Privacy Policy

To run portfolio automation we collect: the email address you use to sign up, the brokerage accounts you connect through Plaid, and the data those accounts expose — holdings, balances, dividend schedules, and recent transactions. We also record operational metadata (login timestamps, alert deliveries) needed to keep the service reliable.

We never collect data we don't use. No third-party trackers, no advertising pixels, no cross-site analytics.

YieldPulse connects to your brokerage through Plaid, a regulated data aggregator. Plaid handles credential entry, identity verification, and consent; we receive a revocable, scoped token plus the account data you authorise us to read.

By connecting a brokerage through YieldPulse you agree to Plaid's End User Privacy Policy. Plaid's policies are governed independently from ours — you can review them at https://plaid.com/legal/.

Records at rest are encrypted with AES-256. Records in transit use TLS 1.2 or higher. Plaid tokens are stored scoped to your user id and are rotated on a regular schedule.

Access to production data is gated by a privileged-access workflow, limited to engineers responding to a support request or fixing a defect, and audited.

We do not sell, rent, or trade your data. We do not share your holdings, dividend history, or account linkage with advertisers, brokers, marketing partners, or anyone outside of operating YieldPulse on your behalf.

You can export every row tied to your account at any time. You can delete your account and every record associated with it — including the Plaid token, so we lose read access too. Deletion is permanent; we do not retain a soft-deleted copy.

If you're in a jurisdiction with additional rights (GDPR, CCPA, etc.), those rights apply on top of what we describe here. Email yieldpulse-3@polsia.app to exercise them.

YieldPulse uses first-party cookies only — for session management (signing you in) and theme preferences (light/dark). No third-party cookies, no advertising cookies, no cross-site cookies.

A short list of every sub-processor whose access we grant. We share the minimum data each one needs to perform the service.

Plaid — read-only brokerage connectivity. Receives your brokerage credentials (you enter them on Plaid, not us) and returns revocable tokens plus the holdings, balances, and dividend schedules you authorise. Governed independently by the Plaid End User Privacy Policy.

Stripe — payment processing for the Pro plan. Receives your billing details and only the user-id/plan metadata needed to reconcile a subscription. Card details never reach our database.

Resend — transactional email delivery. Receives your email address and the rendered email body. No marketing, no list-broadcast tooling.

OpenAI — used to draft AI explanations for drift alerts and treasury rotations. Receives a redacted snapshot of the alert (symbol, side, quantity, target allocation, AI prompt) and never the underlying holdings or your account identifiers.

PostHog — product analytics. Receives anonymised event names and properties server-side; we never send your email, holdings, or brokerage identifiers through it.

AI explanations are generated on demand from a redacted snapshot of the alert or rotation: ticker symbol, side, dollar amount, hold-time estimate, and target allocation. Your underlying account identifiers, name, and email are never sent to our model provider. Drafts are stored against your account until the source alert is dismissed.

AI output is a draft, not a recommendation. YieldPulse is not an investment advisor; treat AI drafts as the same hint you would a textbook.

Operational records (holdings snapshots, alert history, drift approvals, dividend logs) are retained against your account until you delete it or for 90 days after your last login, whichever comes first. Audit logs of administrative actions are retained for 90 days.

Backups roll off after 30 days. Email logs are retained for 30 days.

We update this page when our practices change. Material changes — anything that affects what we collect or how we use it — are announced by email so you have time to object before they take effect.

Questions, requests, or complaints: yieldpulse-3@polsia.app. We answer every message.