Yext Privacy and Cookies Policy (Effective Date: February 1, 2021) This Yext Privacy & Cookies Policy (this “Privacy Policy”) explains how your personal information is collected, used and disclosed by Yext, Inc. and the Yext affiliates listed in the “Data Controllers and Contacting Us” section below (“Yext”, “us”, or “we”) and how we collect information through the use of cookies and related technologies. It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country’s or state’s laws, including (in the European Economic Area (“EEA“), and UK), a right to object to some processing that we carry out or, where we rely on consent, how to withdraw that consent. This Privacy Policy applies to personal information we obtain from or about you when you (i) visit all Internet sites operated by Yext that link to this Privacy Policy (collectively, the “Sites“) and interact with our products (e.g. Listings, Reviews, Pages, Answers) made available through such Sites (collectively, the “Products“); (ii) interact with our social media pages and advertisements, customer services, communications, webinars or blogs; or (iii) participate in our events and demonstrations. Unless otherwise stated, Yext acts as the data controller for the data processing operations described in this Privacy Policy. We may provide additional information about our privacy practices at other points, for example, when we ask you to provide personal information in connection with a particular service, and where this will help us provide more relevant and timely information. We reserve the right to make changes to our practices and this Privacy Policy at any time. If we change the way we handle your personal information, we will update this Privacy Policy and notify you as appropriate. This Privacy Policy addresses the following: INFORMATION THAT WE COLLECT ABOUT YOU USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES USES MADE OF YOUR PERSONAL INFORMATION AND OUR LEGAL BASIS FOR PROCESSING DISCLOSURES OF YOUR PERSONAL INFORMATION WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO YEXT’S DIRECT MARKETING EUROPEAN DATA PROTECTION RIGHTS CALIFORNIA PRIVACY NOTICE MISCELLANEOUS 1. INFORMATION THAT WE COLLECT ABOUT YOU Customers, Site Visitors, and End Users Information Provided by You upon Registration and/or Making a Purchase. When you register for an account on a Site and/or purchase a Product subscription or service from us, we collect information that allows us to identify you, such as: Name E-mail address Address (where entered as part of a “business/location scan”) ZIP/Postal code Home phone Mobile phone Credit card number Billing address Yext login details (username and password) Information Provided When You Contact Us. We also collect personal information that you voluntarily provide to us when you contact us with a question or comment about our Products and services, download our whitepapers or sign up for product demonstrations or events. Typically, this includes: Name E-mail address Organization name Phone number Information about your position Information about your interests and preferences Content of the communication Automatically Collected Information. When you access our Sites and some of our Yext powered properties, we automatically collect (i) technical information about your device including your device’s internet protocol (IP) address, your browser type and version, time zone setting, and operating system and platform; and (ii) information about your visit, including the URL clickstream to, through and from our Sites (including date and time), Products you viewed or searched for, your account/session activity (when logged in), the content (and any ads) that you view or interact with, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. Some of this information is collected using cookies and related technologies. See Section 2 for more detail. Information Collected From Our Third-Party Resellers. We may partner with third-party resellers to receive information about you, such as name and contact information. This helps us to fulfil your service requests and/or provide you with Products and services that may be of interest to you. The reseller will be the controller in respect of any customer account set up information that you provide directly to them (and we will act as the reseller’s processor in this regard). Information Collected in Connection with our Products. Where our customers use our Products, we compile statistical and other information related to the performance and operation of the relevant Products and reviews collected from our third-party publishers including name/alias of reviewers collected from third-party publishers, and will use or share such information with our customers and prospective customers to provide our Products, for research and development purposes, and to provide analytics, reports and benchmarking about our Products (e.g. average location ratings or frequently used terms within the reviews). We also use such aggregated information for our own promotional purposes. We use cookies and similar technologies both on our Sites and our customer sites to collect some of this information (see Section 2 for more detail). If you use our Products to solicit or monitor reviews or otherwise process personal information about your customers (e.g. in connection with Events or Listings), employees, or web visitors (collectively, “End Users”), we will process such personal information on your behalf as data processors. This may include contacting End Users on your behalf