Privacy Policy

YieldPulse ("we," "us," "our," or "Platform") is committed to protecting your privacy and being transparent about how we collect, use, store, and protect your personal data. This Privacy Policy explains our data practices when you access or use our website at yieldpulse.com (the "Site"), our property investment analysis platform, tools, calculators, and all associated services (collectively, the "Services").

By accessing or using YieldPulse, you acknowledge that you have read, understood, and agree to this Privacy Policy in its entirety. If you do not agree with any part of this Privacy Policy, you must immediately cease all use of our Services.

This Privacy Policy complies with data protection regulations applicable in the United Arab Emirates and international best practices for data privacy and security.

We collect various types of information when you use our Services. The information we collect includes, but is not limited to:

We use the information we collect for the following purposes:

5.1 How Long We Keep Your Data

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained while your account is active and for a reasonable period after deletion to prevent fraud
• Transaction Records: Retained for 7 years for accounting, tax compliance, and legal requirements
• Premium Reports: Retained indefinitely in your account until you delete your account
• Usage Logs: Typically retained for 90-365 days for analytics and security purposes
• Support Communications: Retained for 3 years for quality assurance and dispute resolution

5.2 Account Deletion

You may request deletion of your account at any time through your Profile Settings. Upon deletion:

• Your personal information and saved analyses will be permanently deleted within 30 days
• Transaction records will be retained for legal and accounting compliance (typically 7 years)
• Anonymized usage data may be retained indefinitely
• Backup copies may persist for up to 90 days before being overwritten

WARNING: Account deletion is permanent and irreversible. All your Premium Reports will be lost. We recommend downloading all reports before deletion.

We implement industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols
• Password Security: Passwords are hashed and salted using industry-standard bcrypt algorithms
• Access Controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis
• Infrastructure Security: Data is hosted on secure, SOC 2 compliant cloud infrastructure (Supabase)
• Regular Security Audits: Periodic security assessments and vulnerability testing
• Monitoring: Continuous monitoring for unauthorized access attempts and anomalous activity
• Secure Development: Security best practices integrated into our software development lifecycle

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: You can access and review your personal information in your account dashboard at any time
• Correction: You can update or correct inaccurate information through your Profile Settings
• Deletion: You can request deletion of your account and personal data (subject to legal retention requirements)
• Data Portability: You can download your Premium Reports in PDF format
• Opt-Out of Marketing: You can unsubscribe from promotional emails via the unsubscribe link (transactional emails cannot be disabled)
• Cookie Controls: You can manage cookie preferences through your browser settings (see Section 10)

To exercise these rights, please contact us via our Contact page or email. We will respond to requests within 30 days. Certain rights may be subject to legal limitations or exceptions.

Your information may be transferred to, stored, and processed in countries outside the United Arab Emirates, including countries that may have different data protection laws than your country of residence.

Our service providers (including Supabase, Stripe, and Cloudinary) may store data in multiple geographic regions for redundancy and performance optimization. By using our Services, you consent to the transfer of your information to these locations.

When we transfer personal data internationally, we take appropriate safeguards to ensure your data receives adequate protection, including using service providers that comply with recognized data protection frameworks.

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze usage, and remember your preferences.

We reserve the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email if you have an account
• Display a prominent notice on our Platform

Your continued use of YieldPulse after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree with changes, you must stop using our Services and may delete your account.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Via Contact Form: Use the Contact page on our website
• For Privacy Requests: Include "Privacy Request" in your subject line

We will respond to privacy inquiries within 30 days. For urgent security matters, please clearly mark your communication as urgent.