Privacy Policy

[YK ENTERTAINMENT LEGAL NAME PLACEHOLDER], operating as YK Entertainment ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at https://yardyknowent.com or use our services (collectively, the "Platform").

By accessing or using the Platform, you consent to the data practices described in this policy. If you do not agree, please do not use the Platform.

This policy applies to all users of the Platform, including clients, vendors, and visitors. It does not apply to third-party websites or services linked from our Platform.

We collect information in the following categories:

Information you provide directly:

• Account registration: Name, email address, and password when you create an account.
• Vendor profile: Business name, contact details, service category, location, photos, portfolio content, and business description.
• Client profile: Name, event details, preferences, and budget information you enter.
• Inquiries and messages: The content of communications you send through the Platform.
• Payment information: Billing details processed by Stripe. We do not store full card numbers on our servers.
• Waitlist sign-ups: Email address and feature interest when you join a feature waitlist.

Information collected automatically:

• Usage data: Pages visited, features used, time spent, and interactions within the Platform.
• Device and browser information: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: As described in Section 4 of this policy.

We use your personal information to:

• Create and manage your account and authenticate your identity.
• Connect clients with vendors and facilitate bookings.
• Process subscription payments and send billing receipts.
• Send transactional emails including new inquiry notifications, booking confirmations, and account-related alerts.
• Respond to your support requests and inquiries.
• Improve and personalize the Platform based on your usage patterns.
• Detect, investigate, and prevent fraudulent or abusive activity.
• Comply with applicable law, legal process, and enforcement requests.
• Notify you about new features or changes to the Platform (you may opt out of non-transactional emails at any time).

We use cookies and similar technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include authentication session cookies managed by Supabase. You cannot opt out of these without losing access to your account.
• Functional cookies: Remember your preferences (e.g., saved filters, UI settings).
• Analytics cookies: Help us understand how the Platform is used. We may use privacy-respecting analytics tools that do not share your data with advertising networks.

Most browsers allow you to block or delete cookies through their settings. Blocking strictly necessary cookies will impair the Platform's functionality. We do not currently respond to browser "Do Not Track" signals, though we may do so in the future.

We do not sell your personal information. We share your data with third parties only as described below:

Service providers we use:

• Supabase — our primary database and authentication provider, based in the United States. Your account data, messages, and uploaded files are stored on Supabase infrastructure. See their Privacy Policy.
• Stripe — payment processing for vendor subscriptions. Stripe receives your billing details directly. See their Privacy Policy.
• Resend — transactional email delivery. Resend receives your email address and the content of system-generated emails. See their Privacy Policy.
• Vercel — website hosting and deployment. Vercel may log request metadata such as IP addresses and response codes. See their Privacy Policy.
• Cloudflare / Porkbun DNS — DNS resolution and network protection. Network traffic may pass through Cloudflare's infrastructure for DDoS mitigation and performance.

We may also disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the safety or rights of any person.

We retain your personal information for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law (for example, billing records required for tax compliance).

Content you have posted (such as reviews or forum posts) may remain on the Platform in anonymized form after account deletion unless you specifically request its removal.

Waitlist email addresses are retained until the relevant feature launches or you request removal.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out of marketing: Unsubscribe from non-transactional emails at any time using the link in any such email.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. As noted above, we do not sell personal information.

To exercise any of these rights, contact us at yardyknowent@gmail.com. We will respond within 30 days.

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. These include:

• Encryption of data in transit via HTTPS/TLS.
• Row-level security policies on our database (Supabase RLS).
• Hashed and salted password storage (managed by Supabase Auth).
• Access controls limiting which team members can access production data.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. If you believe your account has been compromised, please contact us immediately at yardyknowent@gmail.com.

The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as practicable.

If you believe we have inadvertently collected information from a child, please contact us at yardyknowent@gmail.com.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where feasible, notify registered users by email.

We encourage you to review this policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: yardyknowent@gmail.com
• Website: https://yardyknowent.com
• Operating as: YK Entertainment ([YK ENTERTAINMENT LEGAL NAME PLACEHOLDER])
• Jurisdiction: State of California, County of Los Angeles