Privacy Policy

1. Information We Collect

1.1 Direct Collection

Users directly provide information including:

• Name, email address, phone number
• Education and career background
• Areas of study and program interests
• Mentoring interests
• Username and password
• Communications via contact forms

1.2 Automatic Collection

The platform automatically collects:

• IP address and device identifiers
• Browser and operating system information
• Pages viewed and time spent on Site
• Referring URLs and traffic data
• Cookie and web beacon data

Google Analytics uses cookies to help us analyze how visitors use the Site. Users may opt out through browser preferences.

2. How We Use Your Information

Information is used for:

• Providing services and matching users to mentors and programs
• Site maintenance and personalization
• Communications and customer service
• Debugging and functional improvements
• Understanding user behavior and feature preferences
• Legal and safety purposes
• Protecting against fraudulent or illegal activity
• Enforcing policies and legal rights
• Investigating unlawful activities
• Business transactions and restructuring

YOJO will not use student education records or personal information collected from minors to build or improve products or services sold to third parties.

3. Disclosing Your Information

3.1 To Other Users

Information may be shared with potential mentors, mentees, and program administrators.

3.2 To Service Providers

Third-party contractors providing hosting, analytics, and communications services receive information.

3.3 For Legal Purposes

Disclosure occurs for legal safety, fraud protection, policy enforcement, and unlawful activity investigation.

3.4 For Business Transactions

Information may be disclosed to potential buyers or successors in mergers, restructuring, or asset sales. Users will receive prior notice via email or prominent Site notice.

3.5 With Your Authorization

Information is disclosed as authorized by users or otherwise disclosed by YOJO.

4. Your Choices

4.1 Not Providing Information

Users may decline to provide information, but this may restrict access to certain features and services.

4.2 Opt Out of Email Communications

Users can unsubscribe via email instructions, notification settings, or contacting YOJO directly.

4.3 Automatic Collection Choices

Users may restrict data collection through device settings or disabling cookies, though this may prevent Site functionality. We currently do not respond to “do-not-track” signals.

4.4 Right to Delete Your Account and Data

Users may request deletion by contacting YOJO. The platform will remove your personal information from our active systems within a reasonable timeframe, except where retention is legally required or necessary for pending transactions.

4.5 Users Under 18

Minors may request removal of posted content visible to other users, though complete removal is not guaranteed.

5. Third-Party Links

The Site contains third-party website links. YOJO is not responsible for the privacy practices or content of those sites. Users should review third-party privacy policies.

6. Minors' Privacy

6.1 YOJO’s Own Practices

For users under 18, YOJO limits data collection to what is necessary to provide the Services and does not use minors’ information for advertising or marketing. Users under 13 require parental/guardian consent or authorization by program administrators under a Data Processing Agreement.

6.2 Third-Party Program Privacy Practices

Programs listed on YOJO operate under their own privacy policies. YOJO is not responsible for third-party program data practices. Minors and guardians should review program privacy policies before submitting data.

6.3 Parental Rights

Parents and guardians may request access to, correction of, or deletion of their child’s information by contacting YOJO. Responses occur within 10 business days.

7. Accessibility

YOJO is committed to making this Privacy Policy accessible to all users. Alternative formats are available upon request.

8. Changes to This Privacy Policy

The policy may be updated periodically. An updated “Effective Date” will indicate revised versions. Users are encouraged to review periodically.

9. Contact Us

Users with privacy questions or concerns should contact YOJO via our contact form.

10. Data Retention

10.1 How Long We Keep Your Data

Retention periods include:

• Active accounts: Duration of account and reasonable period after closure
• Inactive accounts: Accounts with 12+ months inactivity may be deactivated after prior notice
• Application records: Retained longer as required by program administrators or law
• Legal holds: Extended retention under legal hold or regulatory requirements

10.2 Deletion Requests

Valid deletion requests result in data removal from active systems within 30 days, subject to exceptions in section 4.4.

11. Security Practices

11.1 Technical and Organizational Measures

Security measures include:

• TLS/HTTPS encryption in transit
• Encryption of sensitive data at rest
• Access controls limiting employee access
• Regular data practice reviews
• Security-vetted cloud infrastructure

11.2 No Absolute Guarantee

No method of transmission over the internet or electronic storage is completely secure. Breaches will be notified according to Terms of Use obligations.

12. FERPA Compliance

Where YOJO processes student education records for FERPA-subject institutions, it acts as a “school official with a legitimate educational interest.” Student records are used only for contracted services and not disclosed except as FERPA permits.

Institutional customers must execute a Data Processing Agreement before deploying the platform for student use.

13. US State Privacy Rights

Users in states with privacy laws (CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, others) may have rights including:

• Right to know about collected information, sources, and third-party sharing
• Right to access personal information
• Right to correct inaccurate information
• Right to delete personal information (with exceptions)
• Right to opt out of sale/sharing for advertising

YOJO does not sell personal information for monetary consideration and does not share for cross-context behavioral advertising. No discrimination occurs for exercising these rights.

Users may submit requests via contact form. YOJO verifies identity and responds within required timeframes (typically 45 days, with possible 45-day extension).

California Shine the Light (Cal. Civ. Code § 1798.83) residents may request information about third-party marketing disclosures. YOJO does not share information for direct marketing purposes.

14. International Data Transfers

YOJO is US-based. International users’ information may be transferred to, stored, and processed in the United States or other countries where service providers operate.

For EU, UK, or Swiss users, transfers comply with applicable data protection law, including Standard Contractual Clauses (SCCs) or other lawful mechanisms. By using the Services, users acknowledge and consent to information transfer to the United States.

15. Data Processing Agreements

Institutional and enterprise customers processing personal data subject to GDPR, UK GDPR, CCPA/CPRA, FERPA, or state student privacy laws must execute a Data Processing Agreement (DPA) before platform deployment.

A DPA governs data processing on behalf of institutions as a data processor, sets out party responsibilities, and includes technical and organizational protection measures.

DPA requests should be submitted via contact form with subject “DPA Request.” YOJO responds within 10 business days.