Privacy Policy

Yieldly, operated by Sensa Inc. ("Sensa," "we," "us," or "our")

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Yieldly website, applications, and services (the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

★ Key Points

This summary is for convenience only and does not replace the full Policy below.

We do not sell your personal information, and we do not use your content to train third-party AI models.
Broker connections are read/act-only with your authorization. We collect the data you choose to import or sync and the credentials needed to provide the integration; we protect credentials with safeguards appropriate to their sensitivity.
Payments are handled by a third-party payment processor; we do not store full card numbers.
Voice-memo audio is never sent to any AI or speech-to-text provider unless you explicitly request transcription.
You have access, correction, deletion, portability, and opt-out rights depending on where you live (CCPA/CPRA, GDPR/UK GDPR). Email support@yieldlytrade.com.

1. Who We Are

Sensa Inc. is the controller responsible for your personal information in connection with the Service. For privacy questions or to exercise your rights, contact support@yieldlytrade.com.

2. Information We Collect

a. Information you provide.

Account information — name, email address, password (stored only in hashed form), and authentication/MFA settings.
Profile and preferences — settings, notification preferences, and configuration.
Journal and trading content — manually entered trades, tags, notes, reviews, goals, attachments, and voice memos you record.
Payment information — billing details processed by our payment processor; we do not store full card numbers.
Support communications — messages you send us.

b. Broker and market connections.

When you connect a brokerage or data account, we collect the authorization tokens, API credentials, and account connection information required to provide the integration, and the account, order, position, and transaction data you choose to import or sync. We use industry-standard administrative, technical, and organizational safeguards designed to protect this information (see Section 6).

c. Information collected automatically.

Usage and device data — log data, IP address, approximate location (such as country), browser/device type, pages and features used, and timestamps.
Cookies and similar technologies — as described in our Cookie Policy.
Account-security signals — sign-in events, session and IP patterns, and basic device and browser characteristics, which we use to detect unauthorized access and to enforce the account-sharing and resale restrictions in our Terms of Service (Section 8). We do not use these signals for advertising or profiling.

d. Information from third parties.

Data from brokers, market-data and news providers, payment processors, and authentication providers, as needed to operate features you use.

3. How We Use Information

We use personal information to:

provide, operate, secure, and improve the Service and its features;
authenticate you, maintain sessions, and detect and prevent fraud, abuse, and security incidents, including unauthorized account sharing, credential sharing, and resale prohibited by our Terms;
connect to your brokers and data providers and process your trades, journal, and analytics;
process payments and manage subscriptions;
provide AI-assisted features you request (see the AI Disclosure);
send transactional messages, alerts, and notifications you have enabled;
respond to support requests; and
comply with legal obligations and enforce our Terms.

Aggregated and de-identified data. We may aggregate and de-identify information so that it no longer identifies you, and use it for analytics, research, and service improvement.

Legal bases (EEA/UK). Where applicable, we process personal data to perform our contract with you, to comply with legal obligations, for our legitimate interests (such as securing and improving the Service), and with your consent (such as certain cookies or optional communications).

We do not sell your personal information, and we do not use your content to train third-party AI models. We share information only as follows:

Service providers / sub-processors — vendors that host infrastructure, process payments, send email/push notifications, provide AI processing, and support security and analytics, under contractual confidentiality and data-protection obligations. By category, our current sub-processors include: cloud hosting / infrastructure, our payment processor, transactional email and push providers, our AI provider (currently Anthropic), and error-monitoring services.
Brokers and data providers — to deliver the integrations you connect and the instructions you authorize.
Market-data exchanges and vendors — where you access real-time exchange market data, we share the identity and professional / non-professional subscriber classification information the exchanges and the data vendor require to entitle your access, bill any applicable exchange fees, and meet their reporting and audit obligations. See the Market Data Subscriber Agreement.
Legal and safety — to comply with law, respond to lawful requests, or protect the rights, safety, and security of Sensa, our users, or the public.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
With your direction or consent.

5. AI Processing

Some features send your inputs (such as text you provide, journal context, or market data) to a third-party AI provider to generate responses. Voice-memo audio is not sent to any AI or speech-to-text provider unless you explicitly request transcription. AI providers process this data under contractual terms and do not use it to train their models on your data. See the AI Disclosure for details and limitations.

6. Data Security

We maintain industry-standard administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Sensitive credentials are protected using safeguards appropriate to their sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; you are responsible for safeguarding your account credentials.

7. Data Retention

We retain personal information for as long as needed to provide the Service, then as required to comply with legal, accounting, security, and dispute-resolution obligations. Different categories are retained for different periods; certain security and audit records are retained on a longer schedule. When information is no longer needed, we delete or de-identify it.

8. Your Privacy Rights

Depending on where you live, you may have rights to:

access the personal information we hold about you;
correct inaccurate information;
delete your information;
export / port a copy of certain information;
object to or restrict certain processing; and
withdraw consent where processing is based on consent.

To exercise these rights, email support@yieldlytrade.com. We will verify your request and respond within the timeframes required by law. You will not be discriminated against for exercising your rights.

California residents (CCPA/CPRA). You have the rights to know, access, correct, and delete personal information, to opt out of "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA for cross-context behavioral advertising), and to limit use of sensitive personal information. You may use an authorized agent to submit requests.

EEA/UK residents (GDPR/UK GDPR). You have the rights described above and may lodge a complaint with your supervisory authority. International transfers, where they occur, are made under appropriate safeguards such as Standard Contractual Clauses.

Nevada residents. Nevada law permits residents to opt out of the sale of certain "covered information" as defined under Nevada Revised Statutes Chapter 603A. We do not currently sell covered information as defined under that law. If this changes, you may submit a verified request to opt out to support@yieldlytrade.com.

"Shine the Light" (California Civil Code § 1798.83). California residents may request information once per year about our disclosure, if any, of personal information to third parties for their own direct-marketing purposes. We do not disclose personal information to third parties for their direct-marketing purposes.

9. Cookies and Tracking

We use cookies and similar technologies for essential functionality (such as sessions and security), preferences, and analytics. See the Cookie Policy for details and choices.

Do Not Track. Some browsers offer a "Do Not Track" signal. There is no common industry standard for responding to it, and we do not currently respond to Do Not Track signals.

10. Children's Privacy

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@yieldlytrade.com and we will delete it.

11. International Users

We may process and store information in the United States and other countries. By using the Service, you understand your information may be transferred to jurisdictions with different data-protection laws, subject to the safeguards described above.

12. Third-Party Links and Services

The Service may link to or integrate third-party sites and services that have their own privacy practices. We are not responsible for those practices; review their policies.

13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice. Your continued use after changes take effect constitutes acceptance.

14. Contact Us

Privacy requests and questions: support@yieldlytrade.com
General support: support@yieldlytrade.com

v1.2	Last Updated: August 19, 2026