Yield X: CCPA Policy

This California Consumer Privacy Act Compliance Policy (“Policy”) explains how YieldX Foundation (“YieldX,” “we,” “our,” or “us”) collects, uses, discloses, and protects personal information of California residents (“Consumers”) under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

This Policy supplements the YieldX Privacy Policy and applies solely to California residents whose personal information is subject to the CCPA/CPRA.

1. Definitions Under CCPA/CPRA

For the purposes of this Policy:

Personal Information means information that identifies, relates to, describes, or could reasonably be linked to a California resident or household.
Sensitive Personal Information includes data such as government IDs, login credentials, financial account numbers, precise geolocation, racial or ethnic origin, or health information.
Sale and Sharing refer to disclosures of data for monetary or other valuable consideration, including data used for cross-context behavioral advertising.

YieldX does not sell or share personal information for advertising purposes.

2. Categories of Personal Information We Collect

YieldX may collect the following categories of personal information:

CategoryExamplesSourcePurposeIdentifiersName, email, mailing address, phone numberDirect from userAccount creation, communication, donation receiptsCommercial InformationDonation history, transaction recordsDirect from userDonation processing, tax receiptsFinancial InformationPartial payment details (processed by third-party payment processors)Direct from userDonation processingInternet or Usage DataIP address, browser type, device informationAutomated via cookies/web beaconsPlatform analytics, securityCompliance & Verification DataIdentity verification (KYC/AML as required)Direct from user or compliance providersRegulatory complianceLimited Blockchain Interaction DataPublic wallet addresses (if using tokenized components)Direct from userParticipation in blockchain elements

Sensitive data is only collected where legally required (e.g., anti-fraud, AML/KYC).

3. How We Use Personal Information

YieldX uses personal information for the following lawful purposes:

To process and record charitable donations
To issue tax receipts where applicable
To maintain donor accounts and profiles
To comply with nonprofit reporting, anti-fraud, and AML requirements
To operate, improve, and secure the Platform
To communicate updates, confirmations, and donor-impact reports
To support optional blockchain-based donor features (if applicable)

We do not use personal information to build behavioral or commercial advertising profiles.

4. Disclosure of Personal Information

YieldX may disclose personal information to:

Payment processors
Regulated compliance vendors (AML/KYC providers)
IT hosting and cybersecurity partners
Government agencies where legally required
Nonprofit reporting entities or auditors

All third parties are contractually prohibited from selling, redistributing, or using personal information beyond the agreed purpose.

YieldX does not sell or share personal information for targeted advertising.

5. Your Rights Under CCPA/CPRA

California residents have the following rights:

Right to Know

You may request details regarding the personal information YieldX has collected, disclosed, or stored about you.

Right to Access and Data Portability

You may request a copy of your personal information in a machine-readable format.

Right to Correction

You may request corrections to inaccurate personal information.

Right to Deletion

You may request that we delete your personal data, subject to legal exemptions (e.g., required financial reporting, tax compliance).

Right to Restrict Use of Sensitive Personal Information

You may request limited use of any sensitive personal information collected.

Right to Opt-Out of Sale/Sharing

YieldX does not sell or share personal information for advertising purposes.

Right to No Retaliation

YieldX will not deny service, change pricing, or discriminate against Consumers for exercising these rights.

6. Exercising Your Rights

You may submit requests by:

📧 Email: privacy@yield-x.org

We may require:

Proof of identity
Authorization for requests submitted on behalf of another person

Requests will be handled within 45 days, with a possible extension to 90 days where permitted.

7. Data Retention

Personal information is retained only for as long as necessary to:

Fulfill donation or compliance obligations
Maintain financial and audit records
Support legal, operational, and regulatory requirements

Blockchain-related records may be permanent due to the immutable nature of distributed ledger technology.

8. Minors

YieldX does not knowingly collect personal information from individuals under 18 years of age.
If information is mistakenly collected, Users may request removal under applicable law.

9. Policy Updates

We may update this Policy from time to time. The “Last Updated” date reflects the most recent version.

Continued use of the Platform constitutes acceptance of any revisions.

10. Contact Us

If you have questions about this Policy or your rights under CCPA, contact:

YieldX Foundation — Data Protection Officer
Email: privacy@yield-x.org
Address: 444, N Michigan Avenue, Chicago, 60611

501(c)(3) Status – Application in Progress

Yield-X Foundation has officially submitted its application for recognition as a tax-exempt charitable organization under Section 501(c)(3) of the Internal Revenue Code. Once approved, donations made to Yield-X Foundation will be tax-deductible to the fullest extent permitted by law. In accordance with IRS guidelines, all contributions received during the review period will qualify retroactively if our application is approved.

We will update this statement as soon as the determination letter is received.