Privacy policy
How Yohello handles your data. Clear, honest and in line with the GDPR.
Who is responsible
Yohello is a service of Systematix B.V., based in the Netherlands. We are the data controller within the meaning of the General Data Protection Regulation (GDPR).
This privacy policy applies to everyone who uses Yohello: both hosts and visitors. Where relevant, we make a distinction between the two groups.
In short: Yohello only processes data that is needed to run the platform and to give you a safe, reliable experience. We never sell data to third parties.
Which data we process
Hosts
| Data | Explanation |
|---|---|
| Name and email address | For your account and communication via Esther. |
| Phone number | For personal contact during support and onboarding. |
| Identity document | Verification via Veriff (GDPR certified). Yohello does not store the document itself, only the verification status. |
| IBAN account number | For weekly payouts. Stored encrypted. |
| VAT number (optional) | Only if you invoice as a business. |
| Profile information | Name, photo, description and rate. This is what visitors see when you share your link on social media: only this data is public on your host page, the rest is not. |
| Call recordings | Encrypted, accessible only to you and the visitor. See section 7. |
| Earnings and statistics | Call minutes, contacts, payout history. Needed for DAC7 reporting. Visible only to you, never on your public page. |
Visitors
| Data | Explanation |
|---|---|
| Name and email address | For your account and transactional emails. |
| Credit history | Top-ups and spending. Kept for your overview and to meet our legal obligation. |
| Message history | Written, voice and video messages. Expire after 45 days unless marked. |
| Call recordings | Encrypted, accessible only to you and the host. See section 7. |
| IP address and device data | Kept temporarily for fraud prevention and platform safety. |
For hosts who share their link: your host page only shows your profile name, photo, description and rate. Your email address, phone number, IBAN and earnings are never visible to visitors. So you can safely put your link in your bio or story.
Why we use this data
- Creating and managing your account
- Processing payments and payouts
- Making live calls, messages and credit transactions possible
- Showing your host page to everyone who clicks the link you shared
- Meeting legal obligations (DAC7, VAT, anti money laundering rules)
- Identity verification of hosts via Veriff
- Personal support via Esther for hosts
- Fraud prevention and platform safety
- Transactional notifications (new message, payout, availability)
We do not send marketing emails without your explicit consent. Transactional emails fall outside this.
Legal basis
Yohello processes personal data on the following legal bases:
- Performance of a contract, processing needed to deliver the service, such as payments, recordings and account management.
- Legal obligation, DAC7 reporting, identification requirements and the retention obligation for financial data.
- Legitimate interest, fraud prevention and platform safety, as far as this does not disproportionately affect your rights.
- Consent, for optional communication such as newsletters. You can withdraw it at any time.
How long we keep data
| Type of data | Retention period |
|---|---|
| Account data (name, email) | As long as your account is active + 2 years after deletion |
| Financial data (IBAN, payments) | 7 years (statutory retention obligation) |
| Call recordings (not marked) | 45 days, then deleted automatically |
| Call recordings (starred) | Indefinitely, until you delete them yourself |
| Messages (not marked) | 45 days, then deleted automatically |
| IP address and device data | 90 days |
| Verification data (via Veriff) | In line with Veriff's policy; Yohello only keeps the verification status |
After your account is deleted, personal data is anonymised, unless a statutory retention obligation applies.
Sharing with third parties
Yohello only shares data with third parties as far as necessary for the service or required by law:
- Veriff, identity verification for hosts. GDPR certified, based in the EU.
- Stripe (payment provider), for processing top-ups. PCI-DSS compliant.
- Dutch Tax Administration, DAC7 reporting of host earnings, as required by law for digital platform operators in the EU.
- Hosting partner, server services within the EU for storing and processing data.
Yohello never sells personal data to advertisers or other commercial parties. If you share your host page on social media, Yohello shares nothing about you with that social network: we do not place social media trackers or plug-ins.
Note for hosts: Under the DAC7 directive we are required to inform the Dutch Tax Administration each year about your earnings if they exceed the statutory threshold. This is separate from your own tax return. You can find more information in the host portal under Earnings.
Recordings and calls
All live calls and messages are stored automatically and encrypted. This applies to audio, video and chat messages.
- Recordings are accessible only to the host and the visitor who took part in the call.
- Yohello staff have no access to the content of recordings. Only technical metadata (time, duration) is visible internally for platform management.
- Recordings are stored encrypted on secure servers within the EU.
- Unmarked recordings expire after 45 days and cannot be retrieved after that.
- Calls never end up on your public host page or on social media. What you share is only your link, never the content of a call.
By using Yohello you agree to calls being recorded. This consent is part of the terms of use.
Posts, hearts and replies
Hosts can place photos and short videos on their page. In doing so we process the following data:
- The media and the caption of the post, stored encrypted on secure servers within the EU. Metadata such as location data (EXIF) is removed during processing.
- An automatic check of every post by an AI model against the house rules; in case of doubt a staff member reviews the post. The outcome is kept with the post.
- Hearts, views and replies from visitors. Replies are visible only to the visitor who replies and the host; numbers of hearts, views and followers are visible only to the host.
- Who you follow, to put together your feed and notifications.
Deleted posts are permanently removed from our servers after 30 days. If you delete your account, your posts, hearts, replies and follow relationships are deleted along with it.
Your rights
Under the GDPR you have the following rights:
- Access, request which data we hold about you.
- Rectification, have incorrect data corrected.
- Erasure, request deletion of your data, unless a statutory retention obligation applies.
- Objection, object to processing based on legitimate interest.
- Data portability, receive a copy of your data in a machine readable format.
- Restriction of processing, have processing restricted while a request is being handled.
- Withdrawal of consent, withdraw consent you gave earlier at any time.
As a host you decide what is on your page: you can change your profile name, photo, description and rate at any time, or take your page offline, even after you have shared your link.
Send your request to privacy@yohello.com. We respond within four weeks. If you have a complaint, you can also contact the Dutch Data Protection Authority.
Cookies
A cookie is a small text file that is stored on your device when you visit Yohello. We only use cookies that are necessary for the platform to work or that give you a better experience. We do not place advertising cookies and we do not share cookie data with advertisers.
| Cookie | Purpose | Retention |
|---|---|---|
| Session cookie | Keeps you logged in during your visit. Strictly necessary to use the platform. | Duration of the session (disappears when you close your browser) |
| Authentication cookie | Recognises you on your next visit if you ticked “Stay logged in”. | 30 days |
| Preference cookie | Remembers your settings, such as your chosen call type or notification preferences. | 1 year |
Consent and management
All cookies that Yohello places are functional and strictly necessary for logging in and remembering your settings. No consent (banner) is legally required for those. We do not place analytics or advertising cookies.
- You can delete or block cookies through your browser settings. Keep in mind that blocking session cookies can disrupt your use of the platform.
Yohello does not use social media plug-ins, embedded advertising networks or other external tracking scripts on the platform. If someone follows your link from Instagram, TikTok or another app, they land on a page without trackers.
Changes
Yohello may update this privacy policy if the service changes or new legal obligations come into force. In the event of material changes we will inform you by email and through a notification in your account, at least 14 days before the effective date.
You can always find the most recent version at yohello.com/privacybeleid.
Contact
Questions about this privacy policy or about your data? Get in touch via:
Yohello, Systematix B.V.
Email: privacy@yohello.com
As a host, not sure what becomes visible once you share your link? Esther will take a look with you, at esther@yohello.com
Version 1.0, effective from launch.