SECURITY AT YIELD
Your business data stays yours.
Last reviewed October 29, 2026
You own your business information
Your business keeps ownership of the information you upload. Yield uses it to provide the service; we do not sell business records or use them for advertising. You decide which teammates can use your business workspace and what information to upload.
Your business stays separate
Yield checks a person’s business membership and role before allowing access to business data. One business’s members cannot use Yield to open another business’s workspace. Each teammate’s chat and personal preferences are private to that teammate in the app. Authorized operators may access service information when needed to run, support, or protect Yield.
Protection built into the service
We use encrypted connections when information moves between your browser and Yield, and encrypt stored business files. Access is limited by business membership and service permissions. Data analysis runs in a separate, restricted process with limits on the data and results it can handle. These safeguards lower risk; no online service can promise that risk is zero.
What the AI service receives
When you ask a question, Yield sends OpenAI the question and relevant conversation context, business guidance, data descriptions, and limited query results needed to answer. Yield does not send the original uploaded CSV or Parquet files. A limited result can still contain individual business records. We request that OpenAI not store response state and have not enabled optional model-training or evaluation sharing for our project. Provider safety and abuse-monitoring retention is separate; see the privacy notice for details. AI answers can be wrong, so check important decisions against your own records.
You can remove your data
You can delete datasets, clear your chat, and reset your private preferences in the app. Yield keeps up to five successful versions of each dataset so you can restore an earlier one; chat history and private preferences remain until you clear or reset them. You can also request account or business deletion through support. We verify requests and complete valid requests within 30 days. Cleanup waits for active uploads and data analysis to finish, and limited operational records may remain for their stated retention period. We do not claim instant or zero-retention deletion.
Connecting other AI applications
When enabled, Yield MCP uses sign-in and explicit permission rather than asking members to copy access keys. Business owners approve members, each connection has limited read-only access, and you can disconnect it in Yield. Removing membership, suspending business MCP access or revoking the connection prevents subsequent requests. The external application receives the results you authorize; use an application whose privacy and data handling meet your business requirements. Disconnecting does not erase copies already received by that application.
How we review security
We review access controls, data handling, software dependencies, and the services we rely on. We use synthetic business data for security checks. This internal work is not an independent security audit or a SOC 2, ISO, or other certification. Do not upload passwords, payment-card details, government IDs, health records, or other highly sensitive information.
Tell us about a concern
Email support@yieldintelligencelabs.com with a short description, when it happened, and the screen or request identifier if available. Do not send passwords, access keys, or customer data. Please do not access another business’s information or test in ways that disrupt service; we’ll work with you on a safe investigation.