or sharing and receiving such personal information with and from publisher sites in accordance with your instructions. We have no direct relationship with End Users. You are responsible for ensuring that you have complied with all applicable data protection legislation (including obtaining any necessary consents) to allow us to process such personal data to provide our Products and services. If you are an End User and believe you have received an email from us on behalf of one of our customers, please contact that company directly with any questions. Information Collected from Other Third-Party Sources We collect data from the following third parties: Data brokers, social media networks and advertising networks – Commercially-available data such as name, address, email address, preferences, interests, and certain demographic data. Analytics Providers – We also receive non-personal data, such as aggregated or de-identified demographic/profile data, from third-party sources including select partners and companies that specialize in providing enterprise data, analytics and software as a service. In order to ensure data accuracy and offer a superior customer experience by providing you with better personalized services, content, marketing and ads, in some cases we link or combine the information that we collect from the different sources outlined above with the information we collect directly from you. For example, we compare the geographic information acquired from commercial sources with the IP address to derive your general geographic area. Information may also be linked via a unique identifier such as a cookie or account number. Where necessary, we obtain information to conduct due diligence checks on business contacts as part of our anti-corruption compliance program and in accordance with our legal obligations. Partners, Publishers and other Service Providers We will process certain contact information about individuals within organizations that we work with such as publishers, mailing houses, payment providers, IT hosting and maintenance providers, events companies and other service providers. 2. COOKIES AND OTHER TRACKING TECHNOLOGIES THAT WE USE We use and allow select partners to use cookies, clickstream capture, pixels, web beacons, embedded scripts, and other similar technologies (collectively “Tracking Tools” or “Tools”) on our Sites, our Products, our Yext powered properties and in our communications with you. We do this to allow our Sites, our Products and other properties to function correctly; measure and improve performance; improve your user experience and enable personalized features and content; provide social media features; optimize our advertisements and marketing; and to enable third-party advertising companies to build a profile of your interests and show you relevant ads on other sites. Typically, these Tracking Tools will capture information about your device (including your IP address), your preferences, your visit to our Sites, our Products and Yext powered properties and your interactions with our communications. For further information, visit www.allaboutcookies.org. When you visit some of our Sites (where required by applicable law), you have the option to accept, reject or adjust most of the categories of Tracking Tools through our cookie consent management tool. You can modify these settings or withdraw your consent at any time by clicking here: link. Details of the cookies which we use (including third-party cookies and the partners with whom we may share your data) and their purposes as follows: Cookie List A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes: Performance Cookies These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. Performance Cookies Cookie Subgroup Cookies Cookies used Lifespan yext.com __utmb, optimizelySegments, __utmt, optimizelyBuckets, _hjAbsoluteSessionInProgress, _mkto_trk, _hjTLDTest, __utma, optimizelyPPID, _gid, _gat_UA-nnnnnnn-nn, optimizelyPendingLogEvents, __hstc, _hjFirstSeen, optimizelyEndUserId, __utmv, __utmc, _hjid, _gclxxxx, __utmz, _uetvid, __hssc, _gat_UA-24978808-1, _gat, __hssrc First Party a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, 730 days, Session, a few seconds, 365 days, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, Session, a few seconds, a few seconds, a few seconds, 16 days, a few seconds, a few seconds, a few seconds, Session www.yext.com PLAY_YEXT_FLASH, _hjIncludedInPageviewSample, __pdst, _hjIncludedInSample, PLAY_YEXT_ERRORS, spark-visitor First Party a few seconds, a few seconds, 365 days, Session, a few seconds, a few seconds answers.yext.com _ga First Party 730 days nr-data.net JSESSIONID Third Party Session static.olark.com _okbk, _ok, _okck, hblid, _oklv, _okcs, olfsk, wcsid, _okgid Third Party Session, Session, a few seconds, a few seconds, Session, Session, a few seconds, Session, a few seconds app.fitsmallbusiness.com AWSALBCORS, AWSALB Third Party a few seconds, a few seconds s3.amazonaws.com testcookie Third Party Session script.hotjar.com _hjIncludedInSample Third Party Session code.jquery.com YextUserCountryCode Third Party Session Strictly Necessary Cookies These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. Strictly Necessary Cookies Cookie Subgroup Cookies Cookies used Lifespan hitchhikers.yext.com OptanonAlertBoxClosed, OptanonConsent First Party 365 days, 365 days liveapi.yext.com session-id First Party Session www.yext.com _ok, olfsk, _oklv, G_ENABLED_IDPS First Party Session, a few seconds, Session, a few seconds yext.com __cf_bm