AYYES, LLC — COOKIE POLICY (GLOBAL + TCF v2.2 COMPLIANT)

Effective Date: August 28, 2026
Last Updated: August 28, 2026

Governing ayyes.com, the AYYES.COM, AYYES Work Manager web application, AYYES Time Tracker, AYYES WordPress Plugins and the AYYES mobile applications (global + TCF v2.2 compliant)

This Cookie Policy explains how AYYES, LLC (“AYYES,” “we,” “our,” or “us”) uses cookies, pixels, tags, software development kits (SDKs), local/session storage, device identifiers, and similar tracking technologies (collectively, “Cookies”) on ayyes.com, within the AYYES Work Manager web application, and within AYYES mobile applications (together, the “Sites”). This Policy supplements the AYYES Privacy Policy and is incorporated by reference into the AYYES Terms of Service and End User License Agreement (EULA).

This Policy applies globally, including to users located in the United States, European Union, United Kingdom, Canada, APAC, LATAM, and any other jurisdiction in which AYYES operates. Where required by law, AYYES obtains prior consent before placing non-essential Cookies, consistent with the EU GDPR and ePrivacy Directive, UK GDPR and PECR, the IAB Europe TCF v2.2, California’s CPRA, Colorado’s CPA, Connecticut, Virginia, and Utah privacy law, the Texas Data Privacy and Security Act (TDPSA), Brazil’s LGPD, and Canada’s PIPEDA.

  1. WHAT ARE COOKIES

Cookies are small text files, along with related technologies such as pixels, tags, SDKs, local/session storage, and device identifiers, that are placed on your device when you visit a website or use an application. Cookies may be:

  • First-party Cookies — set directly by AYYES
  • Third-party Cookies — set by partners such as our analytics and advertising providers, listed in Section 6
  • Session Cookies — expire when you close your browser
  • Persistent Cookies — remain until they expire or you delete them

Cookies allow a site to recognize your device, remember information about your visit, and support core functionality, analytics, and advertising.

  1. CATEGORIES OF COOKIES WE USE

2.1 Strictly Necessary Cookies

Required for the Sites to function. These Cookies enable core platform functionality, maintain session integrity, support authentication and security, enable load balancing and traffic distribution, and help prevent fraud and abuse. These Cookies cannot be disabled through our consent tool because the Sites cannot function properly without them.

2.2 Performance & Analytics Cookies

Used to understand how visitors use the Sites, measure traffic and usage patterns, diagnose technical issues, and support product development and performance improvements. Examples of providers used for this purpose include Google Analytics, Azure Application Insights, and Cloudflare Analytics. Where required by law, these Cookies are placed only with your consent.

2.3 Functional Cookies

Remember your preferences and settings — such as language, region, and display settings — and support features like chat, support tools, and personalization. Disabling these Cookies may reduce functionality.

2.4 Advertising, Marketing & Cross-Context Behavioral Cookies

Used by us and our advertising partners to deliver, measure, and personalize advertising; build advertising profiles; track browsing activity across sites and services; enable retargeting; and support cross-context behavioral or targeted advertising. These Cookies may share data with advertising partners including Google Ads, Meta (Facebook/Instagram), LinkedIn, TikTok, and other advertising networks, subject to your consent and opt-out choices described in Section 5.

Sale/Share disclosure: [LEGAL TO CONFIRM — see cover note]. AYYES’s other legal notices (Privacy Policy, EULA, GDPR Compliance Statement) state that “AYYES does not sell personal data as ‘sale’ is defined under the GDPR,” and address U.S. state law “sale”/“share” only through the opt-out rights described below. This section reflects the fuller advertising-partner list and “sell/share” characterization from the current production Cookie Policy. Before this document is published, Legal should confirm which statement accurately reflects current data flows to Google Ads, Meta, LinkedIn, and TikTok, and align this section with the Privacy Policy, EULA, and GDPR Compliance Statement so all AYYES notices describe the same practice consistently. Getting this wrong in either direction creates real risk: understating a “sale”/“share” is a CPRA/TDPSA disclosure violation; overstating one creates unnecessary opt-out and contractual obligations.

2.5 AI/ML-Related Tracking Technologies

AYYES uses Cookies and telemetry to support AI/ML model training and optimization, fraud detection, automated decision-making support, personalization, and the operation of internal and third-party AI systems (including OpenAI and Azure AI), as further described in the AYYES AI & Data Processing Notice. Where required by law, we obtain your consent before processing data collected via Cookies for AI/ML purposes.

3. IAB TRANSPARENCY & CONSENT FRAMEWORK

Where required, AYYES supports the IAB Europe Transparency & Consent Framework (TCF) v2.2 to communicate your consent choices to participating advertising vendors in a standardized, auditable way, through the consent banner described in Section 5.1.

4. LEGAL BASES FOR PROCESSING (GDPR/UK GDPR)

Depending on the Cookie category, AYYES relies on the following legal bases:

  • Consent (Art. 6(1)(a)) — analytics, advertising, and personalization Cookies
  • Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and service continuity
  • Contractual necessity (Art. 6(1)(b)) — authentication and account access
  • Legal obligation (Art. 6(1)(c)) — compliance and security logging
  1. YOUR CHOICES

5.1 Cookie Consent Banner (TCF v2.2 Compliant)

On your first visit from a jurisdiction where consent is required before non-essential Cookies are placed — including the European Economic Area, the United Kingdom, and applicable U.S. states — we present a cookie consent banner that allows you to accept all, reject all, or customize non-essential Cookies before they are set. You may change your choices, or withdraw consent, at any time through the cookie preference tool linked in the Sites’ footer.

