Privacy Policy
What we collect, why, and the rights available to you
1. Purpose and Scope
This policy describes how Yieldz Holdings, Inc. ("Yieldz") collects, uses, discloses, and protects personal information belonging to individuals who use the platform, and the rights available to them with respect to that information. It applies to the Yieldz mobile application, web application, and marketing website, operated exclusively in the United States.
Yieldz also provides a separate Privacy Notice, in the standardized format that federal financial privacy rules prescribe under the Gramm-Leach-Bliley Act, which summarizes how nonpublic personal financial information is shared. This policy is written to satisfy the California Consumer Privacy Act as amended by the California Privacy Rights Act, which sets the most detailed state-level disclosure standard currently in effect in the United States, and it supplements that notice. Meeting both provides a reasonable basis for compliance with the range of state privacy laws that share substantially similar requirements.
2. Who Else Is Involved
Several functions described in this policy are performed by specialist third parties rather than by Yieldz directly. Persona performs identity and business verification. A registered broker-dealer performs accredited investor verification. A third-party e-signature provider captures signatures on offering documents. Amazon Web Services provides cloud infrastructure, including email and text message delivery and cryptographic key management. HubSpot receives and manages the details people submit through forms on our marketing website, and provides the scheduling tool used to book calls.
Some of these parties act as service providers processing information on Yieldz's behalf and under its instruction. Others — Persona and the broker-dealer partner, in particular — independently collect and verify information as part of their own regulated functions, and may separately be subject to their own privacy obligations with respect to that information. The full division of responsibility is set out in the KYC / KYB Responsibility Matrix published on our website.
3. Information We Collect
The categories below reflect what the platform actually collects and stores, verified against its own systems rather than assumed.
| Category | What it includes |
|---|---|
| Identifiers | Name, email address, phone number, country of residence |
| Website inquiry information | Name, email address, phone number, company, state, and the answers to quiz or calculator questions that you choose to submit through forms on our marketing website to receive a guide, join a waitlist, or request a call. These are received by our customer relationship management provider, HubSpot. They are separate from, and not linked to, a Yieldz account unless you create one |
| Identity verification outcome | Verification status and a reference identifier from our identity verification provider. Identity documents themselves — government identification, selfies — are collected and retained by that provider directly, not by Yieldz |
| Accreditation information | Which category of accreditation applies (income, assets or net worth, or professional attestation) and the status of that verification. Supporting documents — tax returns, account statements, professional letters — are uploaded directly to our broker-dealer partner and are not stored by Yieldz |
| Transaction and holdings information | Records of purchases, redemptions, and current holdings, together with wallet addresses |
| Funding information | The amount, currency, and payment method type used to fund a wallet through a third-party on-ramp provider. Yieldz does not collect or store bank account or card numbers; these are held by the on-ramp provider |
| Device and authentication information | Device identifiers, authentication method used, session information, a push notification token, and crash and performance reports, collected to secure accounts, enable features such as passkeys and push notifications, and keep the application working |
| Location | The approximate or precise location of your device, collected only if you grant location permission in the application, and used to verify your identity, prevent fraud, and confirm that you are using the platform from the United States |
| Communications | Correspondence with support, and records of notifications sent |
| Advertising and analytics identifiers | Cookies, device and browser identifiers, and browsing activity on our marketing website, collected for advertising and analytics purposes. This category does not include, and is kept separate from, any information about accreditation, holdings, or transaction activity |
What we do not collect. Yieldz does not receive or store Social Security numbers, government identification documents, or selfie images. These are collected through, and held directly by, our identity verification and accreditation partners as part of their own verification processes, and Yieldz receives only a verification outcome and a limited set of identifying details necessary to operate the platform. Where verification includes a government ID or selfie check, our identity verification provider processes biometric information, such as a facial comparison used to confirm that a live person is present, and asks for your consent before you provide your ID or selfie. Yieldz does not receive or store that biometric information.
4. How Information Is Used
- To verify identity and eligibility to invest, including confirming that you are in the United States, consistent with applicable securities law
- To process purchases, redemptions, and other transactions initiated by the investor
- To operate and secure accounts, including authentication and fraud prevention
- To communicate about transactions, account activity, and platform updates
- To send the guides, updates, and invitations that people request through our website, and, where they have checked the box to agree, to contact them by email and phone about Yieldz programs and events. They can unsubscribe at any time
- To respond to requests made through our website, such as sending a guide you asked for or arranging a call
- To meet legal, regulatory, and recordkeeping obligations described in Section 7
5. Sharing of Information
Information is shared with the service providers described in Section 2, to the extent necessary for them to perform the function they are engaged for. It is also shared with the organization whose offering an investor purchases into, limited to what is necessary to complete that transaction and administer the resulting holding.
