1. Who We Are
Yalors ("we", "our", "us") is a lead generation and outreach platform, operated by Light Web Solutions from Tunisia. We are the data controller for the personal data described in this policy, except where we say otherwise.
For anything related to your data, write to support@yalors.tn. This policy applies to the website, the app and the emails we send. It is written to meet the EU/UK General Data Protection Regulation (GDPR) and Tunisian Organic Law No. 2004-63 on the protection of personal data.
2. Data We Collect About You
Account data
- Name, email address and password (or the identity returned by Google if you sign in with Google)
- Your settings: language, notification preferences, plan and usage counters
- Payment details you send us to subscribe (for example a transfer reference), used only to activate your plan and for invoicing
What you create in Yalors
- Your searches, saved leads, lead lists, notes and suppression lists
- Campaigns, message templates and sequences
- If you connect a LinkedIn, email or WhatsApp account: the messages and conversations sent and received through Yalors, so they can be shown in your inbox and your campaigns can run
Technical data
- Server logs (IP address, browser, pages requested, errors), used for security and debugging
- Error reports sent by your browser when a page crashes (error message, page address, browser)
We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.
3. Why We Use It and Our Legal Basis
- Providing the service (account, searches, campaigns, inbox, billing): necessary to perform our contract with you.
- Service emails (security, billing, campaign alerts): contract. Optional emails such as the weekly report can be turned off in settings or with the link in each email.
- Security, fraud prevention and fixing errors: our legitimate interest in keeping the service safe and working.
- Accounting and legal obligations: legal obligation.
We do NOT sell your personal data, and we do not use your content to train AI models.
4. People in Our Lead Database
Yalors helps users find businesses and professionals. Search results come from publicly available sources: business listings on Google Maps and public LinkedIn profiles and company pages, obtained through third-party data providers. This can include a name, job title, employer, location, profile photo, and business contact details such as a company website, phone number or email.
We process this data on the basis of legitimate interest: helping businesses find and contact relevant professional contacts. Users who contact people found through Yalors are responsible for doing so lawfully, including offering a way to opt out. Every campaign email includes an unsubscribe link, and an opt-out is honoured for that sender.
If you appear in our data and want to know what we hold, have it corrected or deleted, or object to its use, write to support@yalors.tn with the profile or business concerned. We will answer within one month.
5. Who Processes Data for Us
We share data only with the providers that run the service, each for its own task:
- Supabase: sign-in and account authentication
- Hosting: the servers that run our application and database, managed by Light Web Solutions
- Vercel: hosting of the website and app pages
- Resend: sending our account and notification emails
- Unipile: the connection to the LinkedIn, email and WhatsApp accounts you choose to link
- OpenAI: AI features (message drafts, reply analysis, the campaign builder). Only the text needed for the request is sent, and it is not used to train their models
- RapidAPI data providers: running Google Maps and LinkedIn searches
- OpenStreetMap (Nominatim): turning a typed location into map coordinates
We may also disclose data when the law requires it, or to a buyer if the service is sold, under this same policy.
6. International Transfers
We operate from Tunisia, and some of the providers above are based in the United States or process data there. When data from the EU/UK leaves it, we rely on the provider's Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.
7. How Long We Keep It
- Your account and everything in it: as long as your account exists. When you delete your account (Settings › Delete account), it and the data you created are deleted immediately.
- Server logs and error reports: a short time only; logs are rotated and overwritten automatically.
- Billing records: as long as accounting law requires (up to 10 years).
- Shared lead records (public business and profile data from searches): kept while useful for searches, and deleted on request (section 4).
9. Security
Data is encrypted in transit (HTTPS). Access to production systems is restricted, passwords are handled by our authentication provider and never stored by us, and connected-account credentials stay with Unipile: we never see your LinkedIn, email or WhatsApp password. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authority as the law requires.
10. Your Rights
You can ask us to:
- Access the data we hold about you, and receive a copy in a portable format
- Correct inaccurate data
- Delete your data (you can also delete your account yourself in settings)
- Restrict or object to processing based on legitimate interest
Write to support@yalors.tn. We answer within one month, free of charge. You may also complain to your data protection authority: in the EU, the authority of the country where you live (for example the CNIL in France); in Tunisia, the INPDP (Instance Nationale de Protection des Données Personnelles).
11. Children
Yalors is a business tool and is not intended for anyone under 18. If we learn that we hold a minor's account data, we delete it.
12. Changes to This Policy
When this policy changes, we update the date at the top. If a change is significant, we will tell account holders by email before it applies.
13. Contact
Questions or requests about your data: support@yalors.tn.