Yext Privacy and Cookies Policy

(Effective Date: 3 Jan 2023)

This Yext Privacy & Cookies Policy (this “Privacy Policy”) explains how your personal information is collected, used and disclosed by Yext, Inc. and the Yext affiliates listed in the “Data Controllers and Contacting Us” section below (“Yext”, “us”, “we” or “our”) and how we collect information through the use of cookies and related technologies. It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country’s or state’s laws, including (in the European Economic Area (“EEA“), and UK), a right to object to some processing that we carry out or, where we rely on consent, how to withdraw that consent.

This Privacy Policy applies to personal information we obtain from or about you when you (i) visit all Internet sites operated by Yext that link to this Privacy Policy (collectively, the “Sites“) and interact with our products (e.g. Listings, Reviews, Pages, Search) made available through such Sites (collectively, the “Products“); (ii) interact with our social media pages and advertisements, customer services, communications, webinars or blogs; (iii) participate in our events and demonstrations; or (iv) when you visit our offices.

Unless otherwise stated, Yext acts as the data controller for the data processing operations described in this Privacy Policy.

We may provide additional information about our privacy practices at other points, for example, when we ask you to provide personal information in connection with a particular service or when you apply for a job, and where this will help us provide more relevant and timely information.

We reserve the right to make changes to our practices and this Privacy Policy at any time. If we change the way we handle your personal information, we will update this Privacy Policy and notify you as appropriate.

This Privacy Policy addresses the following:

  1. INFORMATION THAT WE COLLECT ABOUT YOU
  2. USE OF COOKIES AND SIMILAR TECHNOLOGIES
  3. USES MADE OF YOUR PERSONAL INFORMATION AND OUR LEGAL BASIS FOR PROCESSING
  4. DISCLOSURES OF YOUR PERSONAL INFORMATION
  5. WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO YEXT’S DIRECT MARKETING
  6. EUROPEAN DATA PROTECTION RIGHTS
  7. CALIFORNIA PRIVACY NOTICE
  8. MISCELLANEOUS

1. INFORMATION THAT WE COLLECT ABOUT YOU

Customers, Site Visitors, and End Users

Information Provided by You upon Registration and/or Making a Purchase. When you register for an account on a Site and/or purchase a Product subscription or service from us, we collect information that allows us to identify you, such as:

  • Name
  • E-mail address
  • Address (where entered as part of a “business/location scan”)
  • ZIP/Postal code
  • Home phone
  • Mobile phone
  • Credit card number (in the US only)
  • Billing address
  • Yext login details (username and password)

Information Provided When You Contact Us. We also collect personal information that you voluntarily provide to us when you contact us with a question or comment about our Products and services, download our whitepapers, sign up for product demonstrations or events, or visit our offices. Typically, this includes:

  • Name
  • E-mail address
  • Organization name
  • Phone number
  • Information about your position
  • Information about your interests and preferences
  • Content of your communication

Automatically Collected Information. When you access our Sites and some of our Yext powered properties, we automatically collect (i) technical information about your device including your device’s internet protocol (IP) address; and (ii) information about your visit (the referral URL, the content viewed and the content interacted with). Some of this information is collected using cookies and related technologies. See Section 2 for more detail.

Information Collected From Our Third-Party Resellers.  We may partner with third-party resellers who resell Yext’s Products to you. Such third-party resellers will provide us with information about you, such as name and contact information. This helps us to provide you with Products you requested. The reseller will be the controller in respect of any customer account set up information that you provide directly to them (and we will act as the reseller’s processor in this regard).

Information Collected in Connection with our Products. Where our customers use our Products, we compile general statistical and other information related to the performance and operation of the relevant Products, for instance, from reviews collected from our third-party publishers including name/alias of reviewers collected from third-party publishers, and will use or share such information with our customers to provide our Products, for research and development purposes, and to provide analytics, reports and benchmarking about our Products (e.g. average location ratings or frequently used terms within the reviews). We may also use such aggregated information for our own promotional purposes. We may use cookies and similar technologies both on our Sites and our customer sites to collect some of this information (see Section 2 for more detail).

