Privacy Policy

1. Who we are

Yardstick is operated by Yardstick AI, Inc., registered in the State of Delaware, USA (the “Company”, “we”, “us”). We are the controller of personal data processed through the Service. For any privacy question, contact hello@yardstick.fi.

2. Information we collect

• Account information: your name, email address, organization, and account settings.
• Billing information: processed by our payment provider, Stripe. We do not see or store your full card details; we receive transaction and subscription metadata.
• Measurement data: the agent activity you ask us to measure, including API and tool logs, and the data sources you connect.
• Usage data: log data, device and browser information, and product analytics about how you use the Service.
• Communications: messages you send us and your support history.
• Waitlist information: if you join the waitlist, your email and any optional details you choose to share (company, the AI tools you use, approximate monthly AI spend, and your role), used to prioritize and tailor early access.

3. How we use your data

• to provide, operate, secure, and improve the Service;
• to compute scores, metrics, reports, and insights;
• to process payments, manage subscriptions, and send service and billing notices;
• to provide support and respond to your requests;
• to detect, prevent, and address fraud, abuse, and security issues;
• to comply with legal obligations.

4. Legal bases

Where the GDPR or similar laws apply, we process personal data to perform our contract with you, on the basis of our legitimate interests in operating and improving the Service, with your consent (for example, optional analytics), and to comply with legal obligations.

5. Service providers and sharing

We do not sell your personal data. We share it with vetted providers who process it on our behalf, under contract, only to deliver the Service:

• Stripe: payments and billing (card processing, invoicing, tax via Stripe Tax, fraud screening).
• Railway: application hosting and infrastructure.
• Cloudflare: content delivery, DNS, and security.
• Resend: email delivery and waitlist contact storage, including the optional details you provide.
• AI model providers: to generate insights from your metrics; only the data needed for the requested insight is sent.
• PostHog: product analytics and error monitoring, hosted in the EU. It loads only after you accept analytics cookies, and is configured to create user profiles only for identified visitors.

We may also disclose data where required by law, or to protect our rights, users, or the public.

6. Data retention

We keep account data for as long as your account is active. Detailed measurement history is retained according to your plan’s retention window (for example, 90 days up to two years). Aggregate scores and reports may be retained for product history per your plan. We delete or anonymize personal data when it is no longer needed, subject to legal retention requirements.

7. Security

We use technical and organizational measures designed to protect your data, including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

8. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect transfers.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object or withdraw consent. To exercise these rights, email hello@yardstick.fi. You may also have the right to complain to your local data-protection authority.

10. Cookies and analytics

We use essential cookies to run the Service. With your consent, we load PostHog (EU-hosted) for product analytics and error monitoring; it stores nothing for analytics until you accept. You can change your choice anytime via the “Cookie preferences” link in the footer, or through your browser settings. Disabling essential cookies may affect functionality.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

12. Changes

We may update this policy from time to time. We will post the new version here and update the date above; for material changes we will take reasonable steps to notify you.

13. Contact

Questions or requests? Email hello@yardstick.fi.