent

We may share information when you authorize it—for example, when you connect or use Stripe Connect for payments or when you use a referral code that attributes credit or bonuses to another user.

B. With Service Providers

We share information with trusted vendors and service providers that perform services on our behalf, such as:

• Payment Processing (Stripe Connect): Facilitating payments, payment authorization/holds, payouts, refunds, dispute and chargeback handling, identity verification, and tax reporting features where applicable under Stripe's terms.
• Hosting and Infrastructure (Google Firebase): Supporting authentication, databases, cloud functions, and secure storage.
• Analytics and Error Monitoring (Firebase Analytics and Crashlytics): Monitoring performance, detecting errors, and improving reliability.

Service providers are required by contract to process personal information only on our instructions, use appropriate safeguards, maintain confidentiality, and comply with applicable data protection laws.

C. For Legal, Safety, and Compliance Purposes

We may disclose information if required by law or if we reasonably believe disclosure is necessary to:

• Respond to subpoenas, court orders, or lawful requests from public authorities;
• Enforce our Terms of Service, investigate potential violations, or protect the integrity of the Platform;
• Detect, prevent, or address fraud, abuse, security threats, or trust and safety concerns;
• Protect the rights, property, or safety of YoZombie, our users, Workers, Businesses, or the public; and/or
• Support or respond to payment disputes, refunds, or chargebacks, including providing relevant information to Stripe Connect or other parties involved in the dispute process where permitted by law.

D. In Business Transfers

If YoZombie is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of its business or assets, personal information may be transferred as part of that transaction. We will take reasonable steps to require the recipient to honor this Privacy Policy or provide notice and choices as required by law.

E. Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify an individual. This information may be used for analytics, research, fraud prevention, performance analysis, and Platform improvements.

All sharing practices are intended to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and similar laws in other jurisdictions.

4. Data Retention

We retain personal information only for as long as necessary to (i) provide and improve the Platform, (ii) fulfill the purposes described in this Privacy Policy, (iii) enforce our Terms of Service, and (iv) comply with applicable legal, tax, and recordkeeping obligations. When information is no longer needed for these purposes, we delete it or de-identify it using reasonable administrative, technical, and physical safeguards.

A. General Retention Periods

• Account Information. We retain account and profile information while your account is active. After account closure or deletion, we retain certain account-related information for a limited period as necessary to resolve disputes, enforce our Terms, prevent fraud, comply with legal obligations, and complete outstanding transactions (including any Stripe Connect–related payment issues or chargebacks).
• Transaction and Payment Records. We retain records necessary for tax, financial reporting, audit, and payment verification purposes for at least seven (7) years. Payment processing and certain related records may also be retained pursuant to Stripe Connect retention requirements.
• Messaging Data. We retain in-app messages and related content for up to two (2) years after the applicable Gig is completed or cancelled, or a shorter period where feasible. We may retain messages longer if reasonably necessary for dispute resolution, fraud prevention, security, legal holds, or compliance obligations.
• Analytics and System Logs. We use analytics, diagnostics, and system logs to maintain Platform security and performance and to troubleshoot issues. Where logs contain personal data (such as IP addresses, device identifiers, or similar signals), we generally retain them for short, security- and troubleshooting-oriented periods and then delete or de-identify them. In many cases, log data is retained only in aggregated and/or de-identified form for platform improvement.
• Email, Push, and Communication Metadata. We may retain limited metadata associated with operational communications (for example, delivery status or device tokens) for brief operational periods to support deliverability, abuse prevention, and troubleshooting, and then delete or de-identify it.

B. Criteria for Retention

We determine how long to retain information based on:

• The purpose for which the information was collected and used;
• Applicable legal, tax, accounting, or regulatory requirements;
• The need to resolve disputes, enforce our Terms, and maintain Platform integrity;
• Security, safety, and fraud-prevention requirements; and
• Whether the information can be reasonably de-identified or aggregated for legitimate business purposes.

C. Secure Deletion and De-Identification

When information is no longer needed, we may:

• Delete it from active databases and cloud storage in accordance with our systems and backup practices; and/or
• Remove or replace direct identifiers so the information becomes de-identified and/or aggregated, where appropriate.

We apply measures designed to reduce the risk that de-identified data could be re-identified.