If our customers, or our resellers’ customers, use our Products to solicit or monitor reviews or otherwise process personal information about their end customers (e.g. in connection with Reviews or Listings), employees, or web visitors (collectively, “End Users”), we will process such personal information on behalf of our customers as data processors (also called service providers), or on behalf of our resellers’ customers as sub-processors. This may include contacting End Users on behalf of our customers, or on behalf of our resellers’ customers, or sharing and receiving such personal information with and from publisher sites in accordance with our customers’ instructions, or our resellers’ customers’ instructions. We have no direct relationship with End Users. Our customers, or our resellers’ customers, are responsible for ensuring that they have complied with all applicable data protection legislation (including obtaining any necessary consents) to allow us to process such personal data to provide our Products and services. If you are an End User and believe you have received an email from us on behalf of one of our customers, or one of our resellers’ customers, please contact that company directly with any questions.

Information Collected from Other Third-Party Sources

We collect data from the following third parties such as:

    • Social media networks and advertising networks – Commercially-available data such as name, address, email address and preferences.
    • Analytics Providers – We also receive non-personal data, such as aggregated or de-identified demographic/profile data, from third-party sources including select partners and companies that specialize in providing enterprise data, analytics and software as a service.

In order to ensure data accuracy and offer a superior customer experience by providing you with better personalized services, content, marketing and ads, in some cases we may link or combine the information that we collect from the different sources outlined above with the information we collect directly from you.

Where necessary, we obtain information to conduct due diligence checks (including in relation to international sanctions) on business contacts as part of our compliance program and in accordance with our legal obligations.

Partners, Publishers and other Service Providers

We will process certain contact information about individuals within organizations that we work with such as publishers, mailing houses, payment providers, IT hosting and maintenance providers, events companies and other service providers.

2. USE OF COOKIES AND SIMILAR TECHNOLOGIES

We use and allow select partners to use cookies, clickstream capture, pixels, web beacons, embedded scripts, and other similar technologies (collectively “Tools”) on our Sites, our Products, our Yext powered properties and in our communications with you for the purposes outlined below or via our cookie consent management tool. Typically, these Tools will capture information about your device (including your IP address), your preferences, your visit to our Sites, our Products and Yext powered properties and your interactions with our communications. For further information, visit www.allaboutcookies.org.

When you visit some of our Sites (where required by applicable law), you have the option to accept, reject or adjust most of the categories of Tools through our cookie consent management tool. You can modify these settings or withdraw your consent at any time at this link.  Details of the cookies which we use (including third-party cookies and the partners with whom we may share your data) and their purposes as follows:

More information about the types of cookies we use:

Details of the cookies which we use (including third-party cookies and the partners with whom we may share your data) and their purposes are as follows: See Link

In addition to the information provided in the Cookie List above, please also note:

Performance Cookies

Aggregated data from these Tools may be also shared with our business partners. The type of information we collect includes how many visitors visit our Sites and Products, how many customers log in, when they visited, for how long and which areas of our Sites, our Products and services but is generally not used to identify you individually.

On behalf of our customers, we may also include a pixel on most Yext-powered properties, which if activated by a customer and granted the appropriate consents, allows us to record that the profile was viewed and, to provide an accurate picture to our customer of real consumer engagement. We do not match visitor IP addresses to any other personal data about consumers.

On behalf of our customers, we may also capture information about visits to the publisher sites within the Listing or Events content and on the customers’ websites for Pages, Knowledge Tags or Search.

Functional Cookies

We use these types of Tools to remember choices you make on our Sites or our Products (such as your preferred language or the region you are in) and provide enhanced, more personalized features on our Sites, our Products and in our communications. These technologies are also used to provide content that aligns to your past behaviour or interests (for example, we use pixel tags in our electronic newsletters to measure open, click through and read rates and to tailor future content you receive).

