Last updated 13 October 2026.
This policy explains what personal information Datayield ("we", "us") collects through datayield.ai, the seller and buyer portals and our emails, and what we do with it. Questions go to hello@datayield.ai.
What this policy covers
It covers people who visit the site, use the estimate, apply, sign in, or hear from us.
It doesn't cover the business records a company licenses through us. Those are governed by our signed agreement with that company. Personal details are removed from those records on the company's own computer before they reach us, and we review every dataset before a buyer sees it. How data is protected explains the process.
What we collect
- What you tell us. Your name, work email, company and role, and your answers about your industry, systems, years of records, size and contract rights.
- Account details. Your email, the organization you belong to, when you signed in, and the API keys you create. When you sign an agreement, we keep your typed name, email, the time and your IP address as the signature record.
- Business contact details from other sources. To reach companies that may want to sell or buy data, we use business contact information from commercial data providers, including Apollo and providers reached through Treg, and from public professional profiles. This is limited to work details such as name, job title, company and work email.
- How the estimate is used. When someone starts or finishes the estimate, we record that it happened and which industry was selected. We don't attach personal details to it.
- Emails. Messages you send us and replies to our emails.
Cookies
We use only the cookies needed to keep you signed in. We don't use advertising or analytics cookies.
How we use it
- To answer you and send the estimate you asked for.
- To run a deal: rights review, samples, agreements, weekly updates and payments.
- To contact businesses that may want to sell or buy data. Every outreach email says how to opt out, and we stop when you ask.
- To keep the service secure and meet our legal obligations.
If you're in the UK or EU, we rely on our legitimate interests in running and growing the business, on performing a contract with you, and on your consent where the law requires it.
Who we share it with
We share personal information only with the service providers that run Datayield for us, under contracts that limit their use of it:
- Vercel (hosting) and Supabase (database and sign-in)
- Resend (email) and Stripe (invoices and payouts)
- Apollo and Treg (business contact details and outreach)
- Anthropic (drafting emails; we send business context, never licensed records) and Perplexity (research on companies)
We don't give a seller's contact details to buyers. Buyers see a seller described in general terms, such as "a mid-size bookkeeping firm", unless the seller agrees otherwise. We don't sell the personal information of people who contact us, and we don't share it for advertising.
How long we keep it
- Leads and outreach contacts: 24 months after our last contact, unless you become a customer.
- Accounts: while the account is open, then as long as the law requires.
- Signature records and the agreements they relate to: for the life of the agreement and six years after.
Your choices and rights
You can ask to see, correct or delete your personal information, or to stop hearing from us. Email hello@datayield.ai and we'll reply within 30 days.
If you're in California, you have the right to know what we collect, to delete it, to correct it, and to opt out of its sale or sharing. We don't sell or share it for cross-context advertising. We won't treat you differently for using these rights.
If you're in the UK or EU, you can also object to our use of your information or ask us to limit it, and you can complain to your data protection authority (in the UK, the ICO).
Where it's stored
Our providers store data in the United States. When we move personal information from the UK or EU, we rely on the legal safeguards the law provides, such as standard contractual clauses.
Security
Data is encrypted in transit and at rest. Access is limited to the people who need it. Raw sample files uploaded for a readiness report are deleted once they've been checked; we keep only the cleaned output and the report.
Children
Datayield is for businesses. It isn't meant for anyone under 18.
Changes
When we change this policy, we update the date at the top. If a change matters, we'll tell account holders by email.