Yext, Inc. Data Privacy Framework Notice — Website Notice

Effective Date: July 16, 2026

Yext, Inc. ("Yext", "we", "us") respects your privacy. This Data Privacy Framework Notice ("Notice") describes our standards and procedures for handling personal data transferred from the European Economic Area ("EEA"), the United Kingdom (and Gibraltar) and Switzerland to the U.S. in accordance with Yext's obligations under the Data Privacy Framework.

Certification to the DPF Program

Yext has certified that it complies with the EU-US Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. DPF ("UK Extension"), and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") with regard to the processing of personal data received from the European Union, United Kingdom (and Gibraltar), and Switzerland respectively. If there is any conflict between the terms of this Notice and the principles set forth in the EU-U.S. DPF, UK Extension, and/or the Swiss-U.S. DPF, the principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view the certification for Yext, please see https://www.dataprivacyframework.gov.

For business contacts (including prospects, customer, resellers, website visitors, office visitors and other business contacts) who reside within the EEA, UK, or Switzerland, your relationship is usually with Yext Limited which, under European privacy laws, is the primary data controller with regard to your personal data collected by Yext (although other Yext European entities manage and act as data controllers in respect of the Yext websites). Your personal data will be transferred to Yext using EU Commission Standard Contractual Clauses or such other data transfer mechanisms as available under applicable data protection laws.

With respect to personal data processed on behalf of our EEA, UK, and Swiss business customers (e.g., relating to reviews or their employees) or resellers, Yext Limited is generally considered a "data processor." As part of Yext providing services to its customers, personal data may be transferred by Yext Limited to Yext using EU Commission Standard Contractual Clauses or such other data transfer mechanisms as available under applicable data protection laws.

Additional descriptions about the types of personal data we handle and how we handle it are available in the following sections of the Yext Privacy Policy:

INFORMATION THAT WE COLLECT ABOUT YOU
USES MADE OF YOUR PERSONAL INFORMATION AND OUR LEGAL BASIS FOR PROCESSING
DISCLOSURES OF YOUR PERSONAL INFORMATION
WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO YEXT'S DIRECT MARKETING
EUROPEAN DATA PROTECTION RIGHTS

Commitment to subject to the Principles

We remain subject to the applicable Data Privacy Framework Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability, for all personal data that we receive from companies or individuals in Switzerland, the EEA, and the UK. We additionally rely on other compliance mechanisms, including data processing agreements based on the EU Standard Contractual Clauses, to transfer personal data received from companies or individuals in Switzerland, the EEA, and the UK to the US.

Your rights

You have the right to access personal data about yourself and may request corrections, deletions, or additions where the personal data is inaccurate or has been processed in violation of the Principles. We may limit or deny access to personal data in exceptional circumstance such as where the burden or expense of providing access would be disproportionate to the risks to your privacy, or where the rights of persons other than you may be affected. You may request access to your personal data by emailing privacy@yext.com.

Choices and means

Please review the "Withdrawing Consent or Otherwise Objecting to Yext's Direct Marketing" and "European Data Protection Rights" sections of the Yext Privacy Policy for information about the choices and means for limiting use and disclosure of personal data.

How to contact us

In compliance with the EU-U.S. DPF, the UK Extension, and the Swiss-U.S. DPF, Yext commits to resolve Principles-related complaints about your privacy and our collection or use of your personal data. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data should first contact privacy@yext.com or by regular mail addressed to:

Yext, Inc. Attn: Privacy 61 Ninth Avenue New York, NY 10011 United States of America

For inquiries or complaints regarding our practices in respect to your personal data, you may also contact:

Yext SAS Attn: Privacy Kwerk Messine 16 Avenue de Messine 75008 Paris France

Yext will respond to your request to access your personal data within a reasonable time period.

Independent dispute resolution body

Yext has further committed to refer unresolved complaints concerning our handling of personal data to JAMS, which provides an independent third-party dispute resolution mechanism based in the United States. If you do not receive timely acknowledgement of your complaint from Yext, or if we have not addressed your complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

The Federal Trade Commission (FTC) has jurisdiction over Yext's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

Arbitration

If your complaint is not resolved through the above channels and you have exhausted all other means to resolve your concern regarding a potential violation of Yext's obligations under the Data Privacy Framework Principles, you may seek resolution via binding arbitration. For additional information about the arbitration process, please visit the Data Privacy Framework website: www.dataprivacyframework.gov.

Requirement to disclose

Yext may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Liability

Please note that Yext remains accountable for personal data that is subject to the Data Privacy Framework and that Yext subsequently transfers to a third party. Yext transfers personal data to service providers for processing on its behalf, and Yext remains responsible under the Data Privacy Framework Principles if these service providers process personal data in a manner inconsistent with the Principles.