Targeting and Social Media Cookies

We also use these types of Tools to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. They allow us to understand and evaluate clicks on our adverts and how you interact with our Sites, Products, communications and Yext powered properties so that we can improve the services you receive.

How can you manage these Tools?

The length of time a cookie will stay on your browsing device depends on whether it is a “persistent” or “session” cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your browsing device after you have finished browsing until they expire or are deleted. The duration of other Tools varies depending on the type of Tool used.  For instance, Tools that are “strictly necessary” are typically set to expire after no more than 12 months. Tools used for performance are typically set to expire after no more than 24 months. The duration of targeting and social media Tools varies, with most expiring within 2-3 years.

You may be able to set your browser to block all cookies. For more information, please refer to your browser settings. Note that by disabling certain categories of cookies, you may be prevented from accessing some features of our Sites or certain content or functionality may not be available.

In the US, we comply with the Digital Advertising Alliance (“DAA”) industry standards with respect to interest-based advertising. To learn more about your advertising choices if you are in the US, and to opt out of such advertising for companies participating in the DAA program, please click here. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.

Sharing with Partners

If you have given consent through our cookie settings (where available), Yext may share analytics and targeting cookie data with select partners for the purposes of performance metrics, audience selection and advertisement. You can change your cookie settings at any time by visiting this link.

3. USES MADE OF YOUR PERSONAL INFORMATION AND OUR LEGAL BASIS FOR PROCESSING

Providing personal information is optional; however, in order to provide you with access to our Products, services and other resources such as whitepapers and demos, providing certain personal information (e.g., contact information and name, log-in details) may be necessary in order to receive these services and resources. You may choose whether or not to receive electronic marketing communications from us and we will only send you such communications where we have the appropriate consents to do so (to the extent required by applicable law). For more information on your choices, please see Section 5 below.

We process personal information through electronic and manual means for the following purposes:

Customers and Website Users

To fulfill a contract or to take steps linked to a contract. This includes:

    • to administer access to your accounts;
    • to onboard new customers or resellers;
    • to manage our customer or reseller relationships;
    • to process orders, provide our Products and services, and send you service-related communications;
    • for customer support purposes including responding to your queries and investigating any complaints about the Sites;

As required to conduct our business and pursue our legitimate interests, in particular:

    • to improve and personalize your experience with us and our Sites and to tailor content, communications, advertisements and offers to you;
    • to administer our offices and Sites, conduct identity verification and other fraud detection activities;
    • to send you information you have requested;
    • to monitor, maintain and improve the performance of our Sites, communications, services and Products, analyze trends, usage and activities in connection with our communications, services and Products, and optimize our marketing efforts and measure the effectiveness of our advertising campaigns;
    • to ensure the security of our offices, Products and Sites;
    • for our own internal functions, management and corporate reporting, internal research and analytics and to improve business efficacies;
    • to enforce compliance with our terms of use and other policies or otherwise in connection with legal claims, compliance, regulatory and investigatory purposes as necessary (including disclosure of such information in connection with legal process or litigation);
    • to create aggregate and statistical data (which cannot be used to identify you). For example, aggregate data may include data that describes the general demographics, usage or other characteristics of a Site’s users. We reserve the right to transfer and/or sell aggregate or group data about a Site’s users for lawful purposes.

Where you give us consent:

    • Where you ask us to send marketing information via a medium where we need your consent under applicable law (for example email marketing in some countries). For more information about how to modify your preferences about marketing communications, please see Section 5;
    • Where you give us consent to place cookies or similar technologies;
    • On other occasions where we ask for your consent, for the purpose we explain at the time.

As required by law:

  • In response to requests by government or law enforcement authorities.

Partners, Publishers and other Service Providers

We use contact information about individuals within other organizations that we work with in order to fulfil our contractual obligations or as required to conduct our business and pursue our legitimate interests including for our own internal functions such as management, corporate reporting, and record keeping.

