Privacy Policy

Last updated: March 24, 2025

YieldStrike is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

When you register and use YieldStrike, we collect:

• Account information: name, email address, mobile phone number, country
• Authentication data: encrypted passwords, 2FA codes (never stored after use)
• Usage data: login timestamps, feature usage, notification preferences
• Device information: device type, operating system version, push notification tokens

2. How We Use Your Information

• Provide and operate the YieldStrike platform
• Send daily pick briefings and exit alerts via SMS
• Send transactional emails such as account creation and password reset
• Verify your identity and secure your account
• Improve the platform based on usage patterns
• Communicate with you about your account

3. SMS Communications

By providing your mobile number, you consent to receive SMS messages from YieldStrike. These include daily morning briefings, exit signals, and account verification codes. You can opt out of marketing SMS messages at any time by replying STOP to any message or through your account settings. Message and data rates may apply.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Twilio: For SMS delivery. Your phone number is transmitted to Twilio to send messages.
• SendGrid: For email delivery. Your email address is transmitted to SendGrid to send emails.
• Legal requirements: If required by law, court order, or government authority.

5. Data Security

Passwords are hashed using bcrypt and never stored in plaintext. All data is transmitted over HTTPS with TLS 1.2 or higher. Our servers are protected by firewalls, rate limiting, and a web application firewall.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

7. Your Rights

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@yieldstrike.io.

8. Cookies

Our website uses minimal cookies solely for authentication purposes. We do not use tracking cookies or advertising cookies.

9. Children's Privacy

YieldStrike is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or SMS. Your continued use of the platform constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact us at privacy@yieldstrike.io.