Privacy Policy | YESCO Management Solutions

YESCO Franchising LLC dba YESCO Management Solutions and its affiliates (“YESCO”) provide a portfolio of programs for fostering practices of leadership, management, training, coaching, collaboration, and maintenance of organizational standards.

YESCO makes the portfolio of programs available primarily through a hosted software platform (the “Platform”). The content, frameworks, and methodologies made available through the Platform are the “Programs”, and together with related coaching (“Coaching Sessions”) and support, are the “Services”.

“Client” refers to the registered organization. “Authorized Users” means the individuals the Client permits to access the Services under its subscription. “Customer Data” means information the Client and its Authorized Users submit to, or generate within, the Platform.

This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect personal information in connection with the Platform and our website (“Website”). This Policy has been designed to satisfy existing privacy standards.

This Policy covers the Platform and our Website (both hosted at managementsolutions.yesco.com). By using the YESCO Management Solutions Platform and Website you consent to the data collection procedures expressed in this Policy. This Policy does not govern the collection and use of information by companies that YESCO does not control, nor by individuals not employed by, or managed by us.

1. Our Role: Controller and Processor

Our role depends on the data:

Processor / service provider.We act as processor (service provider under US privacy laws) for Customer Data — information a Client and its Authorized Users submit to, or generate within, the Platform, as defined in our Terms and Conditions. This includes the roster of Authorized Users that a Client's administrator provisions (such as name, business email address, organization, and job title or role) and the content generated in the Programs (projections, plans, tasks, notes, and reference materials). We process this on the Client's behalf and under its instructions, in accordance with our agreement with that Client (including any Data Processing Agreement). The Client is the controller of this data. If you are an Authorized User, please direct requests about it to your organization; we will assist the Client in responding.
Controller / business.We act as controller for a limited set of information for which we determine the purposes and means ourselves: account authentication and security (including login credentials and security logs); billing and payment contact and payment information; service and transactional communications; fraud prevention and misuse detection; operation and security of our Website, including visitor analytics; and compliance with our legal obligations. Where the same identifier falls in both categories — for example, using an Authorized User's business email both as part of the Client's roster and to send an account or security notice — we process that limited information as controller only for these account-administration, security, billing, and communication purposes.

2. Information We Collect

2.1 Information you provide

Account and profile information: name, business email address, organization, job title or role, and login credentials.
Information Clients and Authorized Users enter into or generate through the management Programs: e.g. projections, plans, tasks, notes, and reference materials.
Communications: messages, support requests, and feedback you send us.

2.2 Information collected automatically

Usage and device data: IP address, device and browser type, operating system, features and pages used, timestamps, and referring URLs.
Cookies and similar technologies: see Section 6 (Cookies and Analytics).

3. How We Use Information

Collection of data occurs for the following reasons:

To provide, operate, and maintain the Platform and Services;
To provide Client support and respond to requests;
To send service communications and, where permitted, marketing communications (with an opt-out);
To authenticate users and keep accounts and tenant data secure and separated;
To detect, prevent, and respond to security incidents, fraud, and misuse;
To troubleshoot, update, and develop additional features;
To use aggregated or de-identified usage data to analyze, improve, and promote the Services; and
To comply with legal obligations and enforce our agreements.

We do not sell personal information. We share personal information as follows:

In ways outlined in this Policy or to which consent has been granted.
As necessary to provide products or services purchased.
As necessary to enforce the Terms and Conditions.
Service providers / subprocessors that host and support the Platform (see Section 5).
Professional advisors and auditors under confidentiality obligations.
Legal and safety disclosures: to comply with law, respond to lawful requests (such as a subpoena), or protect the rights, property, and safety of YESCO, our Clients, and others.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
In the aggregate so that your identity cannot reasonably be determined.

5. Subprocessors and Service Providers

We rely on the following key service providers to operate the Platform:

Supabase — database, authentication, and file storage hosting. East US.
Vercel — Platform hosting and content delivery. Washington, D.C., USA.
Google Workspace (including Gmail and Google Meet) — transactional and, where applicable, marketing email; and video conferencing for Coaching Sessions.
Google Analytics — Website analytics.
NetSuite (Oracle NetSuite) — payment processing and financial management, used to store and process Client name, contact, and payment information.

6. Cookies and Analytics

We use cookies and similar technologies to collect information about your use of the Website to help create reports and statistics on the performance of the Website. Analytics cookies such as Google Analytics collect information such as your IP address, device type and operating system, referring URLs, location and pages visited. If you don't want Google Analytics to collect this information, install the ‘Google Analytics Opt-Out Browser Add-On’ provided by Google.