First Party a few seconds ajax.googleapis.com YextUserCountryCode Third Party Session www.yext.co.uk __cf_bm Third Party a few seconds Functional Cookies These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. Functional Cookies Cookie Subgroup Cookies Cookies used Lifespan answers.yext.com _tq_id.TV-8181361872-1.4212 First Party 730 days yext.com hubspotutk First Party a few seconds www.yext.com _okbk, _tq_id.TV-8181361872-1.2989, D_UID, DriftPlaybook First Party Session, 730 days, a few seconds, Session vimeo.com player, vuid Third Party a few seconds, a few seconds Targeting Cookies These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. Targeting Cookies Cookie Subgroup Cookies Cookies used Lifespan yext.com _uetsid First Party a few seconds www.yext.com visitor_id690783-hash, YextUserTimezone, __ar_v4, YextEntryPageUrl, visitor_id#####, __adroll_fpc, PLAY_YEXT_SESSION, _te_, YextDMCookie First Party a few seconds, Session, a few seconds, Session, a few seconds, a few seconds, Session, Session, Session connect.yext.com pardot First Party Session com _fbp First Party a few seconds i.liadm.com _li_ss Third Party a few seconds advertising.com APID Third Party a few seconds adingo.jp mediamath Third Party a few seconds ajax.googleapis.com YextUserTimezone, YextUserRegion Third Party Session, Session facebook.com fr Third Party a few seconds www.facebook.com Third Party Session go.sonobi.com __uis, HAPLB5S, __uir_mm Third Party a few seconds, Session, a few seconds linkedin.com UserMatchHistory, AnalyticsSyncHistory, lissc, lang, bcookie, li_gc, lidc Third Party a few seconds, 30 days, a few seconds, Session, a few seconds, 724 days, a few seconds 3lift.com tluid Third Party a few seconds doubleclick.net IDE, test_cookie Third Party a few seconds, a few seconds spotxchange.com audience Third Party a few seconds lijit.com _ljtrtb_3, ljt_reader Third Party 365 days, 365 days everesttech.net everest_g_v2 Third Party a few seconds d.adroll.com __adroll Third Party a few seconds pardot.com visitor_id690783-hash, visitor_id##### Third Party a few seconds, a few seconds adnxs.com uuid2, anj Third Party a few seconds, a few seconds adroll.com __adroll_shared Third Party a few seconds ads.stickyadstv.com uid-bp-35873, uid-bp-951, sessionId, uid-bp-617, uid-bp-45, uid-bp-529, uid-bp-892, uid-bp-717, UID, uid-bp-159, uid-bp-35889, uid-bp-27649 Third Party a few seconds, a few seconds, Session, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds, a few seconds exelator.com ud, EE Third Party a few seconds, a few seconds ih.adscale.de tu Third Party a few seconds youtube.com VISITOR_INFO1_LIVE, CONSENT, YSC, GPS Third Party a few seconds, 6065 days, Session, a few seconds ads.linkedin.com lang Third Party Session google.com NID Third Party a few seconds 360yield.com um, tuuid, tuuid_lu, umeh Third Party 90 days, 90 days, 90 days, 90 days adsrvr.org TDCPM, TDID Third Party a few seconds, a few seconds openx.net i Third Party a few seconds smartadserver.com TestIfCookieP, pid, csync Third Party a few seconds, a few seconds, a few seconds sharethis.com __stid Third Party a few seconds www.linkedin.com bscookie Third Party a few seconds analytics.yahoo.com IDSYNC Third Party a few seconds taboola.com t_gid Third Party a few seconds adform.net uid, C Third Party a few seconds, 31 days bidswitch.net c, tuuid, tuuid_lu Third Party a few seconds, a few seconds, a few seconds outbrain.com obuid, adrl Third Party a few seconds, a few seconds tapad.com TapAd_DID, TapAd_3WAY_SYNCS, TapAd_TS Third Party a few seconds, a few seconds, a few seconds rlcdn.com pxrc, rlas3 Third Party a few seconds, a few seconds twitter.com personalization_id Third Party a few seconds pi.pardot.com visitor_id690783-hash, visitor_id#####, pardot, lpv690783 Third Party a few seconds, a few seconds, Session, a few seconds pubmatic.com KRTBCOOKIE_xxxx, PugT, PUBMDCID Third Party a few seconds, a few seconds, a few seconds crwdcntrl.net _cc_cc, _cc_dc, _cc_id, _cc_aud Third Party Session, a few seconds, a few seconds, a few seconds agkn.com ab, u Third Party a few seconds, 365 days yahoo.com B, A3, A1S, A1, APID, APIDTS Third Party a few seconds, a few seconds, Session, a few seconds, a few seconds, a few seconds adscale.de cct, uu Third Party 362 days, a few seconds demdex.net demdex Third Party a few seconds bluekai.com bkdc, bku, bkpa Third Party a few seconds, a few seconds, a few seconds dpm.demdex.net , dpm Third Party Session, a few seconds fwmrm.net _uid Third Party a few seconds sxp.smartclip.net dspuuid, uuid, psyn Third Party 30 days, 30 days, 30 days mathtag.com mt_mop, uuidc, mt_misc, uuid Third Party a few seconds, a few seconds, a few seconds, a few seconds semasio.net SEUNCY Third Party a few seconds krxd.net _kuid_ Third Party a few seconds casalemedia.com CMST, CMPRO, CMID, CMPS, CMRUM3 Third Party a few seconds, a few seconds, a few seconds, a few seconds, a few seconds creative-serving.com tuuid, c, tuuid_lu Third Party 390 days, 390 days, 390 days bing.com MUID Third Party a few seconds More information about the types of cookies we use In addition to the information provided in the Cookie List above, please also note: Performance Cookies Aggregated data from these Tracking Tools may be also shared with our business partners. The type of information we collect includes how many visitors visit our Sites and Products, how many customers log in, when they visited, for how long and which areas of our Sites, our Products and services but is generally not used to identify you individually. We also