GDPR Compliance

YTNiches (ytniches.com) acts as the data controller for personal data collected through our platform. As data controller, we determine the purposes and means of processing your personal data.

For GDPR-related inquiries, you can reach us at: help@ytniches.com

Under the GDPR, we process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the YTNiches service you subscribed to (account management, delivering niche data, processing payments)
• Legitimate interests — fraud prevention, service improvement, security monitoring, and internal analytics
• Consent — sending marketing emails and weekly digests (you can withdraw consent at any time)
• Legal obligation — retaining financial records as required by tax and accounting laws

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR / UK GDPR:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure / “right to be forgotten” (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Rights related to automated decision-making (Article 22)

We aim to respond to all GDPR requests within 30 days. Complex requests may take up to 90 days, in which case we will notify you of the extended timeline.

You have the right to obtain confirmation of whether we process your personal data, and if so, to receive a copy of that data along with information about:

• The purposes for which it is processed
• The categories of data concerned
• Recipients or categories of recipients
• The retention period or criteria used to determine it
• Your other rights under GDPR

To request access, email help@ytniches.com with the subject “Data Access Request.”

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note: We may retain certain data where required by law (e.g., financial records must be kept for 7 years). We will inform you of any such exceptions when processing your request.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON or CSV), and to transmit that data to another controller where technically feasible. This right applies where processing is based on consent or contract performance.

To request a data export, email help@ytniches.com with subject “Data Portability Request.”

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.

You may opt out of marketing communications at any time by visiting your Email Preferences page or clicking the unsubscribe link in any email we send.

YTNiches uses cloud services that may store and process data outside your country of residence. Our primary providers include:

• Supabase — database hosting (EU-West region available)
• Vercel — web hosting with global edge network
• Resend — email delivery (US-based)

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

We retain personal data for no longer than necessary:

• Active account data: retained while your account is active
• Deleted accounts: personal data removed within 30 days
• Payment records: 7 years (legal requirement)
• Email logs: 90 days
• Analytics data: anonymized after 12 months

To submit a GDPR request:

We may ask you to verify your identity before processing sensitive requests to protect your data.

If you believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with your national data protection authority. For EU residents, find your local authority at edpb.europa.eu. For UK residents, contact the Information Commissioner's Office (ICO).

We encourage you to contact us first so we can try to resolve your concern: help@ytniches.com