Yieldz affiliates. Information is also shared with Yieldz's affiliates, which are companies related to Yieldz Holdings, Inc. by common ownership or control that have a Yieldz name. It is shared with them to the extent needed to provide, administer, and support the products and services you request, and for their everyday business purposes, such as processing transactions, maintaining accounts, and meeting legal obligations. We do not share personal information with our affiliates so that they can market to you, and we do not share information about your creditworthiness with them without your authorization.
Yieldz does not sell personal information. Yieldz uses paid advertising, including Google Ads, and analytics tooling on its marketing website. This involves sharing advertising and analytics identifiers — described in Section 3 — with those providers for advertising and measurement purposes, which California law treats as "sharing" independent of any payment. This sharing is limited to identifiers and browsing behavior on the marketing website; it never includes accreditation status, holdings, transaction activity, or any other nonpublic personal financial information, which is never provided to an advertising or analytics partner.
Information may also be disclosed where required by law, in response to a valid legal order, or as necessary to protect the rights, property, or safety of Yieldz, its users, or others.
6. Retention
Account and transaction records are retained for a minimum of six years following the closure of an account, consistent with the recordkeeping period applicable to broker-dealer customer account records under SEC and FINRA rules. Some records may be retained longer where a specific legal, tax, or regulatory requirement calls for it. Deactivating an account removes it from active use; underlying records are retained for the periods described here rather than deleted immediately, for the reasons described in Section 7.
7. Why Some Information Cannot Be Deleted on Request
Yieldz operates under securities and anti-money-laundering recordkeeping obligations that require certain records to be preserved for fixed periods regardless of an individual request to delete them. Where a deletion request cannot be fully honored for this reason, the applicable exception will be identified in the response to that request, and any information not subject to a retention obligation will still be deleted.
8. Cookies, Advertising, and Your Choices
Our marketing website uses cookies and similar technologies for advertising and analytics, described in Section 3. A notice is shown at or before the point these are collected, and our Cookie Notice lists the cookies used, what each does, and how long it lasts. Our pages also load typefaces from Google Fonts, so your browser requests them from Google when a page opens, and some pages show videos from YouTube that load only when you press play, using YouTube's privacy-enhanced mode.
You may opt out of this sharing at any time, in any of these ways:
- Using the "Do Not Sell or Share My Personal Information" link in the footer of our website, which opens our Your Privacy Choices page;
- Using Cookie Preferences, linked from the footer of every page and from the cookie notice, to turn off advertising, analytics, or both; or
- Setting the Global Privacy Control signal in your browser, which we honor automatically without requiring a separate request.
An opt-out request of this kind does not require identity verification, and takes effect within 15 business days.
9. Your Other Rights and How to Exercise Them
Depending on residency, an individual may also have the right to know what personal information has been collected, to request its deletion, and to request correction of inaccurate information. Because Yieldz operates exclusively online and interacts with its users directly through the platform, these requests may be submitted through the Your Privacy Choices page or to a single designated address:
privacy@yieldz.net
A request will be acknowledged within ten business days and substantively addressed within forty-five calendar days, extendable once by an additional forty-five days where reasonably necessary. Identity will be verified before a request is fulfilled, using a method appropriate to the sensitivity of the information involved. An individual is not required to create an account to submit a request, though a request concerning an existing account may be directed through that account to confirm identity.
10. Children's Privacy
The platform is restricted to individuals eighteen years of age or older, or the age of legal majority in their jurisdiction if higher. Yieldz does not knowingly collect personal information from anyone younger.
11. Security
Yieldz maintains a written information security program describing the technical and organizational measures used to protect personal information, summarized in the Data Protection Documentation maintained internally. Wallets are self-custodial, secured by a key split between the individual's device and the platform, so that neither party can act alone.
12. Changes to This Policy
This policy is reviewed at least annually and updated whenever a material change occurs to what is collected, how it is used, or with whom it is shared. Continued use of the platform after a change takes effect constitutes acceptance of the revised policy.
13. Contact
Questions about this policy, or requests concerning personal information, may be directed to privacy@yieldz.net.