include a tracking pixel on most Yext-powered properties, which if activated by a customer and granted the appropriate consents, allows us to record that the profile was viewed and, to provide an accurate picture to our customer of real consumer engagement. We do not match IP addresses to any other personal data about consumers. We may also capture information about devices and visits to the publisher sites within the Listing or Events content and on the customers’ websites for Pages, Knowledge Tags or Answers. Functional Cookies We use these types of Tracking Tools to remember choices you make on our Sites or our Products (such as your preferred language or the region you are in) and provide enhanced, more personalized features on our Sites, our Products and in our communications. These technologies are also used to provide content that aligns to your past behaviour or interests (for example, we use pixel tags in our electronic newsletters to measure open, click through and read rates and to tailor future content you receive). Targeting and Social Media Cookies We also use these types of Tracking Tools to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. They allow us to understand and evaluate clicks on our adverts and how you interact with our Sites, Products, communications and Yext powered properties so that we can improve the services you receive. How can you manage these Tracking Tools? The length of time a cookie will stay on your browsing device depends on whether it is a “persistent” or “session” cookie. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your browsing device after you have finished browsing until they expire or are deleted. Tracking Tools that are Strictly Necessary, and third-party Tools used for Performance & Analytics or Personalization are set to expire after 12 months. The duration of targeting and social media Tracking Tools varies, with most expiring within 2-3 years. As mentioned above, if you wish to adjust or withdraw your consent to the Tracking Tools placed on your browser, you can do so at any time by clicking here: link. Alternatively, you may also set your browser to block all cookies or to indicate when a cookie is being set. For more information, please refer to your browser settings. Note that by disabling certain categories of cookies, you may be prevented from accessing some features of our sites or certain content or functionality may not be available. Certain browsers allow you to navigate websites in an incognito or private mode. Once the browser session is closed, typically all cookies collected during the session are automatically destroyed. Web beacons can be rendered ineffective in some circumstances by opting out of cookies or amending your cookie settings in your browser. If you have further questions regarding how to stop the use of web beacons, please contact us at privacy@yext.com. In the US, we comply with the Digital Advertising Alliance industry standards with respect to interest-based advertising. To learn more about your advertising choices if you are in the US, please click here. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns. Some web browsers incorporate “Do Not Track” features. Currently, no industry standard exists for handling “Do Not Track” requests, therefore at this time, our websites may not respond to “Do Not Track” requests or headers from these browsers. Sharing with Partners Based on your consent through our cookie settings, Yext may share analytics and targeting cookie data with select partners for the purposes of performance metrics, audience selection and advertisement. You can change your cookie settings at any time by clicking here: link. 3. USES MADE OF YOUR PERSONAL INFORMATION AND OUR LEGAL BASIS FOR PROCESSING Providing personal information is optional; however, in order to provide you with access to our Products, services and other resources such as whitepapers and demos, providing certain personal information (e.g., contact information and name, log-in details) may be necessary in order to receive these services and resources. You may choose whether or not to receive electronic marketing communications from us and we will only send you such communications where we have the appropriate consents to do so (to the extent required by applicable law). For more information on your choices, please see Section 5 below. We process personal information through electronic and manual means for the following purposes: Customers and Website Users To fulfil a contract or to take steps linked to a contract. This includes: to administer access to your accounts; to process orders, provide our Products and services, and send you service-related communications; for customer support purposes including responding to your queries and investigating any complaints about the Sites; As required to conduct our business and pursue our legitimate interests, in particular: to improve and personalize your experience with us and our Sites and to tailor content, communications, advertisements and offers to you; to administer our Sites, conduct identity verification and other fraud detection activities; to send you information you have requested; to monitor, maintain and improve the performance of our Sites, communications, services and Products, analyze trends, usage and activities in connection with our communications, services and Products, validate users and ensure their technological compatibility with users, and optimize our marketing efforts and measure the effectiveness of our advertising campaigns; for