DATA & PRIVACY
Understand where your data goes.
A factual overview of the application data flows, including optional services. Confirm deployment-specific terms with the operator before sharing production data.
Data stored by the application
Account and workspace details, membership and invitations, encrypted AWS credentials, collected billing and resource snapshots, settings, decisions, chat messages, reports and submitted inquiries. Passwords are stored as salted scrypt hashes.
Services involved
- AWS supplies the billing and resource evidence permitted by your connection.
- Optional AI sends the relevant workspace evidence and prompts to the configured OpenAI service. Core financial calculations do not require AI.
- Configured transactional email uses Amazon SES for account, invitation and notification messages.
- Configured subscriptions use Stripe-hosted payment flows. Card details are entered with Stripe rather than stored by CloudYield.
Browser storage
The application uses a session cookie and stores preferences such as language, theme and navigation state in the browser. Notification read state may also be stored locally.
Retention, access and removal
Revoking AWS access stops future collection; it does not erase previously stored snapshots, decisions, reports or backups. Hosting location, retention periods and handling of access, correction or deletion requests must be confirmed with the operator. This page does not promise an automatic deletion deadline.
Contact the team about data handling →Give the next decision a shared record.
Read-only AWS access. Optional AI. Clear ownership.