5.2 Browser Controls

Most browsers allow you to block Cookies, delete existing Cookies, and set your own tracking preferences through browser settings.

5.3 Advertising Opt-Out Tools

Where applicable, you may also opt out of interest-based advertising through industry tools, including the Network Advertising Initiative (NAI) opt-out, the Digital Advertising Alliance (DAA) opt-out, and the European Digital Advertising Alliance (EDAA) opt-out.

5.4 Mobile App Controls

On iOS and Android devices, you can limit ad tracking and reset your device’s advertising identifier through your device’s operating system settings.

5.5 Global Privacy Control & Universal Opt-Out Mechanisms

AYYES recognizes the Global Privacy Control (GPC) signal, Colorado’s Universal Opt-Out Mechanism, and other legally recognized Universal Opt-Out Mechanisms and browser-based Do Not Track signals where legally required, as a valid request to opt out of the sale or sharing of personal data, targeted advertising, and profiling for marketing purposes, where required by applicable law.

5.6 Do Not Sell or Share My Personal Information

To the extent AYYES’s use of advertising Cookies constitutes a “sale” or “share” of personal data, or “targeted”/“cross-context behavioral” advertising, under the California CCPA/CPRA, the Colorado CPA, the Texas TDPSA, or other applicable U.S. state law, you may opt out at any time using the cookie preference tool, GPC, or by contacting us as described in Section 12. See the sale/share disclosure note in Section 2.4 above, which Legal should finalize before this section is published in its final form.

6 THIRD-PARTY COOKIES & SUB-PROCESSORS

Some Cookies are placed by third parties who provide services on our behalf or operate independently as their own data controllers. These include, without limitation:

  • Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Akamai, Linode, Wasabi, and Cloudflare — infrastructure, security, and content delivery
  • Stripe and PayPal — payment processing
  • Twilio and SendGrid — messaging and email delivery
  • Google Analytics, Google Ads, and Google Tag Manager — analytics and advertising
  • Meta Pixel (Facebook/Instagram), LinkedIn, and TikTok — advertising and retargeting
  • OpenAI and Azure AI — AI and LLM processing
  • OpenStreetMap — mapping and location services

Meta, LinkedIn, and TikTok appear in the current production Cookie Policy’s partner list but are not included in the master sub-processor list published in the Privacy Policy, EULA, and GDPR Compliance Statement. Please confirm the accurate, current list and update all AYYES legal notices to match a single authoritative sub-processor list.

Each partner’s processing of data is governed by their own privacy policy and by AYYES’s contractual agreements with that partner. We do not control third-party Cookies; please review each provider’s own privacy and cookie practices for details.

7 COOKIE RETENTION PERIODS

Retention varies by Cookie type:

Cookie Type Typical Retention
Strictly Necessary Session, or up to 12 months
Performance & Analytics 1–24 months
Functional 1–24 months
Advertising & Marketing 1–24 months (varies by partner)
AI/ML Telemetry 1–36 months, depending on model lifecycle

These retention periods are designed to comply with the GDPR’s storage-limitation principle and comparable requirements under other applicable law.

8 INTERNATIONAL DATA TRANSFERS

Where you access the Sites from the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements (including the ePrivacy Directive and UK PECR), non-essential Cookies are placed only with your prior consent as described in Section 5. Cookie-derived data may be transferred to and processed in the United States, the European Union, the United Kingdom, Canada, Brazil, and APAC and LATAM regions where we or our sub-processors operate. Such transfers rely on appropriate safeguards, including the EU Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (IDTA), applicable adequacy decisions, or other legally recognized transfer mechanisms.

CHILDREN’S PRIVACY

The Sites are not directed to children under 13 (or under 16 in the European Union and United Kingdom), and we do not knowingly place advertising or tracking Cookies through Sites directed to such children.

10 ARBITRATION & DISPUTE RESOLUTION

10.1 Mandatory Binding Arbitration

Any dispute, claim, or controversy arising out of or relating to this Cookie Policy shall be resolved exclusively through final and binding arbitration administered by the American Arbitration Association (or a mutually agreed alternative), conducted by a single arbitrator in Houston, Texas, USA, under the same arbitration terms set out in Section 12 of the AYYES End User License Agreement and the AYYES Terms of Service, which are incorporated into this Policy by reference. You and AYYES each waive the right to participate in a class, collective, or representative action, subject to the 30-day opt-out right described in those documents.

10.2 Consumers in the EEA, UK, Switzerland, or Australia

If you are an individual consumer habitually resident in the European Economic Area, the United Kingdom, Switzerland, or Australia, nothing in this Section 10 limits any non-waivable right you have under mandatory consumer-protection law of your place of residence to bring proceedings before the competent courts of that jurisdiction.

10.3 Governing Law

This Cookie Policy is governed by the laws of the State of Texas, without regard to conflict-of-law principles, subject to Section 10.2.

11 CHANGES TO THIS POLICY

We may update this Cookie Policy to reflect changes in law, technology, our Services, or our third-party partners. The “Effective Date” above indicates when this Policy was last revised. Material changes will be reflected by an updated Effective Date, and, where required by law, we will obtain renewed consent.

12 CONTACT US

Questions about this Cookie Policy may be directed to AYYES, LLC, Legal & Compliance Department, 507 Rosewood Dr, Shenandoah, TX 77381, USA, or to legal @ ayyes.com.