4. DISCLOSURES OF YOUR PERSONAL INFORMATION

We will share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with your consent.

Service Providers & Partners. We engage service providers or partners to manage or support certain aspects of our business operations on our behalf. These service providers or partners may be located in the US or in other global locations and may provide services such as product delivery, advertising and marketing activities (including digital and personalized advertising), IT services, email service providers, data hosting, and management or support of our Sites. Our service providers and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by Yext.

Advertisers. We may also transfer information about you to advertising partners (including the ad networks, ad-serving companies, and other service providers they may use) so that they may recognize your devices and deliver interest-based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form. The providers may process the information in hashed or de-identified form. These providers may collect additional information from you, such as your IP address and information about your browser or operating system and may combine information about you with information from other companies in data sharing cooperatives in which we participate. For more information, read Section 2 (Use of Cookies and Similar Technologies) above.

Affiliates. Yext is a global business, headquartered in the United States. Your personal information collected by us in accordance with this Privacy Policy is used and shared amongst Yext, Inc. and the Yext affiliates for the purposes of providing the Sites, delivering our Products and services, managing your accounts, hosting, IT, security, support, billing, marketing, and communications. The list in Section 8 describes the management responsibility for respective data processing activities by the listed Yext affiliates. If your personal information is transferred from Japan (and subject to Japanese privacy laws), it will be considered to be jointly used between Yext, Inc. and the listed Yext affiliates in accordance with the joint use cases set forth in Section 8.

Legal Requirements. We disclose personal information to government authorities or other third-parties if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a subpoena, court order or similar legal obligation, (b) protect and defend our rights or property, (c) act in urgent circumstances to protect the personal safety of users of any Site or the public, (d) protect against legal liability, (e) to investigate fraud or other unlawful activity, or (f) or as otherwise required or permitted by law.

Business Transfers. As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, including in bankruptcy, your personal information may be part of the transferred assets. You will be notified via email and/or a prominent notice on our Sites of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Publishers. If requested, we provide personal information on behalf of our customers, or on behalf of our resellers’ customers, to third-party publishers (e.g. Google) that we work with. For example, if a customer has provided one of its employees’ name, contact details, biography and/or job title to be published on a third-party publisher’s website.

Third-Party Resellers.  We share personal information from US based visitors with selected third-party resellers for their direct marketing purposes. We will obtain your prior consent for such a transfer where required by applicable law.

International Transfers of Personal Information. Your personal information is stored on servers in the US and is supported from the European Economic Area (EEA) and the US. We also transfer your personal information to our affiliates and other service providers who perform functions on our behalf which are based around the world, including in countries outside of the EEA, UK, and Switzerland which may have different data protection standards to those which apply to your country of residence. You can click here to see a list of countries where we may access or transfer your personal information. Where your personal information is transferred from Japan (and subject to Japanese privacy laws), please refer here to see personal information protection system taken by Yext, Inc., Yext’s affiliates and other service providers located in the countries listed in Section 8 and those countries listed here.

Where your personal information is transferred outside of the EEA, UK, and Switzerland, and where this is to an affiliate or service provider in a country which is not subject to an adequacy decision by the EU Commission or considered adequate as determined by applicable data protection laws, we will take steps to ensure your personal information is adequately protected by safeguards such as the Standard Contractual Clauses (“SCCs”) approved by the EU Commission. A copy of the relevant mechanism can be obtained for your review on request by using the contact details in Section 8.

In addition, although Yext, Inc. relies on safeguards such as the SCCs to receive personal information from the EEA, UK, and Switzerland and despite recent developments from the Court of Justice of the European Union, Yext, Inc. continues to participate in and has certified its compliance with the EU-US Privacy Shield and the Swiss-US Privacy Shield Frameworks. To learn more about the Privacy Shield Framework, visit the US Department of Commerce’s website (www.privacyshield.gov). To learn more about Yext, Inc.’s participation in the Privacy Shield Framework, please see our Privacy Shield Notice here for further information.

5. WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO YEXT’S DIRECT MARKETING

Where we rely on consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above in Section 3. You have the absolute right to opt out of our direct marketing at any time, and EEA, UK, and Swiss individuals can also opt out of profiling we carry out for direct marketing at any time. To stop receiving newsletters or marketing communications from us, you can use the unsubscribe mechanism in the relevant communication or you can send an email to email-unsubscribe@yext.com with information necessary to process your request. Please note that this will not stop you from receiving service-related messages (i.e., non-marketing communications) such as email messages to let you know our service has been suspended for maintenance.

6. EUROPEAN DATA PROTECTION RIGHTS

Where our entities within the EEA, Switzerland, or the UK process your personal data or where we process personal data of individuals located in the EEA, Switzerland, or the UK, you may have the right to ask us for a copy of your personal data, to correct, delete or restrict processing of your personal data, to obtain the personal data you provide to us in a structured, machine readable format, and to ask us to share (or port) this data to another controller. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we are not required to process such data in order to meet a contractual or other legal requirement).

We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests which we have described above. You can obtain information on any of our balancing tests by contacting us using the details below.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are set out in applicable data protection laws. We will inform you of the relevant exemptions we rely upon when responding to any request you make.

To exercise any of these rights, please email privacy@yext.com with the information necessary for us to process your request. Note that we may need to request additional information from you to verify your identity or understand the scope of your request. If you have unresolved concerns, you may have the right to complain to an EU, UK or Swiss data protection authority where you live, work or where you believe a breach may have occurred.

If you deactivate your account, we will delete, block or anonymize your personal information so that it is no longer possible to identify you, subject to our retention policy below.

If you have provided a review to one of our customers, please contact that customer directly if you have any questions about their privacy practices or wish to stop receiving communications from that customer or wish to exercise your rights in respect of personal data processed by that customer.

7. CALIFORNIA PRIVACY NOTICE

If you are a California resident, this section contains disclosures required by the California Privacy Rights Act (“CPRA”) and applies only to “personal information” we process about our business contacts, such as customers and prospective customers, that is subject to the CPRA. This section does not cover personal information about End Users of our customers, which we process solely on behalf of customers as a “service provider” or “processor.” End Users must contact our customers to exercise any rights that may be available to them under the CPRA or other state privacy laws.

California Personal Information We Collect and Disclose.  As further set forth in the chart below, in the past 12 months, we collected and disclosed the following categories of personal information about our business contacts:

Categories of Personal Information

Categories of third parties to whom we disclosed personal information:

Personal and online identifiers (such as first and last name, email address, or unique online identifiers)

All categories listed below.

Record-keeping information (such as financial information for payment purposes)

Service providers.

Commercial or transactions information (such as records of products or services obtained or considered)

All categories listed below.

Internet or other electronic network activity information (such as interactions with the Yext platform, our Sites, emails, and applications, and/or advertisements)

Service providers, advertising providers.

Audio or visual information (such as video or call recordings)

Service providers.

Professional or employment-related information

All categories listed below.

Sensitive personal information (such as account log-in information for the Yext platform)

Service providers.

Other information about you that is linked to the personal information above

All categories listed below.

Categories of Sources. We collect this personal information from the following categories of sources:

  • You, such as when you provide it to us directly, access the Yext platform, or  use our Sites;
  • Others at your company, in connection with the business relationship between Yext and your company;
  • Service providers;
  • Partners that are authorized to resell Yext services;
  • Event organizers of events you register to attend; and
  • Commercial data resellers.

Recipients of California Personal Information.  As identified in the above chart, we may disclose the categories of personal information we collect to the following categories of third parties for business purposes:

  • Service providers, including internet service providers, data analytics providers, and operating systems and platform providers;
  • Advertising providers, which may use cookies and similar technologies to collect information directly as described above; and
  • Partners that are authorized to resell Yext services.

