Privacy policy

Last Updated: 1 October 2026

Introduction

Cassia Research Inc. dba Yoke (“Yoke”, “we” or “us”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy informs you about our privacy practices, including how we use and disclose your personal information collected to provide our services effectively.

Yoke was previously known as CoPilot AI. The company has not changed.

This Privacy Policy covers all activities related to our website located at yokegtm.com, our applications app.yokegtm.com and teams.yokegtm.com, and our sign-in service login.yokegtm.com (collectively, the “Website”), unless a separate privacy statement has been provided. By submitting your personal information, registering, using our services, accessing our Website, or interacting with us voluntarily, you consent to our practices as described here. If you live in the United States, Section 15 applies to you, and your rights under it do not depend on this consent.

1. Meaning of Personal Information

“Personal Information” refers to information about an identifiable individual, such as your name, mailing address, email address, and telephone number. It does not include anonymized or aggregated information.

2. Your Consent to Collection, Use, and Disclosure

We may request Personal Information when:

  • You visit or use our Website;
  • You communicate via email, social media, feedback, or contact forms on our Website.

We also automatically collect:

  • IP address;
  • Operating system;
  • Browser type;
  • Referring website;
  • User preferences;
  • Website activity.

This information is Personal Information when combined with identifying details. Consent can be express or implied, depending on circumstances and information sensitivity.

3. Personal Information We Collect

  • Use of Products or Services: Information collected directly or through your activities on our Website.
  • Information You Submit: Name, email, contact details, and password during account creation, demos, webinars, or job applications (e.g., CV, cover letter, career experiences, salary expectations).
  • Cookies: We use cookies; see our Cookies Policy at yokegtm.com/cookies-policy.
  • Payment Information: Collected directly by third-party payment processors.

Sensitive Personal Information. The only sensitive personal information we collect is your account login and password, which we use only to let you sign in and to keep your account secure. We do not use sensitive personal information to infer characteristics about you.

Job Applicants. If you apply for a job with us, we collect the information you submit, such as your name, contact details, CV, cover letter, career experience and salary expectations, and notes from our interviews with you. We use it only to assess your application, to communicate with you about it, and to meet our legal obligations. We share it only with service providers that help us run our hiring process. We do not sell or share applicant information. If you are not hired, we keep your application for as long as we may need it to respond to a legal claim about the hiring decision or to consider you for another role you have asked to be considered for, and then delete it. You can exercise the rights in Sections 9 and 15 over your applicant information.

4. How We Use Your Personal Information

We use Personal Information to:

  • Provide and support our services (GDPR Basis: performance of a contract);
  • Administer contests, promotions, or loyalty programs (Basis: consent);
  • Improve our Website, products, and services (Basis: legitimate interest);
  • Request feedback and contact you (Basis: consent);
  • Notify you of important changes (Basis: performance of a contract);
  • Conduct internal analytics, audits, and improvements (Basis: legitimate interest);
  • Protect the security of our services (Basis: legitimate interest);
  • Prevent and investigate fraud (Basis: legal obligation);
  • Administrative communications (Basis: performance of a contract);
  • Provide customer support (Basis: performance of a contract);
  • Emergency situations (Basis: legal obligation);
  • Marketing communications (with consent);
  • Other lawful purposes.

AI Processing of Inbox Communications: We automatically process inbox communications using AI to generate recommended responses. Users can accept, edit, regenerate, or decline these responses and optionally enable fully automated response sending. Automated sending is turned off by default, and only a user can turn it on.

Automated Decisions. We do not use your personal information to make decisions that produce legal or similarly significant effects about you, such as decisions about credit, employment, housing, insurance, education or access to essential services, solely by automated means.

Prospect Data We Process for Our Customers. Our customers use our services to manage their own outreach to business contacts. When we process personal information about those contacts, we do so as a service provider or processor for our customer, and only to provide our services to that customer. The customer decides what information to collect and how to use it, and the customer’s privacy policy applies. If you are one of those contacts and want to exercise your privacy rights, please contact the customer who reached out to you. If you contact us instead, we will pass your request to that customer.

5. How We Share Your Personal Information

We share Personal Information with service providers who perform functions on our behalf. These fall into the following categories:

  • Hosting and infrastructure, to operate the Service and store data.
  • Payment processing, to take payment and manage subscriptions.
  • Customer relationship and support, to maintain our records of you and respond to your enquiries.
  • Analytics and performance, to understand how our Website and Service are used and to identify faults.
  • Advertising and measurement, to deliver and measure our marketing. Some of these providers use cookies to show our ads to you on other sites. Under some US state laws this may count as “selling” or “sharing” personal information. Section 15 explains this and how to opt out.
  • Artificial intelligence processing, to generate the recommended responses described in Section 4.

The specific providers that operate on our website, and the cookies they set, are listed in our Cookies Policy.

We require all service providers to maintain confidentiality, security, limited use, and proper disposal of Personal Information. We may also disclose Personal Information to comply with laws and legal processes, to protect rights and property, and in connection with a merger, sale, or reorganization of our business.

6. Opting Out of Communications

You can opt out of marketing emails by:

  • Clicking “unsubscribe”;
  • Adjusting your online account preferences;
  • Contacting us directly.

