Privacy Policy

1. Information We Collect

Account data: When you sign up, we collect your email address and, if you subscribe to a paid plan, your billing information is processed by Stripe. Stripe is PCI-DSS Level 1 certified; card details are entered into Stripe's hosted checkout and never touch YieldVista servers, and we do not store credit card numbers.

Field data: If you save fields on a paid plan, we store the polygon geometry you draw or import, the acreage we compute from it, the crop type you select, and the field name you provide. We use this only to deliver per-field crop-health, weather, and yield insights to your account. We do not sell, share, or license your field data to third parties.

Usage data: We collect basic analytics including pages visited, features used, and API request counts to improve the Service. This data is aggregated and not sold to third parties.

Waitlist: If you join our waitlist, we store your email address and the source of signup.

2. How We Use Your Information

• Provide and maintain the Service
• Process subscriptions and billing via Stripe
• Send alert notifications you configure
• Communicate product updates (you can opt out)
• Monitor and prevent abuse of rate limits and API access

3. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting
• Stripe — payment processing
• Vercel — frontend hosting and analytics
• Sentry — error monitoring; receives error events and request metadata (URL paths with UUIDs scrubbed, no PII). Not used for advertising.
• MapTiler — map tile hosting (subject to MapTiler's privacy policy)
• MapLibre GL — open-source map rendering library (no data collection)
• Resend — transactional and newsletter email delivery

Each service has its own privacy policy. We encourage you to review them.

4. Data Retention

Account data is retained while your account is active. If you delete your account, it enters a 90-day cooldown during which sign-in is blocked and your fields and alerts are no longer processed; you may cancel the deletion at any time during the cooldown by contacting support. After 90 days your account, saved fields, alert subscriptions, and personal data are permanently removed. Aggregated, anonymized usage statistics may be retained indefinitely.

5. Cookies

We use essential cookies only — Supabase session tokens for authentication. We do not use third-party advertising, tracking, or analytics cookies, and we do not participate in cross-site behavioral advertising networks.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us.

YieldVista is a US-only service. We do not actively market to, or establish residence in, the EU or EEA, and we do not maintain a GDPR Article 27 representative. If you are an EU/EEA resident who has chosen to use the Service, we will honor GDPR-style access, deletion, and correction requests on a best-effort basis.

7. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, and disclose
• Right to delete the personal information we hold about you, subject to the retention rules in Section 4
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is necessary
• Right to limit use of sensitive personal information — we do not collect or process the categories of sensitive personal information defined under CPRA (Social Security number, precise geolocation, biometric identifiers, racial or ethnic origin, health information, etc.), so no limit-use request is necessary
• Right to non-discrimination for exercising any of these rights

Categories of personal information we collect (per CCPA): identifiers (email address), commercial information (subscription status, billing handled by Stripe), internet/network activity (usage analytics), geolocation (field polygons you provide), and inferences (yield outlook outputs derived from your field geometry).

We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising as those terms are defined under CPRA. We do not have a "Do Not Sell or Share My Personal Information" link because there is nothing to opt out of.

To exercise any of these rights, email support@yieldvista.ag. We will respond within 45 days as required by law.

8. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, and secure authentication flows. No system is perfectly secure — we cannot guarantee absolute security of your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email.

10. Contact

Privacy questions? Email support@yieldvista.ag.