our own internal functions such as keeping our Sites secure, management and corporate reporting, internal research and analytics and to improve business efficacies; to enforce compliance with our terms of use and other policies or otherwise in connection with legal claims, compliance, regulatory and investigatory purposes as necessary (including disclosure of such information in connection with legal process or litigation); to create aggregate and statistical data (which cannot be used to identify you). For example, aggregate data may include data that describes the general demographics, usage or other characteristics of a Site’s users. We reserve the right to transfer and/or sell aggregate or group data about a Site’s users for lawful purposes. Where you give us consent: Where you ask us to send marketing information via a medium where we need your consent under applicable law (for example email marketing in some countries). For more information about how to modify your preferences about marketing communications, please see Section 5; Where you give us consent to place cookies or similar technologies; On other occasions where we ask for your consent, for the purpose we explain at the time. As required by law: In response to requests by government or law enforcement authorities conducting an investigation. Partners, Publishers and other Service Providers We use contact information about individuals within other organizations that we work with in order to fulfill our contractual obligations or as required to conduct our business and pursue our legitimate interests including for our own internal functions such management, corporate reporting, and record keeping. 4. DISCLOSURES OF YOUR PERSONAL INFORMATION We will share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with your consent. Service Providers & Partners. We engage service providers or partners to manage or support certain aspects of our business operations on our behalf. These service providers or partners may be located in the US or in other global locations and may provide services such as product delivery, advertising and marketing activities (including digital and personalized advertising), IT services, email service providers, data hosting, and management or support of our Sites. Our service providers and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by Yext. Advertisers. We may also transfer information about you to advertising partners (including the ad networks, ad-serving companies, and other service providers they may use) so that they may recognize your devices and deliver interest-based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form. The providers may process the information in hashed or de-identified form. These providers may collect additional information from you, such as your IP address and information about your browser or operating system and may combine information about you with information from other companies in data sharing cooperatives in which we participate. For more information, read Use of Cookies and other Tracking Technologies. Affiliates. Yext is a global business, headquartered in the United States. Your personal information collected by us in accordance with this Privacy Policy is used and shared amongst Yext, Inc. and the Yext affiliates for the purposes of delivering our Products and services, managing your accounts, hosting, IT, security, support, billing, marketing, and communications. The list in Section 8 describes the management responsibility for respective data processing activities by the listed Yext affiliates. If your personal information is transferred from Japan (and subject to Japanese privacy laws), it will be considered to be jointly used between Yext, Inc. and the listed Yext affiliates in accordance with the joint use cases set forth in Section 8. Legal Requirements. We disclose personal information to government authorities or other third-parties if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a subpoena, court order or similar legal obligation, (b) protect and defend our rights or property, (c) act in urgent circumstances to protect the personal safety of users of any Site or the public, (d) protect against legal liability, (e) to investigate fraud or other unlawful activity, or (f) or as otherwise required or permitted by law. Business Transfers. As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, including in bankruptcy, your personal information may be part of the transferred assets. You will be notified via email and/or a prominent notice on our Sites of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. Publishers. If you have requested us to do so, we provide personal information to third-party publishers (e.g. Google) that we work with. For example, if you have provided your name, job title and/or a biography to be published on a third-party publisher’s website. Third-Party Resellers. We share personal information from US based visitors with selected third-party resellers for their direct marketing purposes. We will obtain your prior consent for such a transfer where required by applicable law. International Transfers of Personal Information. Your personal information is stored on servers in the US and is supported from the EEA and the US. We also transfer your personal information to our affiliates and other service providers who perform functions on our behalf which are based around the world, including in countries outside of the EEA, UK, and Switzerland which may have different data protection standards to those