We do not sell the personal information we collect about you, but we may share such personal information for interest-based advertising purposes (also known as “cross-context behavioral advertising”) by allowing third-party advertising providers to collect data as described above under “Use of Cookies and Similar Technologies”.

Why We Collect, Use, and Share California Information. We use and disclose this personal information for our commercial and business purposes, as further described in this Privacy Policy.  These commercial and business purposes include, but are not limited to:

  • Our commercial purposes, such as maintaining our relationships with our customers, providing the Yext platform, advertising and marketing to you, and enabling commercial transactions with you.
  • Our business purposes as identified in the CPRA, such as:
    • Auditing related to our interactions with you;
    • Legal compliance;
    • Detecting and protecting against security incidents, fraud, and illegal activity;
    • Debugging;
    • Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;
    • Internal research for technological improvement;
    • Internal operations;
    • Activities to maintain and improve our services; and
    • Other one-time uses.

Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses like Yext.  If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

  • The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information;
  • The right to request that we delete the personal information we have collected from you.
  • The right to request that we correct the personal information we maintain about you.
  • The right to opt out of our sharing of your personal information for interest-based advertising purposes (also known as “cross-context behavioral advertising”).
  • The right not to receive discriminatory treatment for exercising privacy rights conferred by the CPRA.

While the CPRA provides an opt-out opportunity for certain uses or disclosures of “sensitive personal information” (as defined under the CPRA), Yext uses and discloses such information only for purposes permitted by the CPRA that do not require an opt-out opportunity.

To exercise the above rights, please contact us using the following information and submit the required verifying information, as further described below:

  • For requests to know, delete, or correct personal information, online at this link or by phone at 1-888-444-2988
  • For requests to opt out of interest-based advertising, select the “Do Not Sell or Share My Personal Information” option here.

Verification Process and Required Information. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled.  For requests to know, delete, or correct personal information, we will require you to provide, at a minimum, your name, business email address, and business phone number.  Please see the online form for details.

Authorized Agent. You may designate an authorized agent to make a CPRA request on your behalf by submitting a written, signed permission to privacy@yext.com.  Please see the online form for details.

Minors.  We do not knowingly sell or share the personal information of minors under 16 years of age.

8. MISCELLANEOUS

Third-Party Websites and Services. The Sites may contain links to third-party owned and/or operated websites or utilize third-party services. We are not responsible for the privacy practices or the content of such websites or services. Please contact these third-parties directly for information regarding their privacy practices prior to providing them with any information. Parts of the Sites utilize YouTube API Services. These YouTube API Services are subject to the privacy practices currently found at https://www.youtube.com/t/terms. Some of our Products are integrated into our customers’ own websites, applications and communications (“Customer Solutions“). Where this is the case, we do not interact directly with the ultimate end user of these Customer Solutions and the customer will be responsible for the operation of these Customer Solutions and any personal information collected in connection therewith. We are not responsible for the processing of personal information by these Customer Solutions save to the extent that we receive any personal information via these Customer Solutions on behalf of the customer or the reseller in order to fulfil the Product and service requests. In these cases, we will act as a data processor and this Privacy Policy will not apply to such personal information. Please contact the relevant customer or reseller directly if you have questions regarding their data collection practices or any communications you may receive from them.

Blogs and Public Features of the Sites. Some of our Sites offer publicly accessible blogs or community forums. You should be aware that any personal information you submit there can be read and collected by other users of these forums and could be used to send you unsolicited messages and for other purposes. Our blog is managed by a third-party application that may require you to register to post a comment. We do not have access to or control of the information posted to the blog. None of the information that you provide using these features is protected by this Privacy Policy. We are not responsible for the personal information you choose to submit in these forums or the use thereof by any third-party. You will need to contact or log into the third-party application if you want the personal information that was posted to the comments section removed. To learn how the third-party application uses your information, please review their privacy policy.

