TerraYield™ Capital ("TerraYield", "we", "us", "our") is a global real estate investment intelligence platform operated by [COMPANY LEGAL NAME]. Our platform is accessible at terrayield.com.

Data Controller: [COMPANY LEGAL NAME]
Contact: privacy@terrayield.com

We collect the following categories of personal data:

• Account data: name, email address, password (hashed, never stored in plaintext)
• Profile data: region, notification preferences, subscription status
• Usage data: pages visited, features used, saved cities, session duration
• Technical data: IP address, browser type, device type, operating system
• Payment data: handled by Stripe — we do not store card details
• Communications: support messages sent to us
• Cookie and consent data: your cookie preferences and consent records

• Account data: contract performance (to provide the service you signed up for)
• Usage and technical data: legitimate interest (to improve and secure the platform)
• Cookie data: consent (where required under the ePrivacy Directive)
• Marketing communications: consent

We share data only with trusted service providers necessary to operate the platform:

• Supabase (database and authentication) — EU hosting, AWS eu-west-1 Ireland
• Vercel (hosting and deployment) — global CDN, EU region primary
• Stripe (payment processing) — for subscription billing
• OpenAI (AI data extraction) — Phase 2 only, data processed under OpenAI's DPA, not used for model training

We do not sell your data. We do not share your data with advertisers.

Your data is stored in the EU (AWS Ireland). Where data is transferred outside the EU (e.g. Vercel CDN, Stripe), this is done under Standard Contractual Clauses or equivalent safeguards.

• Account data: retained for the duration of your account plus 90 days after deletion
• Usage data: retained for 12 months
• Payment records: retained for 7 years (legal obligation)
• Cookie consent records: retained for 13 months

You have the right to: access your data, correct inaccurate data, delete your data, restrict processing, data portability, withdraw consent, and lodge a complaint with your supervisory authority.

To exercise any right, contact: privacy@terrayield.com. We will respond within 30 days.

We implement encryption in transit (TLS), encryption at rest (AES-256), hashed passwords, role-based access control, and audit logging across the platform.

See our Cookie Policy for full details.

We will notify you of material changes by email or prominent notice on the platform.