This Privacy Policy explains what personal data Yaco (yacobook.com) processes, for what purposes, who it is shared with, and what rights you have as the owner of your data.
1. Data controller
The controller of the personal data collected through yacobook.com is Quartz Tech Labs (hereinafter, "the Controller").
Contact channels: soporte@yacobook.com to exercise your data rights, and contacto@quartztechlabs.com for legal inquiries or to request the Controller's complete corporate details. More information about the company at quartztechlabs.com.
2. Legal framework
This policy is governed by Argentine Personal Data Protection Law 25.326 and its implementing Decree 1558/2001. The supervisory authority is the Agency for Access to Public Information (AAIP), before which data owners may file complaints and claims.
Since the site is published in three languages and receives visitors from abroad, this policy is also written following the principles of international data protection standards, such as the EU GDPR and Brazil's LGPD, without this implying submission to jurisdictions other than those legally applicable.
You can learn about the Argentine supervisory authority at argentina.gob.ar/aaip.
3. What data is processed and why
Yaco processes personal data of four types of data subjects, for these purposes:
- Travelers: name, phone number or contact method, optional email address, desired dates and the inquiry message. Purpose: to forward the inquiry to the contacted provider so they can reply.
- Affiliate applicants: name, phone, email, business name, type of activity, region, social media handles and comments. Purpose: to verify the application and evaluate onboarding to the platform.
- Affiliates with an account: account data (email, name), listing content and operational records (inquiries received, calendar, email deliveries). Purpose: to provide the platform's service.
- Site visitors: technical data (IP address, browser type) and aggregated usage metrics. Purpose: security, error diagnosis and usage statistics.
4. Your inquiry is shared with the provider
When you send an inquiry to a provider, your name, your phone number or contact method, your email (if provided), the dates and your message are shared with that provider, who then processes them on their own behalf, as an independent controller, to reply to you and manage your potential booking.
This transmission is the very purpose of the service: without it, it is not possible to put the traveler in contact with the provider. The notice also appears on the inquiry form itself. Yaco does not sell personal data or share it with third parties for advertising purposes.
5. Processors and third-party services
To operate, Yaco uses infrastructure and service providers that may process personal data on behalf of the Controller, as data processors:
- Resend: transactional email delivery (application acknowledgments, inquiry notifications).
- Object storage and CDN: hosting and delivery of the images uploaded by affiliates.
- Hosting (VPS): servers running the platform and its database.
- Meilisearch: the site's internal search engine.
- OpenFreeMap: map tiles for the site's maps; when a map loads, your IP address reaches this provider (it only loads with your consent).
- Umami (self-hosted): cookie-free web analytics that does not identify individuals (it only loads with your consent).
- Sentry: technical error logging for the site, which may include IP address and browser data.
6. International transfers
Some of these providers are based outside Argentina or host data in other countries, so using the site may involve international data transfers. The Controller seeks to ensure that such transfers are made to jurisdictions with adequate levels of protection or under appropriate contractual safeguards.
7. Retention periods
Data is kept only as long as necessary for its purpose: traveler inquiries and their delivery records, for 24 months; unapproved applications, for 12 months; affiliate account data, while the account is active and for 24 months after closure; and technical and analytics records, for 12 months. Once these periods expire, data is deleted or anonymized.
8. Your rights
As the owner of your data, you have the right to access it and to request its rectification, updating or deletion, free of charge at intervals of no less than six months, unless you can demonstrate a legitimate interest (section 14, Law 25.326).
To exercise them, write to soporte@yacobook.com stating your request and a way to verify your identity. We respond within the legal deadlines (10 calendar days for access; 5 business days for rectification or deletion). If the response does not satisfy you, you may file a claim with the Agency for Access to Public Information.
9. Minors
Yaco is not aimed at minors and does not knowingly collect data from minors. If you become aware that a minor has provided personal data through the site, write to us so we can delete it.
10. Security
The Controller applies reasonable technical and organizational measures to protect data: traffic encryption (HTTPS), role-based access control to the admin panel, hashed password storage, periodic backups and email delivery logging. No system is infallible; in the event of a security incident affecting personal data, those affected and the authority will be notified where applicable.
12. Changes to this policy
This policy may be updated to reflect changes in the platform or in regulations. The last-updated date appears at the top of the page; substantial changes will be announced with a visible notice on the site and, where appropriate, cookie consent will be requested again.
13. Language
This policy is published in Spanish, English and Portuguese. The Spanish version is the only legally binding one and prevails in case of any discrepancy of interpretation with its translations.
14. Contact
These are the contact channels for everything related to your personal data:
Exercise of rights and data inquiries: soporte@yacobook.com. Legal or corporate inquiries: contacto@quartztechlabs.com.