Last updated: 22 March 2026
Privacy policy
This Privacy Policy explains how A.M.K. Ecoleaf Ltd, a company incorporated in the Republic of Cyprus with registration number HE272640G (“Yemzio”, “we”, “us”, or “our”), collects, uses, and protects personal data in connection with the Yemzio platform (the “Platform”).
Yemzio is a dealflow management platform designed for venture capital firms and investment teams. The Platform connects to user email systems and transforms startup communications into structured investment pipelines, allowing investment teams to capture, organize, and manage dealflow in a centralized system.
By using the Platform or interacting with Yemzio, you acknowledge and accept the practices described in this Privacy Policy.
1. Scope of this Policy
This Privacy Policy applies to individuals who use the Platform, visit our website, or whose personal data is processed through Yemzio.
Because Yemzio operates as a business-to-business SaaS platform, we process data in two distinct ways. First, we collect and use personal data directly in connection with account creation, billing, and platform usage. Second, we process data on behalf of our customers when they use the Platform to manage dealflow, including data relating to founders, startups, and investment communications.
This distinction is important and reflected throughout this Policy.
Roles and Responsibilities
Under applicable data protection laws, including the General Data Protection Regulation (GDPR), Yemzio may act either as a data controller or a data processor depending on the context.
When we collect data directly from you, such as when you create an account or contact us, Yemzio acts as a data controller and determines how that data is used.
When you upload or process data through the Platform, including startup information, emails, and internal notes, you act as the data controller and Yemzio acts as a data processor. In these cases, we process data only on your behalf and in accordance with your instructions.
Personal Data We Collect
We collect personal data in a limited and structured way, depending on how you interact with Yemzio.
When you create an account or use the Platform, we collect basic account information such as your name, email address, company or fund name, and billing details where applicable. We also collect information relating to your use of the Platform, including login activity, usage patterns, and interactions with system features.
A core part of Yemzio’s functionality involves processing data that you choose to upload or connect to the Platform. This may include information contained in emails, startup pitch materials, founder profiles, internal notes, and communication histories. This type of data is referred to as Customer Data and remains under your control.
If you enable email integration, Yemzio may access relevant email communications for the purpose of identifying and structuring startup introductions. This may include email content, metadata such as sender and timestamps, and attachments such as pitch decks. Access is limited to what is necessary for the Platform to function and is not used for unrelated purposes.
In addition, we automatically collect certain technical information when you use the Platform. This may include your IP address, device type, browser information, and system logs. This data helps us maintain performance, ensure security, and improve the Platform over time.
How We Use Personal Data
We use personal data primarily to provide and operate the Platform. This includes enabling user authentication, structuring dealflow data, supporting collaboration between users, and maintaining system performance.
Where we act as a data processor, we use Customer Data strictly to deliver the functionality of the Platform. This includes converting email communications into structured startup profiles, maintaining dealflow pipelines, and enabling internal collaboration within investment teams.
Where we act as a data controller, we use personal data to manage user accounts, process payments, provide customer support, and communicate with users. We may also use limited technical and usage data to improve the Platform, provided that such use does not involve the exploitation of Customer Data.
We do not sell personal data and do not use Customer Data for advertising or profiling purposes.
Legal Basis for Processing
When Yemzio acts as a data controller, we rely on established legal bases under GDPR. The primary basis is the necessity to perform a contract, meaning that processing is required to provide access to and operate the Platform.
We may also rely on legitimate interests, such as maintaining system security, improving performance, and preventing misuse, provided that these interests do not override your rights.
Where required, we process data to comply with legal obligations, including financial and regulatory requirements.
When Yemzio acts as a data processor, we process personal data solely on behalf of the data controller and based on their instructions.
Data Sharing and Subprocessors
Yemzio does not sell or rent personal data to third parties. However, we may share data with carefully selected service providers who support the operation of the Platform.
These providers may include cloud hosting services, payment processors, email infrastructure providers, and analytics tools. In all cases, such providers are engaged under contractual obligations that require them to protect data and use it only for specified purposes.
Where Yemzio processes Customer Data, any sharing with subprocessors is limited to what is necessary to deliver the service and is subject to appropriate data protection safeguards.
International Data Transfers
Yemzio may process data in jurisdictions outside the European Economic Area. Where this occurs, we implement appropriate safeguards to ensure that personal data remains protected.
These safeguards may include the use of Standard Contractual Clauses approved by the European Commission or equivalent legal mechanisms designed to ensure an adequate level of data protection.
8. Data Security
We take data security seriously and implement a range of technical and organizational measures designed to protect personal data.
These measures include encryption of data in transit and at rest, access controls that restrict who can access sensitive data, and monitoring systems designed to detect unauthorized activity. We also apply internal policies that limit access to data on a need-to-know basis.
However, no system can be guaranteed to be completely secure. Users are responsible for maintaining the security of their own accounts and ensuring that access within their organization is appropriately controlled.
9. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Policy.
Account-related data is retained for the duration of the user relationship and for a reasonable period thereafter. Customer Data is retained in accordance with the instructions of the customer and the operational requirements of the Platform.
Where required, we may retain certain data for longer periods to comply with legal or regulatory obligations.
10. Your Rights
Where Yemzio acts as a data controller, you have certain rights under GDPR. These include the right to access your personal data, request correction of inaccurate data, request deletion, restrict or object to processing, and request data portability.
If your data is processed by Yemzio on behalf of a customer, you should direct your request to the relevant data controller, as we process such data only on their instructions.
11. Cookies and Tracking Technologies
Yemzio may use cookies and similar technologies to ensure the proper functioning of the Platform, maintain user sessions, and understand how the Platform is used.
Where required, additional information about the use of cookies will be provided in a separate Cookie Policy.
12. Third-Party Integrations
The Platform may integrate with third-party services, such as email providers. These services operate under their own terms and privacy policies, and Yemzio is not responsible for their practices.
Users are encouraged to review the privacy policies of any third-party services they connect to the Platform.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the Platform or legal requirements.
Where changes are material, we will provide appropriate notice. Continued use of the Platform after such changes constitutes acceptance of the updated Policy.
14. Contact Information
If you have any questions regarding this Privacy Policy or wish to exercise your rights, you may contact us at:
Email: info@Yemzio.com
Address: www.Yemzio.com
