Privacy policy

This policy explains which personal data we process through this website, why, and on what legal basis, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Identity: [Company legal name]
• Tax ID: [Tax ID]
• Address: [Registered address]
• Privacy contact: privacy@yesly.io

2. What we process and why

Sandbox and integration request. Name, company, email, sector and monthly visit volume. Purpose: answering your request, setting up sandbox access and the integration, and managing the commercial relationship. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR). Retention: for the duration of the relationship or, if none is formalised, up to 12 months after the last contact.

Confirmation demo. Mobile number and chosen channel (WhatsApp or voice call). Purpose: sending you a single test appointment on that channel. Legal basis: consent (art. 6.1.a GDPR), which you can withdraw at any time. Retention: the number is deleted 24 hours after sending.

Usage analytics. We use a cookieless analytics tool without persistent identifiers that aggregates page views, calculator interactions and form submissions. It cannot identify you. Legal basis: legitimate interest in improving the site (art. 6.1.f GDPR).

Savings calculator. The values you enter are processed in your browser. We only record, in aggregate and without linking it to you, that the calculator was used and with which value ranges.

3. Recipients and processors

We do not share your data with third parties unless legally required. To provide the service we use providers acting as data processors under contract, with data hosted in the European Union:

• Amazon Web Services EMEA SARL (hosting, European region).
• Messaging and telephony providers used to send the demo WhatsApp, SMS and calls: [to complete].
• Sales tool where requests are recorded: [to complete].

Where any of these providers transfers data outside the European Economic Area, it does so under the safeguards of Chapter V of the GDPR (standard contractual clauses or an adequacy decision).

4. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to privacy@yesly.io, stating the right you exercise and a way to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Yesly as data processor

When a customer company uses Yesly to confirm appointments with its own customers, that company is the data controller and Yesly acts as processor under the data processing agreement (DPA) signed with each customer. People contacted should direct their requests to the company that scheduled the appointment; we will help them do so if they write to us.

6. Security

We apply appropriate technical and organisational measures: encryption in transit and at rest, role-based access control, activity logging and backups within the European Union.

7. Changes

Any change will be published here with the date of the last update.