Privacy Policy

Information we collect

We collect:

• Account & profile — name, email, and details you provide at sign-up.
• Identity / verification — KYC/AML information where required to use financial features.
• Knowledge content — the notes, documents, and conversations you choose to capture, and the personal knowledge graph built from them.
• Transaction & on-chain data — wallet addresses, deal terms, and settlement records associated with your activity.
• Payment data — processed by our payment provider; we don't store full card numbers.
• Usage, device & log data — pages viewed, actions taken, IP address, browser/device, and timestamps, used to operate and improve the Services.
• Communications — messages you send us (e.g. support or applications).

How we use it

• Provide, maintain, secure, and improve the Services.
• Build the personal knowledge graph that powers your notes, chat, and deal context.
• Process deals, payments, and on-chain settlement.
• Verify identity and meet legal, regulatory, KYC/AML, and tax obligations.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Communicate with you about your account, applications, and updates.

Legal bases (EEA/UK)

Where the GDPR applies, we process personal data on the bases of: performance of our contract with you (to provide the Services); our legitimate interests (to secure and improve them); compliance with legal obligations (KYC/AML, tax); and your consent (where required, e.g. certain communications). You can withdraw consent at any time.

Cookies & analytics

We use a small number of essential cookies to keep you signed in and the site working. For product analytics we use a privacy-respecting configuration (event and pageview analytics without advertising cookies and without cross-site tracking). We do not sell data to advertisers or run third-party ad networks. Where the law requires a consent banner for non-essential cookies, we present one.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, including:

• Hosting & infrastructure — our cloud provider.
• Email delivery — to send confirmations and notifications.
• Product analytics — to understand and improve usage.
• Payments — our payment processor.
• Identity / wallet providers — where you sign in or sign with an external provider.

We also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of users and the public. A current list of sub-processors is available on request at the contact below.

On-chain data is permanent

Deals and settlements that execute on a blockchain are recorded on that network. By design, on-chain records are immutable — they cannot be edited or deleted by us or anyone else, and may be visible to network participants. Amounts and sensitive deal details are protected with encryption and zero-knowledge proofs, but the existence of a transaction and its on-chain metadata persists permanently. Consider this before transacting.

Your knowledge stays yours

Your personal knowledge graph belongs to you. We do not sell it, and we do not use it to train third-party AI models. When you join an operator economy or working group, only the entities and relationships you explicitly contribute become part of that shared graph.

How long we keep it

We keep personal data for as long as your account is active and as needed to provide the Services. After closure we retain limited data where required for legal, regulatory, accounting, or fraud-prevention purposes (for example, KYC/AML records for the period mandated by law), then delete or anonymise it. On-chain records, as noted above, remain on the network.

International transfers

We may process and store data in countries other than yours. Where we transfer personal data across borders, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

Your rights & choices

Depending on where you live (e.g. under the GDPR or CCPA/CPRA), you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data (subject to legal retention and on-chain immutability).
• Export your data (portability).
• Object to or restrict certain processing, and withdraw consent.
• Not be discriminated against for exercising these rights.

To exercise any of these, email privacy@yieldfabric.com. We respond within the timeframes the law requires.

Security

We protect your information with industry-standard measures, including encryption in transit and at rest, access controls, and per-record encryption for sensitive financial fields. No system is perfectly secure; you are responsible for safeguarding your account credentials and any wallet keys you control.

Children's privacy

The Services are not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy as the Services and the law evolve. We'll change the "Last updated" date above and, for material changes, give notice through the Services or by email. Continued use after an update means you accept the revised policy.

Contact us

Questions, requests, or complaints about privacy? Email privacy@yieldfabric.com. You also have the right to complain to your local data protection authority.