Last updated: October 2026 · Data controller: Yazzo.io Oy, Helsinki, Finland
Yazzo.io Oy ("Yazzo", "we", "us") is the data controller for personal data processed in connection with the Yazzo service.
Yazzo.io Oy · Business ID: 3561958-3 · Berliininkatu 9 B 26, 00560 Helsinki, Finland · info@yazzo.io
We collect personal data only to the extent necessary for providing the Yazzo Service.
We use your device location to display nearby venues and relevant offers on the map. Location access is requested only with your permission and can be disabled at any time in your device settings. Location data is used only while the app is active and is not stored permanently by Yazzo. You can still browse venues manually without granting location access. Businesses on Yazzo can pay to promote their venues and events on the map. Promoted placements are shown based on where the business is located and are not targeted by tracking you; we do not share your location with advertisers.
If you grant permission, we store your device's push notification token to send you reservation confirmations, reminders, and other service-related notifications. You can withdraw this permission at any time in your device settings.
When you browse offers in the Yazzo App, we may count how often each offer is shown, opened and reserved. These counts are not linked to your account and are shown to the Partner as totals only.
Where required, we ask for your explicit consent, for example for location access and push notifications. You can withdraw consent at any time via your device settings or by contacting us.
| Palvelu / Service | Tarjoaja / Provider | Käyttötarkoitus / Purpose | Tietosuoja / Privacy |
|---|---|---|---|
| Firebase Authentication | Google LLC | Käyttäjien tunnistautuminen / User authentication | policies.google.com/privacy |
| Cloud Firestore | Google LLC | Tietokanta / Database | policies.google.com/privacy |
| Firebase Cloud Messaging | Google LLC | Push-ilmoitukset / Push notifications | policies.google.com/privacy |
| Stripe | Stripe, Inc. | Maksujen käsittely / Payment processing | stripe.com/privacy |
| Mapbox | Mapbox, Inc. | Karttapalvelut / Map services | mapbox.com/legal/privacy |
| Sign in with Apple | Apple Inc. | Apple-kirjautuminen / Apple authentication | apple.com/legal/privacy |
| Google Sign-In | Google LLC | Google-kirjautuminen / Google authentication | policies.google.com/privacy |
| Resend | Resend Inc. | Sähköpostit / Email delivery | resend.com/legal/privacy-policy |
| Plausible Analytics | Plausible Insights OÜ (EU) | Verkkosivuston kävijätilastot ilman evästeitä / Website visitor statistics without cookies | plausible.io/data-policy |
We share with the Partner the personal data and reservation information necessary to fulfil your Reservation when you redeem it. Stripe processes payment card information, and Yazzo never stores your full payment card details.
The Yazzo Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services.
Some of our service providers are located outside the European Economic Area (EEA), including in the United States. When your personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses.
Firebase (Google) and Stripe maintain data processing agreements compliant with GDPR. Our primary Firebase region is europe-north1 (Finland), meaning your data is stored within the EU by default.
We retain your personal data for as long as necessary to provide the Yazzo Service and fulfil the purposes described in this Privacy Policy.
| Tietoryhmä / Data type | Säilytysaika / Retention |
|---|---|
| Account data | Until account deletion, plus up to 12 months for legal/accounting purposes |
| Reservation data | 7 years (Finnish accounting law requirement) |
| Location data | Not stored — used in-session only |
| Push notification tokens | Until permission is withdrawn or account is deleted |
| Usage/crash data | Up to 12 months |
After deletion of your account, your personal data will be permanently deleted, unless retention is required to comply with legal obligations.
As a data subject, you have the following rights:
To exercise your rights, contact us at info@yazzo.io. We will respond without undue delay and no later than within 30 days. Where permitted by applicable data protection law, this period may be extended if necessary. We may ask you to verify your identity before processing your request.
If you believe our processing of your personal data is inconsistent with applicable data protection law, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)
tietosuoja.fi
tietosuoja@om.fi
You may also lodge a complaint with the supervisory authority in your country of residence.
We implement appropriate technical and organisational measures to protect your personal data. Measures include:
The Yazzo App does not use cookies. The Yazzo website may use technically necessary cookies or similar local storage to enable basic functionality.
The Yazzo website uses Plausible Analytics, a privacy-friendly web analytics service, to understand how many people visit the website and where they come from. Plausible does not use cookies or local storage and does not read information stored on your device. It records the pages you view, the website or campaign link (for example a QR code) that brought you here, and your approximate country, browser, operating system and device type. It does not create a profile of you, does not track you across other websites, and does not store your IP address. To count visitors without cookies, a short-lived, irreversible identifier is calculated from your IP address and browser details; it changes daily and cannot be used to recognise you over time. We use this data only to improve the website and to measure how people find Yazzo (legitimate interest).
We do not use marketing cookies. If we introduce analytics or marketing cookies in the future, we will update this Privacy Policy and, where required by law, ask for your consent.
The Yazzo Service is available to users aged 18 and over. We collect your date of birth solely to verify this age requirement. Your date of birth is not shared with Partners and is not used for any other purpose.
We do not knowingly collect personal data from users under 18. If we become aware that an underage user has registered, we will delete the account and the associated personal data without undue delay.
Yazzo.io Oy
Business ID: 3561958-3
Berliininkatu 9 B 26, 00560 Helsinki, Finland
info@yazzo.io