Privacy Policy

1. Introduction and Scope

Yoka Soft Digital ("Company," "we," "us," or "our") is a digital agency incorporated in the State of California, USA, providing web development, mobile application development, AI integration, UX/UI design, branding, and social media marketing services. This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data obtained through our website at https://yoka-soft.com (the "Website") and through any direct communications with our team.

By visiting our Website, submitting a contact form, scheduling a consultation, or engaging our services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of our Website immediately.

This Policy applies to:

• All visitors to yoka-soft.com
• Prospective clients who submit inquiries or request quotes
• Existing clients whose data is processed in connection with service delivery
• Job applicants who submit CVs or career inquiries
• IT Academy students and enrollees
• Any individual whose personal data we process in the course of our business operations

2. Data Controller Information

For the purposes of applicable data protection laws — including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and where applicable the EU General Data Protection Regulation (GDPR) — the data controller is:

3. Categories of Personal Data We Collect

3.1 Data You Provide Directly

• First name and last name
• Phone number (required)
• Corporate email address (optional)
• Company name (optional)
• Brief project description or message
• Selected services of interest
• Preferred meeting date and time
• Full name and phone number
• Physical address (for meeting location preference)
• Preferred appointment time slot
• Resume / CV content (education, work history, skills)
• Portfolio links
• Any additional information voluntarily included in the submission

3.2 Data Collected Automatically

• IP address and approximate geographic location (country/city)
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet)
• Pages visited, navigation path, and time spent on each page
• Referring URL (source that directed you to our site)
• Date and time of each visit
• Interaction data (clicks, scroll depth, form interactions)
• Session and user identifiers assigned by analytics tools

3.3 Data Received from Third Parties

• Business referral partners who recommend our services
• Social media platforms (LinkedIn, Instagram, Telegram) when you interact with our profiles
• Advertising platforms (Meta, Google) through pixel and conversion tracking, where you have consented to such tracking

4. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance functionality and analyze usage. The following categories may be used:

You may manage cookie preferences through your browser settings. Where required by law, we display a cookie consent banner providing granular control. Disabling certain cookies may affect Website functionality.

5. Purposes and Legal Bases for Processing

We process personal data only for specified, explicit, and legitimate purposes:

6. Disclosure and Sharing of Personal Data

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may share data with the following categories of recipients, strictly as necessary:

6.1 Service Providers and Sub-processors

Trusted third-party vendors who process data on our behalf under signed Data Processing Agreements (DPAs), including: cloud hosting providers, CRM platforms, email marketing tools, project management tools, video conferencing and scheduling services, analytics platforms, and payment processors.

6.2 Advertising Platforms

Where you have consented to tracking, conversion data may be shared with Meta (Facebook/Instagram) via Meta Pixel and Google LLC via Google Tag Manager and Google Ads conversion tracking.

6.3 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement, courts, or regulatory authorities when required by applicable law, court order, or to protect the rights, safety, and interests of Yoka Soft Digital or third parties.

6.4 Business Transfers

In the event of a merger, acquisition, or asset sale, personal data may be transferred to the acquiring entity under equivalent data protection commitments. Affected individuals will be notified as required by law.

7. International Data Transfers

Yoka Soft Digital is based in the United States. If you are accessing our Website from the EEA, United Kingdom, or other jurisdictions with data protection laws, your personal data may be transferred to and processed in the United States.

For transfers involving EEA/UK personal data, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all sub-processors
• Adequacy decisions where applicable

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

Upon expiration of the applicable retention period, we will securely delete, destroy, or irreversibly anonymize personal data.

9. Data Security

We implement a comprehensive, multi-layered security framework to protect personal data:

Technical Safeguards

• TLS/SSL encryption for all data transmitted between your browser and our servers
• Encryption at rest for databases containing personal data
• Role-based access control and principle of least privilege
• Multi-factor authentication (MFA) for all internal systems
• Regular security patches and vulnerability assessments
• Web Application Firewall (WAF) and DDoS protection
• Secure API authentication protocols for all integrations

Organizational Safeguards

• Data protection training for all team members with access to personal data
• Strict confidentiality agreements (NDAs) with employees and contractors
• Defined incident response and breach notification procedures
• Regular internal audits of data processing activities
• Vendor due diligence for all third-party service providers

No method of electronic transmission or storage is 100% secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you and applicable regulatory authorities as required by law.

10. Your Rights and How to Exercise Them

10.1 California Residents — CCPA / CPRA Rights

• Right to Know
• Right to Delete
• Right to Correct
• Right to Opt-Out
• Right to Non-Discrimination
• Authorized Agent

10.2 EU / EEA & UK Residents — GDPR Rights

• Right of Access (Art. 15)
• Right to Rectification (Art. 16)
• Right to Erasure (Art. 17)
• Right to Restriction (Art. 18)
• Data Portability (Art. 20)
• Right to Object (Art. 21)

To exercise any of the above rights, please contact us via info@yoka-soft.com. We may request verification of your identity before processing your request to prevent unauthorized disclosure or deletion.

11. Marketing Communications and Opt-Out

We only send marketing communications to individuals who have explicitly opted in. You may withdraw your consent at any time by:

• Clicking the unsubscribe link in any marketing email
• Sending a withdrawal request to info@yoka-soft.com
• Contacting us via Telegram: t.me/YokaDigital

12. Children's Privacy

Our Website and services are not directed at individuals under the age of 16 (or 13 in the United States under COPPA). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child without verifiable parental consent, we will take immediate steps to delete such data.

13. Third-Party Websites and Links

Our Website may contain links to third-party websites, including client portfolio projects (gainroi.ai, carpowraps.com, vitajet.pro, phonoglot.com), social media platforms, and partner resources. This Privacy Policy applies only to yoka-soft.com. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review their privacy policies independently.

14. IT Academy — Specific Provisions

Our IT Academy (yoka-soft.com/tech-academy) may collect additional data specific to educational enrollment, including program preferences, skill level assessment responses, and communications related to training delivery. This data is processed for administering the educational program and is governed by the same principles set out in this Policy. Academy participants may exercise all rights described in Section 10.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this document, post a prominent notice on our Website homepage, and where required by law send you a direct notification via email.

16. Right to Lodge a Complaint

If you are located in the EEA or UK and believe our processing of your personal data violates applicable law, you have the right to lodge a complaint with your local supervisory authority.

17. Contact Us