Transparency

YieldCompanion reads public data, with no login: the Earn pages of exchanges, and DefiLlama for DeFi protocols. Each source is refreshed on its own cycle (1 to 24 hours). No user API keys, no purchased data, no private data deal with any venue being rated.

• The highest published rate is the best tier a venue advertises, usually only for the first part of a deposit.
• What you earn on an amount is the average weighted by each tier and cap, with coins converted at market price. It is the number compared across the site. The part above a per-user cap counts as 0%.
• Every rate is an APR (simple yearly rate). Venues publishing an APY (compounded), DeFi and some exchanges, are converted to the equivalent APR assuming daily compounding, to compare like with like.
• Staking rates are compared after the venue’s commission where how the venue publishes it is confirmed; venues publishing before the fee are converted to after. Where it is not confirmed, the published rate is shown as is.
• Offers only for new users, first deposits or VIPs are never suggested, and are listed after the products open to everyone. The exception: a level anyone can buy with a monthly subscription (such as Crypto.com Level Up), once the price is checked on the venue’s own page.
• Net rate: when a rate needs a monthly subscription, choosing compares what is left after twelve months of the fee for your exact amount; the card shows the fee and the rate after it. A subscription costing more than the interest is not an option. A subscription whose price is not checked keeps the product out of the suggestions. A required holding of the venue’s own token cannot be priced (the token’s price moves) and is listed in the conditions.
• Rate history is kept for good, never deleted. Since YieldCompanion started, each change records the collection that saw it (the collection log is kept 30 days); earlier history was imported from data collected before, from the same public sources.

The published rate and the rate for an amount, averaged by week over the last 12 weeks, are in a CSV file free to reuse under CC BY 4.0, with attribution. Columns, method and how to credit: Open data.

Tiers A–D come from published rules applied to sourced facts; nobody types them in. Admins only edit facts, and every edit to a tier or a fact is recorded (the daily automatic TVL update is not). Rules, thresholds and the methodology changelog: How tiers work.

The country in "I am in" comes from your IP through Cloudflare (YieldCompanion only receives the country code and keeps no IP for this); you can change it, and your choice always wins. The products of exchanges that do not serve your country, or are banned there, are not listed to you (their profiles stay readable for reference); unlicensed ones are still shown, with a label. Each exchange’s status in each country: Legal by country. This is reference information, not legal advice.

Referral links (paying a commission) are only used when every condition holds: the country you picked or your IP’s country allows them, the exchange is licensed there, and it is not Vietnam (neither the chosen country nor the IP). When used, the button always says "referral link". In Vietnam, YieldCompanion uses no referral links.

YieldCompanion has no revenue yet. The only source allowed is referral links where the law allows them (above). A commission never changes the order, the rates shown or a risk tier: a referral link only changes where the button goes. No venue pays to be rated or ranked higher.

• It never stores your API keys, seed or passwords, and never trades for you.
• It does not sell rankings, does not sell rating reports to those being rated, and takes no money or perks from organisations it rates.
• No display ads, no trading-fee rebates (backcom).
• It does not compare or promote crypto loans (leverage, liquidation).
• It does not compare with bank savings rates, and never tells you that you "should" deposit or switch anywhere: only what a switch gains and costs.

Rates and risk tiers are not produced by AI: rates are read straight from the source, tiers come from rules over the facts. AI (a third-party language model) takes part in the tasks below, with public data only; no personal data is given to AI, and an admin can switch each task off.

• Translating into English the text of risk profiles, legal notes and incident news. Translations are checked automatically (every number kept, no link added); a sentence the model is unsure of waits for an admin.
• Scanning incident news (hacks, halted withdrawals, depegs, bans, fines) about the listed exchanges, coins and protocols. An item is shown as "found automatically, not yet reviewed" until an admin reads it.
• Reviewing risk profiles and legal status: the model proposes facts with their sources. Proposals wait for an admin; if an admin turns on automatic updates, only changes that raise the risk (or tighten the legal status) from a trusted source apply at once. Tiers still come from the rules, never chosen by AI.
• Drafting the weekly newsletter's intro from the issue's own figures, naming no venue. The newsletter is sent only when an admin has read it and presses send; an intro drafted with AI is labelled in the newsletter.

When another task involving AI is added, this page says so first, along with who reviews it.

Using YieldCompanion needs no account. Cookies on the public pages only hold the country you picked, the "Licensed only" choice, the language, and one yc_stage cookie (one year) that remembers where you are (learning, choosing, tracking), the step you reached, and the last coin and amount you looked at, so the home page can offer to continue; it is sent with each page load, but the server neither reads nor keeps it, and it is tied to no identity. Deposits you draft in the book before signing in stay in the browser’s storage (localStorage). To show today’s rates the browser sends the product ids and rounded amounts; the server keeps nothing. When you sign in and press “Move into the book”, they are added like deposits entered by hand; an exact amount is kept only with your separate consent. No advertising or tracking cookies. The site counts a few actions as daily totals: the /start steps read, the coins and amount ranges looked at, the venues clicked through to, the bot commands used, the campaign (utm_campaign) of the link that brought you; the counts carry no id, cookie or IP address, so they lead back to no one.

Infrastructure providers: Cloudflare (routes and protects every request, so it sees your IP and technical browser details), fly.io (runs the website), Supabase (the database) and Telegram (sign-in, messages), with servers outside Vietnam. YieldCompanion does not sell or share personal data.

The deposit book (optional, sign-in with Telegram): YieldCompanion keeps your Telegram chat id, your language, the date the book was created, your last visit, your sign-in sessions (their own cookie, 30 days, with the browser's country) and the deposits you enter: venue, product, amount band (one of three), date, the rate when added; the exact amount only with separate consent. The exact notice you agreed to is kept as evidence. Withdrawn deposits are kept 12 months, then deleted; unfinished sign-ins are deleted after a day; a book not opened for 24 months is deleted. Delete the book on the Account page: all of the above is deleted at once, only a record that a consent was given and withdrawn remains, not linked to you. No AI reads your book.

Against abuse, IP addresses are hashed one way with a secret key before being used to limit sign-ins and form posts, and are deleted after about a day.

Telegram messages about the book (separate consent): an incident at a deposit’s venue is sent at once; a rate drop, a product gone, a maturity or a promo ending soon go into at most one digest a day. Nothing is ever sent from a collection that just failed. Sent messages (with your Telegram id) are kept 30 days, messages that could not go out within 2 days are dropped; each deposit’s events are kept 90 days, then only monthly counts remain, linked to no one. After each sign-in the bot tells you. Blocking the bot turns messages off.

The weekly newsletter (separate consent, through the Telegram bot): your Telegram chat id, language and consent are kept; stop it with /unweekly. As with the book, an account unused for 24 months is deleted, newsletter subscription included.

To see, correct or delete the data about you: delete the book on the Account page, or send a request through the channel on the Feedback page.

YieldCompanion is an information tool, not a financial institution: it takes no deposits, does no brokerage and gives no investment advice. Numbers can be late or wrong when sources change. Digital assets can lose value or be lost entirely; you assess the risk yourself and are responsible for following the rules where you live.