Privacy policy

The data controller is YIELD SAS, [registered office address to be completed]. For any question about your data, you can write to [email protected].

We collect:

— Identity and contact data: surname, first name, email address, company name.
— Bank connection data: balance, IBAN and account-holder information, transmitted through our licensed partner Bridge. We never collect your online banking credentials.
— Usage data: treasury settings, history of placements and withdrawals made through the Service.
— Technical data: connection logs required for the security of the Service.

When you use our public calculator (“Benchmark trésorerie”) and ask for the report to be emailed to you, we collect: your email address and, if you provide them, your company name and telephone number, together with the sector, revenue band and amounts you entered, and where applicable the campaign your visit came from (UTM parameters).

This data is processed, on the basis of your consent (tick box), in order to: (i) send you the report you asked for; (ii) contact you about YIELD treasury services. You can withdraw that consent at any time by writing to [email protected] — every marketing email also carries an unsubscribe option. This data is kept for a maximum of 3 years after your last contact with YIELD, then deleted. It is never sold or passed to third parties for marketing purposes.

Your data is processed in order to: (i) provide the Service and perform the contract between us (performance of a contract); (ii) ensure security and prevent fraud (legitimate interest); (iii) comply with our legal and regulatory obligations (legal obligation); (iv) send you communications relating to the Service (performance of a contract or consent).

Your data is accessible to our authorised teams and to our processors, strictly to the extent necessary to provide the Service:

— Bridge (bank account aggregation, licensed under PSD2/DSP2);
— Spiko and the partners responsible for the investment vehicle, in particular the management company and the custodian;
— Resend (sending of transactional emails);
— our infrastructure hosting provider.

These providers are bound by contractual confidentiality and security obligations. Your data is never sold to third parties.

Your data is kept for the duration of the contractual relationship, then archived in accordance with the applicable statutory periods (in particular accounting and anti-money-laundering requirements), before being deleted or anonymised.

We implement appropriate technical and organisational measures to protect your data: encryption in transit, access control and minimisation of the data collected. The bank connection relies on the secure PSD2 (DSP2) framework.

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability in respect of your data, as well as the right to set instructions on what happens to it after your death. You can exercise these rights by writing to [email protected]. You also have the right to lodge a complaint with the CNIL (the French data protection authority, www.cnil.fr).

The Service uses only the cookies strictly necessary for it to work (for example keeping your session open). No advertising cookie is set without your consent.

This policy may be updated. In the event of a substantial change, you will be informed by any appropriate means.