Privacy · data boundary
CapYield uses your information to maintain your account, save your investment records and show relevant updates. Here is what we collect, what stays private and the choices you have. This is a current product notice and will be reviewed as CapYield evolves.
Information used to manage your membership
Your email and profile details help CapYield recognize your account. Your date of birth supports signup eligibility and a private birthday greeting. A phone number is optional, including for Google accounts; it is not verified by SMS or used for account recovery. Supabase handles authentication and available verification methods.
Convenience settings in your browser
Your theme choice and a small returning-visit setting help the interface remember your preferences. These browser settings are separate from your saved portfolio. Your sign-in session uses Supabase authentication cookies.
Saved under your account
Your portfolio, watchlist and goals are saved to your account. CapYield uses this information to explain potentially relevant market developments. It does not hold your money, place trades, collect payment details or ask for brokerage passwords. Market observations include source and freshness information where available, and unavailable prices are not invented.
Data boundary: CapYield is an information and portfolio-recording tool, not a brokerage. Users must be 18 or older, and dates of birth are kept private for eligibility checks and birthday greetings.
Visible only to the CapYield owner
While you are signed in and actively using a visible CapYield tab, a periodic heartbeat records your last activity time and an approximate session duration. CapYield also records broad feature categories such as opening a portfolio, watchlist, goals, Market Brief or disclosure, completing an import, and viewing an AI explanation. These records help the owner understand beta usage. They contain no portfolio values, holdings, uploaded files, AI questions, passwords, or OTPs.
Available in Settings
You can request account deletion in Settings and cancel during the existing seven-day grace period. The scheduled deletion process handles the account and associated records. The frontend rebuild does not reset or migrate your saved data.