D. Legal and Compliance Retention

We may retain certain information for longer periods where required by law or where reasonably necessary for legitimate business needs, such as:

• Fraud prevention, trust and safety, and risk monitoring;
• Pending legal matters, investigations, or disputes (including payment disputes);
• Financial recordkeeping, audits, tax compliance, and payment verification; and
• Maintaining records needed to comply with applicable laws and respond to lawful requests.

Our retention practices are designed to comply with applicable U.S. federal and state privacy and data protection laws, including the California Consumer Privacy Act (CCPA) and similar laws in other jurisdictions.

5. Your Rights and Choices

YoZombie respects your privacy and provides you with rights to access, manage, and control your personal information in accordance with applicable U.S. privacy laws.

A. Access and Portability

You may request a copy of the personal information we hold about you. Upon verification, YoZombie will provide access in a portable and commonly used electronic format where required by law.

B. Correction and Updates

You may correct or update certain personal details through your account settings. If corrections are unavailable through the app, contact us at support@yozombie.com.

C. Deletion Requests

You may request deletion of your personal information by contacting us. Upon verification, we will delete or de-identify personal information as required by law, subject to legitimate retention and operational needs, including:

• Completing active Gigs or transactions (including accepted, in-progress, scheduled, or unresolved Gigs);
• Settling payments, refunds, disputes, or chargebacks processed through Stripe Connect (including situations where funds availability is restricted or a payment is under review);
• Complying with tax, audit, accounting, and other legal recordkeeping obligations;
• Preventing fraud or abuse, maintaining Platform safety, and enforcing our Terms of Service (including trust and safety investigations); and
• Resolving disputes, responding to lawful requests, or honoring legal holds.

If we cannot fully delete certain information (for example, because it is stored in backups, security logs, or systems that cycle over time), we will take reasonable steps to limit its use, protect it, and delete or de-identify it when those systems are rotated, consistent with our retention practices.

D. Opt-Out of Marketing and Notifications

You can opt out of promotional emails or push notifications at any time by following the unsubscribe instructions in the message or by adjusting your app settings. Essential communications (such as Gig confirmations, security notices, or payment updates) cannot be disabled.

E. Restriction of Processing

Where applicable, you may request that we restrict processing of your personal information in certain circumstances, such as pending dispute resolution, fraud investigations, or data verification.

F. Non-Discrimination

YoZombie will not unlawfully discriminate against you for exercising your privacy rights. We will not deny services, charge different rates, or provide a lower level of service solely because you exercised your privacy rights, except as permitted by law (for example, where a request cannot be fulfilled, where account action is required for fraud prevention or security, or where continued processing is necessary to provide the Platform).

G. Submitting a Request

To exercise any of these rights, contact us at support@yozombie.com or by mail at:

YoZombie, L.L.C.
P.O. Box 128
Galesville, Maryland 20765, USA
Attention: Legal Department

We may verify your identity before fulfilling a request. Where legally permitted, authorized agents may submit requests on behalf of users, and we may require proof of authorization. We respond to verified requests within the timeframes required by applicable law. If we need more time, we will notify you as required.

H. Appeals

Where required by applicable law, if we deny your request, you may appeal our decision by replying to our response or contacting support@yozombie.com with "Privacy Appeal" in the subject line.

6. Data Security

YoZombie uses administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction. Our security program includes layered protections across our systems; however, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

A. Encryption and Secure Transmission

• Communications between your device and our servers are protected using TLS/HTTPS.
• Personal data stored in Firebase is protected using encryption in transit and at rest, consistent with Google Cloud/Firebase security features.
• Sensitive payment information is handled by Stripe Connect and is subject to Stripe's security controls and PCI-DSS compliance requirements.

B. Access Controls and Monitoring

• Access to user data is limited to authorized personnel who require it to perform their duties.
• Role-based access controls are used for administrative access, and multi-factor authentication is used for administrative accounts where supported.
• Audit logs may be maintained to monitor system access, support troubleshooting, and detect unauthorized activity.

C. Network and Application Security

• Security controls (such as firewalls, monitoring, and alerting) are used to protect systems and detect suspicious activity.
• We may perform security testing (including vulnerability scanning and, where appropriate, penetration testing) to help identify and address issues.
• Production systems are hosted within Google Cloud infrastructure.

D. Data Integrity and Backups

• Backups of certain system data may be maintained for disaster recovery and business continuity purposes and protected with appropriate safeguards.
• Backup data may be stored separately from production systems and may be retained until rotated under our backup lifecycle practices.
• Integrity and availability controls may be used to support reliable service.

