Privacy

Who we are

Yield Theorem ("we", "us") is a GTM engineering business based in Buenos Aires, Argentina. We decide how the personal data described here is used. Write to alex@yieldtheorem.com about anything on this page.

What we collect and why

• The growth report forms (on our homepage and on /inbox-health): your email address, your company website or domain, how you heard about us, the page you sent it from and any UTM tags or Google click id (gclid) in its address. We use them to send what you asked for and to follow up about it, and, when you send either growth report form after accepting analytics cookies, your “how you heard about us” answer, your company’s domain, the page and the ad tags in its address go to PostHog so we can see which channels and ads bring requests. If you send either form after accepting advertising cookies, Google Ads can record that a growth report was requested; we do not send it your email address or answers.
• The free inbox health check: the domain you type. We read its public DNS records and show you the result. We keep no copy of the domain or the result. If you have accepted advertising cookies, Google Ads can record that a check was run, and if you have accepted analytics cookies, PostHog records that a check was run and the ad tags in the page address; neither is sent the domain or the result, and PostHog makes no session recording on that page.
• Abuse protection: a salted, one-way hash of your IP address each time you send a form or run a check, so we can limit how many requests one address makes in 15 minutes. We store the hash, not the IP address.
• Analytics on our homepage: HubSpot’s tracking cookie, PostHog (pages viewed and left, clicks and rage clicks on links and buttons, session recordings with every form field masked, and, where we turn them on, heatmaps, dead clicks and page speed) and RB2B, which can match a visit from the United States to a person’s public business profile. The homepage is set up to load these only after you accept analytics cookies in HubSpot’s banner, and Google Ads’ tag (which records your visit, the ad that brought you if any, and growth report requests, with ad personalisation turned off) only after you accept advertising cookies; HubSpot’s own script loads to show the banner. On /inbox-health, HubSpot’s script loads the same way, Google Ads’ tag (which records your visit, the ad that brought you if any, checks run and growth report requests, with ad personalisation turned off) loads only after you accept advertising cookies, and PostHog (pages viewed and left, clicks on links and buttons, the two events above and, where we turn them on, heatmaps, dead clicks and page speed, with no session recording on that page, so the domain you check and your result are not recorded) loads only after you accept analytics cookies; that page loads no RB2B. This page loads no analytics.
• Business outreach: if we contact you about our services, we use your name, role, company and business contact details from public sources and B2B data providers, and we keep a record of each message and reply. We do this because we believe our work is relevant to your role. Reply "stop" or write to us and we will not contact you again.

Who processes it for us

• Vercel hosts this site.
• Supabase stores form submissions and the request hashes (in the EU).
• HubSpot is our CRM and provides the tracking cookie and the cookie banner the homepage and /inbox-health are set up to show.
• Slack notifies us when a form arrives.
• n8n and HetrixTools run the growth report’s blocklist lookup on the domain you send us. We email you the result; we don’t publish it.
• PostHog and RB2B, set up to load only after you accept analytics cookies.
• Google Ads, set up to load only after you accept advertising cookies, so we can see which of our ads lead to checks and growth report requests.
• Our email, outreach and data tools, for business outreach.

Some of these providers store data in the United States. We do not sell personal data, and we do not share it with anyone else unless the law requires it.

How long we keep it

Form submissions stay in our CRM, and outreach records in our outreach log, while we are talking with you or your company. We delete them when you ask. We do not yet delete the request hashes automatically; that clean-up is on our list.

Your choices and rights

You can ask us what we hold about you, ask us to correct or delete it, or tell us to stop contacting you. Write to alex@yieldtheorem.com and we will answer within 30 days. To change a cookie choice, clear this site’s cookies in your browser.

If you are in Argentina, the data protection authority is the Agencia de Acceso a la Información Pública (Law 25,326). Elsewhere, you can complain to your local data protection authority.

Children

This site and our services are for businesses. We do not knowingly collect data from anyone under 18.

Changes

We update this page when what we collect or who processes it changes. Last updated 3 Nov 2026.