Yolk Privacy Policy

Last Updated: November 25th, 2025

This Privacy Policy describes how Goodsize Inc. ("Yolk," "we," "us," or "our") collects, uses, and protects information in connection with our AI-powered sales coaching platform (the "Service").

We are committed to processing your information responsibly and transparently. This policy explains what information we collect, how we use it to provide and improve the Service, and how we keep it secure.

1. Key Definitions

• Yolk / We / Us: Goodsize Inc., the company providing the Service.
• Customer: The company (e.g., your employer) that has a business agreement with us to use the Service.
• User / You: The individual sales representative who uses the Service.
• Personal Data: Any information that can identify you as a specific person, such as your name, email address, or a recording of your voice.
• Customer Data: All data and content our Customer (your company) connects to or uploads to the Service, including sales call recordings, transcripts, and related information.
• Prospect Data: Personal Data about your potential customers (like their name or job title) that may be included in Customer Data.
• Account Information: Personal Data required to create and manage your account (e.g., name, email, password).
• Aggregated/De-identified Data: Information processed so that it can no longer be linked to any specific person or Customer.

2. Information We Collect and How We Use It

We collect several types of information to provide and improve the Service.

• Account Information

• What we collect: Your name, email address, password, and other details your company provides (like your team or job title).
• How we use it: To create your account, enable login, communicate with you, and provide customer support.

• Call & Content Data

• What we collect: Customer Data, which includes the text, audio, and video recordings of your sales calls from platforms your company connects (like Gong or Fireflies).
• How we use it: This is the core of the Service. We analyze this content to generate personalized role-plays and feedback.

• Role-Play & Performance Data

• What we collect: Your interactions with the Service, such as your text, audio, and video from role-play exercises, the feedback you receive, and your performance scores.
• How we use it: To provide a private space to practice, track your progress, and tailor future coaching sessions.

• Usage Data

• What we collect: Information about how you navigate and use the Service (e.g., features used, clicks, time on platform).
• How we use it: To understand platform usage, fix bugs, and identify areas for improvement.

• Communications

• What we collect: Records of conversations if you contact our support team.
• How we use it: To resolve your issues and maintain a record of support requests.

3. Legal Bases for Processing Personal Data

We only process your Personal Data when we have a valid legal basis, including:

• Contract Performance: To fulfill our contractual obligations to our Customer (your company) and provide the Service to you.
• Legitimate Interests: We process certain data to gain a better understanding of how users interact with Yolk, and to develop and improve our services and offerings, including through AI and machine learning capabilities, based on our legitimate interests, balanced against your rights.
• Your Consent: For specific actions, such as sending you marketing communications or placing non-essential cookies.
• Legal Obligations: To comply with a legal order or other binding legal requirement.

4. Data Sharing and Disclosure

We do not rent or sell your Personal Data. We share information only in the following limited circumstances:

• Within Your Company: Your employer (our Customer) is the data controller and has access to your performance data on the Service, Yolk acts as data processor.
• Service Providers (Subprocessors): We rely on a small number of trusted third-party service providers (e.g., for cloud hosting, AI processing, and analytics). These providers only process data on our behalf. A list of our subprocessors is available to Customers upon request.
• Data Processing Agreement: Our processing of Customer Data on behalf of our Customers is governed by our Data Processing Agreement (DPA). The DPA forms part of each Customer’s agreement with Yolk and describes in detail how we handle Customer Data, including our security measures, subprocessors, and international data-transfer mechanisms (such as Standard Contractual Clauses).
• Business Transfers: If Yolk is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that deal. We will notify our Customers of any such change.
• Legal Requirements: We may disclose your data if we believe in good faith that it's necessary to comply with a law, protect our rights, or ensure the safety of our users.
• Aggregated Data: We may share Aggregated/De-identified Data with partners or service providers for research, analytics, or service improvement.

5. Our Approach to AI & Model Training

• For Your Personal Coaching: We use your Customer Data (your calls and role-plays) to create your personalized coaching experience.
• For General Service & Model Improvement: As described in Section 3, we process Customer Data based on our legitimate interests to gain a better understanding on how individuals use and interact with our Services to continue improving our products, offerings and the overall performance of our Services, including through the utilization and optimization of Artificial Intelligence and Machine Learning capabilities You may exercise your right to object to this processing as described in Section 10.
• Use of Anonymized Data: Aggregated/De-identified Data is no longer considered Personal Data under laws like GDPR and CCPA. We will continue to use this anonymized data to improve our services, analyze trends, and for research.

6. Customer's Responsibility: Call Consent

Yolk analyzes call recordings provided by our Customers. Our Customer (your company) is solely responsible for complying with all applicable laws related to call recording. This includes providing all necessary notices and obtaining proper consent from all call participants (including employees and prospects) before a call is recorded and shared with the Service.

If you do not have the necessary consent from all participants, you should not upload or sync that call to Yolk. If we become aware that data has been uploaded without the required consent, we may remove it.

7. Data Retention and Deletion

• Retention Period: We retain Personal Data only for as long as necessary to provide the Service to our Customer and to meet our legal or contractual obligations.
• Configurable Retention: Our Customer (your company) can request a specific retention period for their Customer Data (like call recordings and transcripts).
• Deletion: Personal Data is deleted or anonymized at the end of the agreed-upon retention period, or following the termination of the Customer's account, in accordance with our agreement with them and applicable law.
• Aggregated/De-identified Data: We may retain anonymized or aggregated data for as long as needed to fulfill the purposes described above (such as research, analytics and improving our AI models).

8. Data Security

We take the security of your data seriously. We implement and maintain appropriate technical and organizational measures to protect Personal Data from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit and at rest.
• Strict role-based access controls to limit access to Personal Data.
• Regular security assessments and vulnerability management.

Goodsize Inc. undergoes independent audits (such as but not limited to SOC 2) to evaluate the design of our controls.

9. International Data Transfers

Yolk is operated by Goodsize Inc., a U.S.-based company. All data is primarily processed and stored in the United States (for example, with AWS and Google Cloud).

We do not specifically market or offer our Service to individuals in the European Economic Area (EEA), United Kingdom, or Switzerland.

If a Customer located in one of these regions chooses to use Yolk and transfers personal data to us, Yolk will make the appropriate Standard Contractual Clauses (SCCs) or equivalent safeguards available upon written request and only to the extent required by applicable data-protection law.

10. Your Data Rights

Under laws like GDPR and CCPA, you have rights regarding your Personal Data.

• Access: You can ask for a copy of your Personal Data.
• Correction: You can ask to fix any inaccurate data.
• Deletion: You can ask for your data to be deleted.
• Restriction: You can ask us to limit how we use your data.
• Objection: You can object to us using your data for processing based on our legitimate interests (as described in Section 3).
• Portability: You can ask for your data in a portable, machine-readable format.
• Marketing Opt-Out: You can unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link.

How to exercise your rights: Because your employer (our Customer) is the "data controller," please contact your company's administrator first for any of these requests. We will work with them to fulfill your request.

11. Children's Privacy

The Service is a professional tool. It is not intended for or directed at anyone under the age of 16. We do not knowingly collect Personal Data from children.

Yolk is operated by Goodsize Inc., based in the U.S. Standard Contractual Clauses are available upon request for EU/UK customers.

12. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify our Customers and may also notify you by email or with an in-app notice.

13. Contact Us

If you have any questions or concerns about this policy or your privacy, please reach out to us:

Goodsize Inc. (d/b/a Yolk)

800 N King Street

Suite 304-2136

Wilmington, DE 19801

United States

Our DPO officer Kate@in3d.io