7. Data Retention

Data collected will be stored no longer than reasonably necessary as determined by: the time your personal information remains relevant; the time to demonstrate fulfillment of our duties and obligations; periods within which claims might be made; retention periods prescribed by law or recommended by regulators, professional bodies or associations; the contractual relationship we have with you, the existence of your consent, and our interest in retaining such information outlined in this Policy.

For Customer Data specifically, retention, return, and deletion following termination of a Client's subscription are governed by our Terms and Conditions and the Data Processing Agreement, including the post-termination export window and deletion timeline described in those documents.

8. Security

YESCO takes precautions to protect your information. When you submit sensitive information on the YESCO Management Solutions Platform and Website, that information is encrypted and transmitted in a secure way. Such security can be verified by a lock icon in the address bar and “https” at the beginning of the web address.

We use technical and organizational measures designed to protect personal information, including encryption in transit (TLS) and at rest, logical tenant isolation (row-level security), access controls on a least-privilege basis, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

While encryption is used to protect sensitive information transmitted online, we also protect information offline. Only employees who need the information to perform a specific job are granted access to personal information. The computers and servers where personal information is stored are kept in a secure environment. This is done to prevent loss, misuse, unauthorized access, disclosure, or modification of the user's personal information within our control.

YESCO also uses Secure Socket Layer (SSL) for authentication and private communications.

9. Cross-Border Data Processing

We provide the Services to Clients and Authorized Users in the United States and Canada, and we store and process personal information in the United States. If you are located in Canada, your personal information is transferred to, and processed and stored in, the United States. While it is in the United States, your information may be subject to lawful access by US courts, law enforcement, and government authorities.

Under Canadian privacy law (PIPEDA and applicable provincial laws), an organization that transfers personal information to a service provider in another country remains accountable for its protection. Our handling of Customer Data is governed by our agreement with the relevant Client, including the Data Processing Agreement.

10. Your Privacy Rights

We do not sell personal information or use it for cross-context behavioral advertising.

10.1 US state privacy rights

Depending on your state of residence (including California, Utah, Virginia, Colorado, Connecticut, and others), you may have the right to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of the sale or sharing of personal information or its use for targeted advertising. To exercise these rights, contact us at managementsolutions@yesco.com. We will verify and respond within the timeframe required by law.

Note for Authorized Users: if your personal information was provided to the Platform by an organization (such as your employer or another Client), please direct your request to that organization. As their service provider, we will assist them in responding.

10.2 Canadian privacy rights

If you are in Canada, you may have the right under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws to access and correct your personal information and to withdraw consent, subject to legal and contractual limits. You may also make a complaint to the Office of the Privacy Commissioner of Canada. To exercise these rights, contact us at managementsolutions@yesco.com; if your information was provided to the Platform by an organization, we will direct you to that organization as described above.

10.3 Marketing opt-out

All users and visitors to our Platform and Website have the option to discontinue receiving marketing communications from us. To discontinue or unsubscribe from YESCO's communications, please send an email to managementsolutions@yesco.com stating that you wish to unsubscribe.

YESCO maintains and reserves the right to contact you for non-marketing purposes (such as bug alerts, security breaches, account issues, and/or changes in YESCO's products and services). In certain circumstances, we may use our Platform or Website or other public means to post a notice.

11. Children's Privacy

The YESCO Management Solutions Platform and Website are not directed toward, and do not knowingly collect personal information from, children under the age of thirteen (13). If it is determined that information has been inadvertently collected from users under the age of thirteen (13), we shall immediately take steps to ensure that such information is deleted from our database, or that verifiable parental consent is obtained for the use and storage of such information.

12. Links to Other Websites

YESCO does not claim or accept responsibility for any privacy policies, practices and/or procedures of other websites. This Policy applies only to the information collected by the YESCO Management Solutions Platform and Website.

13. Changes to This Policy

We reserve the right to make changes to this Policy at any time. Refer to this page for the most recent changes and updates. Authorized Users shall be notified by email if personal information is used differently from that which was stated when initially collected. Upon email notification, users shall have the option to opt out of the use of their information in this separate manner.

14. Relationship to Our Terms

This Privacy Policy describes our information practices and is provided for informational purposes; it does not by itself form a contract. The contractual terms governing your organization's use of the Platform and Services are set out in our Terms and Conditions and, for the processing of personal data, the Data Processing Agreement. Your continued use of the Website and Platform following the posting of updates to this Policy reflects our then-current practices, and we will notify Authorized Users of material changes as described in Section 13.

15. How to Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us at the following email or mailing address.

Email: managementsolutions@yesco.com

Mailing Address:
YESCO Management Solutions
2401 S Foothill Dr
Salt Lake City, Utah 84109