Privacy Policy

1. Overview & Scope

At YK Studio, we take the protection of your personal data seriously. This Privacy Policy informs you about how we handle personal data when you visit our website (https://yk-studio.app) and when you use our standalone desktop software applications (such as Insight Trading Journal) across macOS and Windows.

This policy complies with the European General Data Protection Regulation (GDPR / DSGVO), the German Telecommunications-Telemedia Data Protection Act (TDDDG), as well as international regulations including the California Consumer Privacy Act (CCPA / CPRA), CalOPPA, and COPPA.

2. Data Controller (Verantwortliche Stelle)

The data controller responsible for the processing of personal data on this website pursuant to Art. 4(7) GDPR is:

3. Legal Bases for Data Processing

In accordance with Art. 13 and Art. 14 GDPR, we inform you of the legal bases for our data processing activities:

• Contract performance and pre-contractual requests (Art. 6(1)(b) GDPR): When you contact us for inquiries, purchase software licenses, or receive product updates.
• Legitimate interests (Art. 6(1)(f) GDPR): For technical log collection, network security, abuse prevention, and ensuring the smooth operation of our web infrastructure.
• Consent (Art. 6(1)(a) GDPR): If you give explicit consent for optional features (e.g. entering your own API key for AI integrations).
• Legal obligations (Art. 6(1)(c) GDPR): For compliance with statutory commercial or tax retention periods.

4. Website Hosting & Server Logs

We host our website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

When you access our website, Vercel automatically collects technical connection logs transmitted by your browser. These may include:

• Your IP address (temporarily processed for network transmission)
• Browser type, version, and operating system
• Date and time of the server request
• Referrer URL (the previous page you visited)

This data is collected to ensure a secure, stable, and rapid connection (Art. 6(1)(f) GDPR). We have concluded a Data Processing Agreement (DPA) with Vercel including EU Standard Contractual Clauses (SCCs). Server logs are automatically purged after technical processing.

5. Cookies & Web Analytics

No Tracking Cookies: Our website does not use tracking cookies, marketing cookies, or profiling mechanisms. Under the EU ePrivacy Directive and the German TDDDG, no cookie consent banner is required.

Vercel Analytics: We may utilize Vercel Analytics to understand basic website reach. Vercel Analytics is entirely cookieless, does not track users across different domains, and collects only anonymized, aggregated metrics (such as aggregate page load times and device types). No personally identifiable information (PII) is permanently stored.

6. Contacting Us via E-Mail

If you contact us via email, your email address, name, and the content of your message will be stored and processed solely to answer your inquiry and handle potential follow-up questions (Art. 6(1)(b) & Art. 6(1)(f) GDPR). We do not share this data with third parties.

Retention: Your inquiry is retained until your request has been resolved, you request its deletion, or statutory commercial retention obligations expire.

7. Privacy in YK Studio Desktop Applications

8. International Data Transfers

When using services provided by Vercel Inc., Gumroad Inc., or Google LLC, data may be processed on servers located in the United States or other countries outside the European Economic Area (EEA).

To ensure an adequate level of data protection in accordance with Chapter V of the GDPR, these transfers are safeguarded by the EU-U.S. Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCCs).

9. Your Rights under the GDPR (EU / EEA / UK)

Under the European General Data Protection Regulation, you have the following statutory rights regarding your personal data:

• Right of access (Art. 15 GDPR): You have the right to request confirmation and information regarding whether we process your personal data.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You have the right to restrict processing under certain conditions.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.
• Right to revoke consent (Art. 7(3) GDPR): You may withdraw previously granted consent at any time with effect for the future.

10. Notice to California & US Residents (CCPA / CPRA / CalOPPA)

If you reside in California or other US states with consumer privacy statutes, this section applies to you:

• No Sale or Sharing of Personal Information: We do not sell, rent, or share personal information with third parties for monetary or other commercial consideration (under California Civil Code § 1798.140). We have not sold or shared any consumer personal information in the preceding 12 months.
• Right to Know & Right to Delete: You have the right to request disclosure of the personal data we collect and to request its deletion, subject to statutory exceptions.
• Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.
• CalOPPA "Do Not Track" (DNT): Because our website and applications do not engage in third-party behavioral tracking or advertising profiling, we naturally honor browser Do Not Track (DNT) and Global Privacy Control (GPC) signals.

11. Children's Privacy (COPPA)

Our website and desktop applications are designed for professional and utility use by adults. They are not directed to children under the age of 13 (or under 16 in the European Union). We do not knowingly collect or solicit personal data from children. If we become aware that personal data from a child has been collected, we will take immediate steps to delete such information.

12. Data Security & Encryption

To protect your personal data during transmission, our website uses state-of-the-art SSL/TLS encryption (HTTPS). You can identify an encrypted connection by the "https://" prefix and the padlock icon in your browser address bar.

13. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect legal amendments, technical updates, or changes to our software offerings. The date of the most recent revision will always appear at the top of this document.

If you have any questions regarding this Privacy Policy, please contact us at: ykstudio@zohomail.eu.