E. Incident Response

In the event of a suspected data breach or security incident, we will take reasonable steps to investigate, contain, and remediate the issue. Where required by applicable law, we will notify affected users and/or regulators.

F. User Responsibility

Users are responsible for:

• Keeping login credentials secure and confidential;
• Using device-level protections (such as passcodes or biometric locks); and
• Avoiding sharing account access or using unsecured networks for sensitive actions.

Our security practices are designed to comply with applicable U.S. requirements. Despite our efforts, no system can be guaranteed 100% secure, and you use the Platform at your own risk.

7. Children's Privacy

YoZombie is intended for use only by individuals 18 years of age or older. We do not knowingly collect, use, or disclose personal information from anyone under 18.

A. No Use by Minors

Users must be at least 18 years of age to create an account or use the Platform. If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete or de-identify that information and disable or terminate the associated account, consistent with applicable law and our retention obligations (for example, where limited retention is required to prevent fraud, maintain security, or comply with legal requirements).

If you believe a minor may have provided us personal information, please contact us at support@yozombie.com so we can investigate and take appropriate action.

B. Parent / Guardian Requests

If a parent or guardian believes that a person under 18 has provided us with personal information, please contact us at support@yozombie.com. We will take reasonable steps to investigate and, where appropriate, delete or de-identify the information and disable or terminate the associated account, consistent with applicable law and our retention obligations (for example, security, fraud prevention, and legal compliance).

C. Compliance

YoZombie does not offer products or services directed to children and does not knowingly solicit personal information from minors. This section is intended to reflect our obligations under applicable child privacy laws, including the Children's Online Privacy Protection Act (COPPA) to the extent it applies, and similar laws in other jurisdictions.

8. International Data Transfers

YoZombie primarily operates in the United States, and personal information is generally processed and stored in the United States. If you access the Platform from outside the U.S., you understand that your information may be transferred to, stored in, and processed in the United States and other locations where our service providers operate.

A. U.S.-Based Processing

Data collected through the Platform may be processed and stored using service providers such as Google Cloud/Firebase and Stripe. U.S. privacy and data protection laws may differ from those in your jurisdiction and may not provide the same level of protection.

B. International Users

If you access the Platform from outside the United States, you do so at your own discretion and are responsible for complying with applicable local laws to the extent they apply to you. By using the Platform, you acknowledge that your information may be processed in the United States and other locations necessary to operate the Platform.

C. Safeguards

YoZombie implements reasonable administrative, technical, and organizational measures designed to protect personal information, including (where applicable) encryption in transit and at rest, access controls, and contractual protections with service providers. We also limit access to personal information to those who need it for legitimate business purposes.

D. Legal Basis for Transfers

Where required by applicable law, transfers and cross-border processing are carried out based on one or more lawful bases, such as:

• The necessity to perform a contract with you (for example, to provide Platform functionality and process payments);
• Legitimate interests in operating, securing, maintaining, and improving the Platform; and/or
• Other lawful bases recognized under applicable law.

YoZombie aims to apply consistent safeguards to personal information regardless of where it is processed, while recognizing that requirements may vary by jurisdiction.

9. Changes to This Policy

YoZombie may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this document.

A. Notice of Material Changes

If changes are material, we will provide additional notice as required by applicable law, which may include one or more of the following:

• Email notification sent to the address associated with your account;
• Prominent notice within the YoZombie app or website; and/or
• Other legally permissible means of communication.

B. Review of Changes

We encourage you to review this Privacy Policy periodically. To the extent permitted by law, your continued use of the Platform after the effective date of an updated Privacy Policy means you acknowledge the updated Policy. If required by law, we may request your affirmative consent to material changes.

C. Version Access and Archiving

YoZombie may maintain prior versions of this Privacy Policy for transparency and recordkeeping. Archived versions may be made available upon request for a reasonable period following an update, subject to operational limitations.

D. No Retroactive Material Reduction Without Notice

YoZombie will not make material changes that retroactively reduce your rights with respect to personal information previously collected without providing notice and/or obtaining consent as required by applicable law.