which apply to your country of residence. You can click here to see a list of countries where we may access or transfer your personal information. Where your personal information is transferred from Japan (and subject to Japanese privacy laws), you hereby agree to the transfer of your personal information to Yext, Inc., Yext affiliates and service providers located in the countries listed in Section 8. Where your personal information is transferred outside of the EEA, UK, and Switzerland, and where this is to an affiliate or service provider in a country which is not subject to an adequacy decision by the EU Commission or considered adequate as determined by applicable data protection laws, we will take steps to ensure your personal information is adequately protected by safeguards such as the Standard Contractual Clauses (“SCCs”) approved by the EU Commission. A copy of the relevant mechanism can be obtained for your review on request by using the contact details in Section 8. In addition, although Yext, Inc. relies on safeguards such as the SCCs to receive personal information from the EEA, UK, and Switzerland and despite recent developments from the Court of Justice of the European Union, Yext, Inc. continues to participate in and has certified its compliance with the EU-US Privacy Shield and the Swiss-US Privacy Shield Frameworks. To learn more about the Privacy Shield Framework, visit the US Department of Commerce’s website (www.privacyshield.gov). To learn more about Yext, Inc.’s participation in the Privacy Shield Framework, please see our Privacy Shield Notice here for further information. 5. WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO YEXT’S DIRECT MARKETING Where we rely on consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above in Section 3. You have the absolute right to opt out of our direct marketing at any time, and EEA, UK, and Swiss individuals can also opt out of profiling we carry out for direct marketing at any time. To stop receiving newsletters or marketing communications from us, you can use the unsubscribe mechanism in the relevant communication or you can send an email to email-unsubscribe@yext.com with information necessary to process your request. Please note that this will not stop you from receiving service related messages (i.e., non-marketing communications) such as email messages to let you know our service has been suspended for maintenance. 6. EUROPEAN DATA PROTECTION RIGHTS Where our entities within the EEA, Switzerland, or the UK process your personal data or where we process personal data of individuals located in the EEA, Switzerland, or the UK, you may have the right to ask us for a copy of your personal data, to correct, delete or restrict processing of your personal data, to obtain the personal data you provide to us in a structured, machine readable format, and to ask us to share (port) this data to another controller. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we are not required to process such data in order to meet a contractual or other legal requirement). We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests which we have described above. You can obtain information on any of our balancing tests by contacting us using the details below. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are set out in applicable data protection laws. We will inform you of the relevant exemptions we rely upon when responding to any request you make. To exercise any of these rights, please email privacy@yext.com with the information necessary for us to process your request. If you have unresolved concerns, you may have the right to complain to an EU, UK or Swiss data protection authority where you live, work or where you believe a breach may have occurred. If you deactivate your account, we will delete, block or anonymize your personal information so that it is no longer possible to identify you, subject to our retention policy below. If you have provided a location review to one of our customers, please contact that customer directly if you have any questions about their privacy practices or wish to stop receiving communications from or exercise your rights in respect of personal data processed by that customer. 7. CALIFORNIA PRIVACY NOTICE If you are a California resident, this section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to “personal information” that is subject to the CCPA. This section does not cover personal information about End Users of our customers, which we process solely on behalf of customers. Currently, personal information about our current and former business customers is exempt from most CCPA obligations. We do not and will not sell personal information about our business customers, former customers, or business (marketing) prospects. We provide our business prospects with additional disclosures and rights under the CCPA. The remainder of this section provides additional information for our business prospects. Accessibility. Consumers with disabilities may access this notice by using a standard screen reader. California Personal Information We Collect and Disclose. We collect the categories of personal information listed in the below chart about California residents who are our business prospects. As further set forth in the chart below, in the past 12 months, we have disclosed such California residents’ personal information to third parties for the listed business or commercial purposes. We do not and will not sell such personal information. Categories of Personal Information