PRIVACY POLICY

Yunite Privacy Policy

Last updated: 20 November 2025

Yunite.io is a consumer insights and survey participation platform operated by Potloc Inc.
(“Potloc”, “we”, “us”, or “our”). We are committed to protecting your privacy and processing your
personal data in accordance with applicable privacy laws, including GDPR, UK GDPR, PIPEDA,
Québec’s Law 25, CCPA/CPRA, LGPD, and other relevant regulations.

This Yunite Privacy Policy (“Policy”) supplements and incorporates the

Potloc Corporate Privacy Policy
.
Yunite is a Potloc sub-brand and adheres to Potloc’s data protection framework, while adding
specific conditions that apply to Yunite community members (“Members”).

1. Scope and When This Policy Applies

This Policy applies when you:

• Use the Yunite website, mobile experiences, or any Yunite subdomains;
• Register as a Member to participate in surveys and earn rewards;
• Receive survey invitations, communications, or rewards from Yunite;
• Engage with surveys, profiling questions, or other platform activities;
• Communicate with us (e.g., support, feedback, or email interactions).

Yunite processes personal data in the context of respondent participation only.
Yunite does not onboard or manage commercial “clients” on this platform; all processing is tied
to Members and survey research activities.

For Potloc-wide data practices, please also review the

Potloc Corporate Privacy Policy
.

2. Categories of Personal Data We Collect

For more detail on Potloc’s categories of data and purposes, see the relevant sections of the

Potloc Corporate Privacy Policy
.

3. Data Enrichment & Identity Verification

Data Enrichment Clause:

To protect the integrity of the Yunite community and improve survey relevance, we may enrich or verify
your information using:

• Publicly available sources (e.g., general registries, open data);
• Commercial data validation and anti-fraud services;
• Location, device, and IP-related checks.

We use data enrichment to:

• Confirm that basic demographic or residency information is accurate;
• Detect obviously fake or malicious registrations;
• Prevent multiple accounts for the same person;
• Improve survey targeting and data quality.

These activities are based on Legitimate Interest (fraud prevention and platform integrity)
and, where required, Consent under applicable law.

4. Device Verification & Fraud Prevention

Fraud-Prevention Provider Clause:

Yunite uses a third-party fraud-prevention and device-verification provider to help:

• Detect suspicious or abnormal device behavior;
• Identify use of VPNs, proxies, emulators, or automated tools;
• Block duplicate or illegitimate registrations;
• Protect rewards from being claimed through fraudulent means.

This provider analyzes device-level and behavioral signals. It does not rely on biometric data
or direct copies of government-issued IDs. Processing is carried out under our
Legitimate Interest in securing the platform and ensuring genuine participation.

These fraud-prevention and security measures are consistent with the principles described in the

Security & Fraud Prevention

section of the Potloc Corporate Privacy Policy.

5. Data Sharing & Third-Party Providers

We do not sell your personal information. We may share your personal data with:

• Research Clients (Potloc level): Only aggregated and anonymised survey results are
  shared; individual-level identities are not disclosed unless you provide explicit consent.
• Third-party provider responsible for processing and fulfilling your incentive payouts:
  To deliver your chosen reward method securely.
• Third-party fraud-prevention and device-verification provider:
  To protect the platform from abuse and maintain data quality.
• Technology and infrastructure providers:
  For hosting, analytics, communication, and support services.
• Public authorities or regulators:
  Where disclosure is required by applicable law or legal process.

When data is transferred internationally (for example, to servers located outside your country), we implement
appropriate safeguards such as Standard Contractual Clauses, in line with the

International Transfers

section of the Potloc Corporate Privacy Policy.

6. Your Rights Under GDPR and Other Laws

Depending on your place of residence, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal data (“right to be forgotten”);
• Withdraw consent where processing is based on consent;
• Object to certain processing, including profiling or enrichment;
• Request restriction of processing in specific circumstances;
• Receive a portable copy of your data (data portability);
• File a complaint with your local Data Protection Authority.

These rights are consistent with those described in the

Your Rights

section of the Potloc Corporate Privacy Policy.

To exercise your rights for Yunite, you can contact us at:
[email protected].

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain secure sessions and login state;
• Measure traffic, performance, and survey completion flows;
• Detect and prevent fraudulent or abusive activity;
• Improve user experience and platform features;
• Attribute marketing or referral traffic where applicable.

Our use of cookies follows the principles described in the

Cookies & Tracking

section of the Potloc Corporate Privacy Policy.

8. Data Retention

• Survey & profile data: Retained up to 3 years after your last meaningful activity on Yunite;
• Reward & payment-related data: Retained for as long as required by accounting, tax, or legal obligations;
• Verification & anti-fraud logs: Retained for the period necessary to investigate, prevent, or respond to fraudulent activity.

These retention periods follow the principles outlined in the

Data Retention

section of the Potloc Corporate Privacy Policy.

9. Data Security

We implement technical and organizational measures to protect your data, including:

• Encrypted transmission and storage where appropriate;
• Two-factor authentication for reward redemptions;
• Use of a third-party fraud-prevention and device-verification provider;
• Role-based access control and internal security policies;
• Regular monitoring and logging of security-relevant events.

These measures align with those described in the

Security & Safeguards

section of the Potloc Corporate Privacy Policy.

10. Contact Information

Privacy Officer

? [email protected]
? 5420 Saint-Laurent Street, Suite 300, Montreal, Quebec, H2T 1S1, Canada

EU Representative

Potloc France
? 32 Boulevard Haussmann, 75009, Paris, France

UK Representative (Art. 27 – GDPR)

Rickert Services Ltd UK
? PO Box 1487, Peterborough PE1 9XX, United Kingdom
? [email protected]

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes.
When we make material changes, we will update the “Last updated” date at the top of this page and,
where required by law, notify you directly. Your continued use of Yunite after such updates constitutes
your acceptance of the revised Policy.