10. Contact Information

If you have questions, concerns, complaints, or legal notices regarding this Privacy Policy or YoZombie's data practices, please contact us at:

YoZombie, L.L.C.
Attention: Legal Department
P.O. Box 128
Galesville, Maryland 20765, USA
Email: support@yozombie.com

We will review and respond to privacy-related inquiries within a reasonable timeframe and in accordance with applicable law. If you are a resident of a state with specific privacy rights (for example, California, Virginia, Colorado, Connecticut, or Utah), you may contact us to exercise those rights as described in Section 5 (Your Rights and Choices). Where applicable law provides additional escalation options, you may have the right to contact your state's consumer protection authority or privacy regulator.

Appendix A: State Privacy Notice (U.S.)

This Appendix supplements the Privacy Policy and applies to individuals who reside in U.S. states that provide additional privacy rights (including, where applicable, California, Virginia, Colorado, Connecticut, Utah, and other jurisdictions with similar laws). If there is a conflict between this Appendix and the main Privacy Policy, this Appendix applies for residents of those states to the extent required by law.

A1. Categories of Personal Information We Collect

Depending on how you use the Platform (as a Business or Worker), we may collect the following categories of personal information:

• Identifiers and Contact Information (e.g., name, email, phone number, profile photo, account credentials).
• Commercial and Transaction Information (e.g., Gig postings, acceptances, cancellations, completions, ratings, referrals, payment-related status).
• Verification and Compliance Information (e.g., identity verification information, tax reporting information, and related eligibility/verification signals).
• Communications (e.g., in-app messages and support communications).
• Device, Network, and Usage Data (e.g., IP address, device identifiers, app version, crash logs, usage patterns).
• Approximate Location Data (e.g., derived from IP address) and Precise Location only if you enable device permissions.
• Inferences (e.g., inferences drawn from usage patterns for platform integrity, fraud prevention, and improving matching and performance).

A2. Purposes for Collection and Use

We collect and use personal information for the purposes described in the Privacy Policy, including to:

• Provide, operate, maintain, and improve the Platform;
• Process payments and support transactions through Stripe Connect;
• Facilitate Gig creation, acceptance, completion, and related communications;
• Provide customer support and communicate with you;
• Detect and prevent fraud, abuse, and security incidents;
• Enforce our Terms of Service and maintain Platform integrity; and
• Comply with legal, tax, and recordkeeping obligations.

A3. Categories of Third Parties We Share With

We may disclose personal information to the categories of recipients described in the Privacy Policy, including:

• Payment processors and financial infrastructure providers (e.g., Stripe Connect) for transaction processing, dispute/chargeback handling, verification, and tax-related functions;
• Hosting, infrastructure, and security providers (e.g., Google Cloud/Firebase);
• Analytics and error monitoring providers (e.g., Firebase Analytics and Crashlytics);
• Professional advisors (e.g., legal, accounting) as needed for compliance and operations;
• Government authorities or other parties when required by law or necessary for safety, fraud prevention, or enforcement of our Terms; and
• Parties involved in a corporate transaction (e.g., merger or acquisition), subject to appropriate protections.

A4. No Sale / No Targeted Advertising

YoZombie does not sell personal information and does not share personal information for cross-context behavioral advertising (also called "targeted advertising"), as those terms are defined by applicable law.

A5. Sensitive Personal Information

We do not use "sensitive personal information" to infer characteristics about you. Where verification or payment-related information is collected, it is used only as necessary to operate the Platform, prevent fraud, and comply with legal obligations.

A6. Your State Privacy Rights

Subject to applicable law and verification, you may have the right to:

• Access/Know the personal information we collected about you;
• Delete personal information (subject to the retention and operational limits described in the Privacy Policy, including open Gigs, disputes/chargebacks, fraud prevention, and legal compliance);
• Correct inaccurate personal information;
• Obtain a copy of certain personal information (portability), where required;
• Opt out of certain processing, where applicable (for example, targeted advertising or sale/sharing—though YoZombie does not sell/share for those purposes); and
• Non-discrimination, as permitted by law.

A7. How to Submit Requests

To exercise these rights, contact us using the methods in Section 10 (Contact Information). We may verify your identity before processing a request. Where legally permitted, an authorized agent may submit a request on your behalf; we may require proof of authorization and may also verify your identity directly.

A8. Appeals

Where required by applicable law, if we deny your request, you may appeal by contacting us as described in Section 5 (Appeals) or by emailing support@yozombie.com with "Privacy Appeal" in the subject line.