Collected in the last 12 months: Categories of sources from which information is collected: Business or commercial purposes for collection, use, and sharing: Disclosed for business purposes to the following categories of third parties: Personal and online identifiers (such as first and last name, email address, or unique online identifiers) Yes All categories listed below. All purposes listed below. All categories listed below. Internet or other electronic network activity information (such as interactions with our Sites, emails, applications, and/or advertisements) Yes Individuals, when you provide it to us directly or by using our Sites. All purposes listed below. Service providers. Biometric information (specifically call recordings) Yes Service providers. All purposes listed below. Service providers. Professional or employment-related information Yes All categories listed below. All purposes listed below. All categories listed below. Inferences drawn from the above information about your predicted characteristics and preferences Yes Generated by Yext. All purposes listed below. All categories listed below. Other information about you that is linked to the personal information above Yes Individuals, when you provide it to us directly or by using our Sites. Our business purposes as identified in the CCPA. All categories listed below. Categories of Sources. We collect this personal information from the following categories of sources: Individuals, when you provide it to us directly or by using our Sites; Service providers; Partners that are authorized to resell Yext services; Event organizers of events you register to attend; and Commercial data resellers. Why We Collect, Use, and Share California Information. We use and disclose this personal information for our commercial and business purposes, as further described in this Privacy Policy. These commercial and business purposes include, without limitation: Our commercial purposes, including advertising and marketing to you, and enabling commercial transactions with you. Our business purposes as identified in the CCPA, which include: Auditing related to our interactions with you; Legal compliance; Detecting and protecting against security incidents, fraud, and illegal activity; Debugging; Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services; and Other one-time uses. Recipients of California Personal Information. We disclose the categories of personal information designated above to the categories of third parties listed below for business purposes: Service providers, including internet service providers, data analytics providers, and operating systems and platform providers; and Partners that are authorized to resell Yext services; Your Rights Regarding Personal Information. California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations: The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information; The right to request that we delete the personal information we have collected from you or maintain about you. The right to opt out of our sale(s) of your personal information. We do not and will not sell your personal information in any manner that requires an opt-out opportunity under the CCPA. The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA. To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below: Online at this link By phone at: 1-888-444-2988 Verification Process and Required Information. Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your name, business email address, and business phone number. Please see the online form for details. Authorized Agent. You may designate an authorized agent to make a CCPA request on your behalf by submitting a written, signed permission to privacy@yext.com. Please see the online form for details. Minors. We do not sell the personal information of minors under 16 years of age. 8. MISCELLANEOUS Third-Party Websites and Services. The Sites may contain links to third-party owned and/or operated websites or utilize third-party services. We are not responsible for the privacy practices or the content of such websites or services. Please contact these third-parties directly for information regarding their privacy practices prior to providing them with any information. Parts of the Sites utilize YouTube API Services. These YouTube API Services are subject to the privacy practices currently found at https://www.youtube.com/t/terms. Some of our solutions are integrated into our customers’ own websites, applications and communications (“Customer Solutions“). Where this is the case, we do not interact directly with the ultimate end user of these Customer Solutions and the customer will be responsible for the operation of these Customer Solutions and any personal information collected in connection therewith. We are not responsible for the processing of personal information by these Customer Solutions save to the extent that we receive any personal information via these Customer Solutions on behalf of the customer or the reseller in order to fulfil the Product and service requests. In these cases, we will act as a data processor and this Privacy Policy will not apply to such personal information. Please contact the relevant customer or reseller directly if you have questions regarding their data collection practices or any communications you may receive from them. Blogs and Public Features of the Sites. Some of our Sites offer publicly accessible blogs or community forums. You should be aware that any personal information you submit there can be read and collected