Privacy Policy

Last updated: August 2, 2026

YieldPeer is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information in compliance with GDPR and French data protection law.

1. Data Controller

YieldPeer
Micro-entreprise
SIRET: 512 094 608 00035
Address: 64 rue de l'Égalité, 92130 Issy-les-Moulineaux, France
Email: yieldpeer@gmail.com

2. Data We Collect

2.1 Account Information

  • Email address
  • Newsletter niche/topic
  • Subscriber count
  • Substack profile information (if you connect your account)

2.2 Usage Data

  • Pages visited and features used
  • Match interactions and swap activity
  • Device and browser information
  • IP address (anonymized after 30 days)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store credit card details. Stripe's privacy policy applies to payment data.

3. How We Use Your Data

  • Matching: To connect you with complementary newsletters
  • Analytics: To provide insights on swap performance
  • Communication: To send match notifications and service updates
  • Billing: To process Pro subscriptions
  • Improvement: To enhance platform features and user experience

4. Legal Basis (GDPR)

  • Contract performance: Processing data to deliver our service
  • Legitimate interest: Analytics and platform improvement
  • Consent: Optional marketing communications (you can opt out anytime)

5. Data Sharing

We do not sell your data. We share data only with:

  • Matched partners: Basic profile info (niche, subscriber count) to facilitate swaps
  • Service providers: Stripe (payments), PostHog (analytics), Anthropic (chat support)
  • Legal requirements: If required by law or to protect rights/safety

6. Data Retention

  • Active accounts: Data retained while account is active
  • Deleted accounts: Personal data deleted within 30 days (anonymized analytics may be retained)
  • Billing records: Retained for 10 years per French tax law

7. Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Export your data in machine-readable format
  • Object: Opt out of certain processing (e.g., marketing emails)
  • Restrict: Limit how we use your data
  • Withdraw consent: Revoke consent for optional processing

To exercise these rights, email yieldpeer@gmail.com. We will respond within 30 days.

8. Cookies & Tracking

We use cookies for:

  • Essential: Session management and security (no consent required)
  • Analytics: PostHog tracks usage to improve the platform (consent-based)

You can manage cookie preferences via your browser settings or our cookie banner.

9. Data Security

We implement industry-standard security measures:

  • HTTPS encryption for data in transit
  • Encrypted storage for sensitive data
  • Regular security audits
  • Access controls and authentication

10. International Transfers

Data may be processed in the US by our service providers (Stripe, Anthropic, PostHog). These transfers comply with GDPR via Standard Contractual Clauses and adequacy decisions.

11. Children's Privacy

YieldPeer is not intended for users under 16. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this policy with 30 days notice via email. Continued use constitutes acceptance.

13. Contact & Complaints

For privacy questions or to exercise your rights, contact:
yieldpeer@gmail.com

You also have the right to lodge a complaint with the French data protection authority (CNIL):
www.cnil.fr