1. Overview
YieldAI ("YieldAI," "we," "us," or "our") operates a back-office software platform for restaurant operators, available via web browser and mobile application. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. It applies to all YieldAI products and services, including getyieldai.com, the YieldAI web app, and any future iOS or Android applications.
2. Information we collect
Account and contact information
When you create an account we collect your name, email address, organization name, and (optionally) a phone number. This information is used to identify your account, send transactional emails, and provide support.
Billing and payment information
Subscription payments are processed by Stripe, Inc. We store your Stripe customer ID and subscription status; we never see or store your full card number. Stripe's privacy practices are described at stripe.com/privacy.
Business and operational data
When you connect integrations (POS systems, HR/scheduling platforms, accounting software, etc.), we receive transaction records, employee shift and payroll data, inventory movements, and related business data on your behalf. This data is yours — we process it solely to operate YieldAI for you.
Usage and device data
We automatically collect information about how you interact with YieldAI: pages visited, features used, clicks, session duration, browser type, operating system, device identifiers, and IP address. This helps us diagnose errors and improve the product.
Location data
The web app and manager surfaces do not collect precise location data. A future mobile app for staff clock-in may request device GPS — you will be asked for explicit permission before any location data is collected, and you can revoke that permission at any time in your device settings.
Communications
If you contact support or send us feedback, we retain the content of that communication to respond and improve the service.
3. How we use information
- Provide, operate, and improve the YieldAI platform and its features.
- Generate forecasts, schedules, purchase suggestions, prep build-tos, and other AI-assisted recommendations.
- Process subscription payments and send billing communications.
- Send transactional emails (account verification, password reset, decision notifications, time-off approvals).
- Monitor service reliability, diagnose bugs, and protect against fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information. We do not use your business data to train AI models for the benefit of other operators or third parties.
4. Third-party services and SDKs
YieldAI relies on the following sub-processors and services. Each is subject to its own privacy policy.
| Service | Purpose | Privacy policy |
|---|---|---|
| Clerk | Authentication and organization management | https://clerk.com/legal/privacy |
| Stripe | Subscription billing and payment processing | https://stripe.com/privacy |
| Supabase | Managed PostgreSQL database hosting | https://supabase.com/privacy |
| Anthropic | AI-generated suggestions and insights | https://www.anthropic.com/privacy |
| Vercel | Application hosting and edge delivery | https://vercel.com/legal/privacy-policy |
| Twilio (SMS) | Optional SMS notifications (if enabled) | https://www.twilio.com/legal/privacy |
| Open-Meteo | Weather data for sales forecasting | https://open-meteo.com/en/terms |
5. Sharing of information
We share information only (a) with the sub-processors listed in Section 4 under appropriate confidentiality agreements; (b) with integration partners you have explicitly connected (e.g., your POS or HR vendor); (c) when required by law, court order, or to protect rights and property; or (d) in connection with a merger, acquisition, or sale of assets, in which case we will notify you. Tenant data is isolated by organization — we never share one customer's data with another.
6. Data retention
We retain account and operational data for as long as your subscription is active and for up to 90 days after cancellation (to allow data export). Anonymised or aggregated statistics may be retained longer. Backups are purged on a rolling 30-day cycle. You may request earlier deletion at hello@getyieldai.com.
7. Security
We protect your data with TLS encryption in transit, AES-256 encryption at rest, row-level security enforced at the database layer (each tenant sees only their own rows), multi-factor authentication support via Clerk, and regular security reviews. No system can guarantee absolute security; if you believe your account has been compromised, contact us immediately at hello@getyieldai.com.
8. Your choices and rights
Access and portability
You may request a copy of the personal information we hold about you by emailing hello@getyieldai.com. We will respond within 30 days.
Correction
You can update most account information directly in Settings. For other corrections, contact us.
Deletion
You may request deletion of your account and associated personal data at any time. Business/operational data associated with your organization will also be deleted subject to legal hold obligations.
Opt-out of marketing
Every marketing email contains an unsubscribe link. Transactional emails (receipts, security alerts) cannot be opted out of while your account is active.
Push notifications and SMS
You can disable push notifications in your device settings or in YieldAI Settings → Notifications at any time.
9. California residents (CCPA / CPRA)
California residents have the right to know what personal information we collect, the right to delete it, the right to opt out of its sale (we do not sell personal information), and the right to non-discrimination for exercising these rights. To exercise your rights, contact hello@getyieldai.com with the subject line "California Privacy Request."
10. International transfers
YieldAI is operated from the United States. If you access YieldAI from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your home country. By using YieldAI you consent to this transfer. EU/UK users: we rely on Standard Contractual Clauses where applicable.
11. Children
YieldAI is a business software platform not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact hello@getyieldai.com and we will delete it promptly.
12. Do Not Track / cross-app tracking
We do not track users across third-party apps or websites for advertising purposes. We do not respond to browser Do Not Track signals because we do not engage in the kind of tracking those signals are designed to prevent. Any analytics we collect are used solely to operate and improve YieldAI.
13. Changes to this policy
We may update this Privacy Policy when the service materially changes how it handles data. We will notify you by updating the "Last updated" date above and, for material changes, by sending an email or displaying a prominent in-product notice at least 30 days before the change takes effect.
14. Contact us
Questions, requests, or concerns about this Privacy Policy? Email us at hello@getyieldai.com. We read every message and aim to respond within 2 business days.