by other users of these forums and could be used to send you unsolicited messages and for other purposes. Our blog is managed by a third-party application that may require you to register to post a comment. We do not have access to or control of the information posted to the blog. None of the information that you provide using these features is protected by this Privacy Policy. We are not responsible for the personal information you choose to submit in these forums or the use thereof by any third-party. You will need to contact or log into the third-party application if you want the personal information that was posted to the comments section removed. To learn how the third-party application uses your information, please review their privacy policy. Security. We take commercially reasonable steps to protect personal information from loss, misuse, unauthorized access, disclosure, alteration and destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from a Site may not be secure, and you should therefore take special care in deciding what information you send to us via e-mail. Please keep this in mind when disclosing any personal information to us or to any other party via the Internet. When you enter sensitive information (such as a credit card number) on our order forms or login credentials (such as username and password) on our platform login, we encrypt the transmission of that information using secure socket layer technology (SSL). Retention. We will retain your information for as long as your account is active or longer if needed to provide you services, comply with our legal obligations, resolve disputes or enforce our agreements. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable opportunity. For instance, in respect of data held for the management of customers and prospects, we consider the lead time necessary to develop and maintain our commercial relationships and how recent our interactions are with you. We may rectify, update or remove incomplete or inaccurate information, at any time and at our own discretion. For more information on our retention periods you can contact privacy@yext.com. Minors. Visitors under 16 years of age are not permitted to use and/or submit their personal information on any Site. We do not knowingly solicit or collect information from visitors under 16 years of age. We encourage parents and guardians to spend time online with their children and to participate and monitor the interactive activities of their children. Data Controllers and Contacting Us. The relevant controller for your information is set out below. Our “contact us” page contains e-mail links that allow you to contact us directly with any questions or comments that you may have. If you have any questions about this Privacy Policy or our privacy practices or to make a complaint about our compliance with applicable privacy laws, please feel free to contact us at privacy@yext.com or at the relevant affiliates below. Where more than one entity is listed, please send your query to privacy@yext.com. Data Controller: Responsible for: Yext, Inc. 61 Ninth Avenue New York, NY 10011 United States of America Yext, Inc.’s European representative: Yext SAS (see address below) Yext.com All other activities (both online and offline) Yext (Canada) Corp. 160 Elgin Street Suite 2600 Ottawa, ON K1P 1C3 Canada Yext.ca Yext B.V. Weesperstraat 61 1018 VN Amsterdam Netherlands Marketing activities supporting Yext Limited. Yext GmbH Kantstraße 164, 30. Stock 10623 Berlin Germany cc: Yext GmbH External Data Protection Officer Attorney at Law Dr. Karsten Kinast, LL.M KINAST Rechtsanwaltsgesellschaft mbH Hohenzollernring 54 50672 Cologne Germany Yext.de Marketing activities supporting Yext Limited. Yext Limited 7th Floor UK House 2 Great Titchfield Street London W1D 1NN United Kingdom Yext Limited’s European representative: Yext SAS (see address below) Yext.co.uk Responsible for processing orders and invoicing and (with your consent, where required) providing information about other Yext Products and services that may be of interest. Yext Sàrl c/o Genint SA rue Jean-Calvin 12 1204 Geneva Switzerland Yext SARL’s European representative: Yext SAS (see address below) Marketing activities supporting Yext Limited. Yext SAS 83 Avenue de La Grande Armee, 6th Fl 75016 Paris France Yext.fr Marketing activities supporting Yext Limited. Yext SAS (Italian Branch) Largo Richini 6 20122 Milan Italy Marketing activities supporting Yext Limited. Yext Technologies S.L.U. Paseo de la Castellana, 200 28046 Madrid Spain Marketing activities supporting Yext Limited. Yext KK Toranomon Hills Mori Tower 8F 1-23-1 Toranomon, Minato-ku, Tokyo 105-6308 Japan Yext.co.jp Under the Act on the Protection of Personal Information in Japan, Yext KK is a business operator handling personal information obtained through Yext.co.jp or all other activities (both online and offline) in Japan and is primarily responsible for management of such personal information. 61 Ninth Avenue, New York, NY 10011 | 1-888-444-2988 Privacy and Cookies Policy Terms AdChoices Settings By clicking Accept, you agree to the storage of cookies on your device to enhance site navigation, analyze site usage, personalize content, provide social media features and assist in our marketing efforts and the sharing of information about your use of our Sites with our affiliates/partners. You can see details of these partners, manage your cookie preferences, withdraw your consent at any time or find out more by clicking the Settings link SETTINGS REJECT ACCEPT