7. Retention of Personal Information

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected or as required to comply with applicable legal obligations. We decide how long to keep each category using these criteria:

CategoryHow long we keep it
Account and contact informationFor as long as your account is open, and afterwards for as long as we need it to meet tax, accounting and legal obligations or to resolve disputes.
Payment and transaction recordsFor as long as tax and accounting laws require us to keep them.
Communications and support recordsFor as long as we need them to respond to you and to keep a record of our dealings with you, and afterwards for as long as we need them to resolve disputes.
Customer content, including inboxesFor as long as the customer’s account is open, and then deleted in line with our agreement with the customer.
Website activity and cookie dataFor the cookie lifetimes listed in our Cookies Policy. Analytics reports built from this data may be kept longer in a form that does not identify you.
Marketing preferencesUntil you unsubscribe or ask us to delete your information. We keep a record that you unsubscribed, so we do not contact you again.
Job applicant informationAs described under “Job Applicants” in Section 3.

8. Information Security

We take appropriate layered physical, technical, and organizational measures to safeguard your information and reduce the risk of unauthorized access, use, or disclosure.

9. Rights Regarding Your Personal Information

  • Right to Access: Request and review your Personal Information.
  • Right to Correction: Challenge and correct inaccuracies.
  • Withdraw Consent: Withdraw consent to use Personal Information.
  • Complaints: File complaints with relevant authorities.

Under GDPR, you may have additional rights:

  • Withdrawal of consent;
  • Object to processing;
  • Right to erasure;
  • Restrict processing;
  • Data portability;
  • Object to automated decisions.

10. International and Interprovincial Transfer and Storage

Personal Information may be stored or processed outside your jurisdiction (e.g., Canada, USA) and governed by local laws, though GDPR and protective measures apply.

11. Third-Party Websites and Services

This policy does not cover third-party sites or services. Review third-party privacy policies separately.

12. Children’s Information

Our services are not intended for minors. We do not knowingly collect information from individuals under the legal age of majority.

13. Privacy Statement Updates

Updates to this policy take effect immediately upon publication. Continued use indicates acceptance.

14. Contact Us

Section 15 explains how US residents can make privacy requests. Anyone can use the contact details below.

Privacy Officer

Cassia Research Inc. dba Yoke

Suite 700, 1455 West Georgia Street, Vancouver, BC V6G 2T3

Email: privacy@yokegtm.com

15. US State Privacy Rights

This section applies if you live in the United States, including in California, Texas and the other states with consumer privacy laws. It adds to the rest of this Privacy Policy.

15.1 Personal information we collected in the last 12 months

CategoryExamplesSourceWhy we use itSold or shared?
IdentifiersName, email address, phone number, IP address, cookie and device identifiersYou, your device, and our service providersProviding our services, support, security, marketing and advertisingCookie and device identifiers, IP address, and scrambled (hashed) email address and phone number: shared with Meta and our other advertising partners
Commercial informationPlan, subscription, and purchase history, including when you start a trialYou, and our payment processorsProviding our services, billing and accounting, and measuring our adsTrial sign-ups: shared with Meta
Internet and other network activityPages visited, clicks, referring website, browser and operating systemYour device, through cookies and similar technologyAnalytics, improving our Website, security, and advertisingYes, through advertising cookies
Professional or employment informationJob title, company, and for job applicants, CV and career experienceYouProviding our services, and assessing job applicationsNo
Account loginUsername and passwordYouSigning you in and keeping your account secureNo
InferencesYour likely interests, based on your activity on our WebsiteOur analytics and advertising providersMarketing and advertisingYes, through advertising cookies

We disclose each of these categories to the service providers described in Section 5, for the purposes listed above.

15.2 Selling and sharing

We do not sell personal information for money. Some advertising tools on our Website send information about your visit, such as cookie identifiers, the pages you view, and scrambled (hashed) contact details that appear on the page, to advertising companies so they can measure our ads and show them to you on other sites. Our servers also send a copy of this information to Meta, and our systems send Meta a record when you start a trial, including your email address. Under some US state laws, including California’s, this may count as “selling” or “sharing” personal information, or as “targeted advertising”. Our Cookies Policy names these companies.

We do not knowingly sell or share the personal information of anyone under 16.

15.3 How to opt out

You can opt out of selling, sharing and targeted advertising in any of these ways:

  • Click “Your Privacy Choices” in the footer of our Website, or “Cookies settings” on our cookie notice, at any time.
  • Use a browser or extension that sends a Global Privacy Control (GPC) signal. We treat a GPC signal as a request to opt out for that browser.
  • Email us at privacy@yokegtm.com.

When you opt out on our Website, our advertising tools stop running in your browser, and our servers stop sending information about your visits to Meta and Google Ads. Our Cookies Policy explains this in more detail. If you email us, we also stop including your details in the trial and lead records our systems send to Meta.

15.4 Your rights

Depending on the state you live in, you have the right to:

  • Know what personal information we have collected about you, and get a copy of it.
  • Delete personal information we have collected from you.
  • Correct inaccurate personal information.
  • Opt out of selling, sharing and targeted advertising, as described in Section 15.3.
  • Limit our use of sensitive personal information. We use it only for the purposes described in Section 3, which the law allows, so we do not offer a separate “limit” choice.
  • Not be treated differently for exercising any of these rights. We will not deny you service or charge you a different price because you used them.

15.5 How to make a request

Email privacy@yokegtm.com and tell us which right you want to use.

Verification. To protect your information, we check that a request comes from you. We usually do this by matching the email address you use with the one we hold, and we may ask for more information if we need it. We use the information you give us only to verify your request.

Authorized agents. Someone else can make a request for you. They must send us your signed permission, and we may ask you to confirm your identity with us directly.

Timing. We respond within 45 days. If we need more time, we will tell you why, and we may take up to 45 more days.

15.6 Appeals

If we decline your request, you can appeal by replying to our decision email or by emailing privacy@yokegtm.com with “Appeal” in the subject line. We will respond within 60 days and explain our decision. If you disagree with the result, you can contact the attorney general in your state.