Security. We take commercially reasonable steps to protect personal information from loss, misuse, unauthorized access, disclosure, alteration and destruction (information on Yext, Inc. and Yext affiliates’ security measures are available here). However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from a Site may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail. Please keep this in mind when disclosing any personal information to us or to any other party via the Internet. When you enter sensitive information (such as a credit card number in the US) on our order forms or login credentials (such as username and password) on our platform login, we encrypt the transmission of that information using secure socket layer technology (SSL).

Retention. We will retain your information for as long as your account is active or longer if needed to provide you services and our Products, comply with our legal obligations, resolve disputes or enforce our agreements. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable opportunity. For instance, in respect of data held for the management of customers and prospects, we consider the lead time necessary to develop and maintain our commercial relationships and how recent our interactions are with you. We may rectify, update or remove incomplete or inaccurate information, at any time and at our own discretion. For more information on our retention periods you can contact privacy@yext.com.

Minors. Visitors under 16 years of age are not permitted to use and/or submit their personal information on any Site. We do not knowingly solicit or collect information through our Sites from visitors under 16 years of age. We encourage parents and guardians to spend time online with their children and to participate and monitor the interactive activities of their children.

Data Controllers and Contacting Us. The relevant controller for your information is set out below. Our “contact us” page contains e-mail links that allow you to contact us directly with any questions or comments that you may have. If you have any questions about this Privacy Policy or our privacy practices or to make a complaint about our compliance with applicable privacy laws, please feel free to contact us at privacy@yext.com or at the relevant affiliates below. Where more than one entity is listed, please send your query to privacy@yext.com.

Data Controller:

Responsible for:

Yext, Inc.

61 Ninth Avenue

New York, NY 10011

United States of America

Yext, Inc.’s European representative:

Yext SAS (see address below)

Yext.com

All other activities (both online and offline)

Yext (Canada) Corp.

160 Elgin Street

Suite 2600

Ottawa, ON K1P 1C3

Canada

Marketing activities supporting Yext, Inc.

Yext B.V.

Weesperstraat 61

1018 VN Amsterdam

Netherlands

Marketing activities supporting Yext Limited.

Yext GmbH

Eichhornstraße 3,

10785 Berlin

Germany

cc: Yext GmbH Data Protection Officer

Attorney at Law Dr. Karsten

Kinast, LL.M

KINAST Rechtsanwaltsgesellschaft mbH

Hohenzollernring 54

50672 Cologne

Germany

Yext.de

Marketing activities supporting Yext Limited.

Yext Limited

7th Floor UK House

2 Great Titchfield Street

London W1D 1NN

United Kingdom

Yext Limited’s European representative:

Yext SAS (see address below)

Yext.co.uk

Responsible for processing orders and invoicing and (with your consent, where required) providing information about other Yext Products and services that may be of interest.

Yext Sàrl

c/o Genint SA

rue Jean-Calvin 12

1204 Geneva

Switzerland

Yext SARL’s European representative:

Yext SAS (see address below)

Marketing activities supporting Yext Limited.

Yext SAS

83 Avenue de La Grande Armée

75016 Paris

France

Yext.fr

Marketing activities supporting Yext Limited.

Yext SAS (Italian Branch)

Largo Richini 6

20122 Milan

Italy

Marketing activities supporting Yext Limited.

Yext Technologies S.L.U.

Paseo de la Castellana, 200

28046 Madrid

Spain

Marketing activities supporting Yext Limited.

Yext KK

Toranomon Hills Mori Tower, 8F

1-23-1 Toranomon, Minato-ku, Tokyo 105-6308

Japan

Kentaro Nakano, Director

Yext.co.jp

Under the Act on the Protection of Personal Information in Japan, Yext KK is a business operator handling personal information obtained through Yext.co.jp or all other activities (both online and offline) in Japan and is primarily responsible for management of such personal information.

Please consult the Personal Information Protection Commission’s website to review the outline of personal information protection laws/systems in countries where Yext, Inc., Yext’s affiliates and other service providers are located.