High Yield
Privacy notice
How High Yield handles account, community, contact and newsletter information.
Operator, audience and contact
MOMENTUM FI LLC, based in Pennsylvania, operates High Yield. Community accounts are for adults aged 18 and older worldwide. For privacy questions or requests, use our contact form. Public registration is currently closed.
Information and purposes
Reader accounts use an email address, a public display name, an opaque connection to the community, authentication and security records, and the posts and operational metadata needed to operate the service. These support sign-in, verification, security, discussion, moderation and requests. Public posts and display names are visible to others; email addresses and authentication records are restricted. Do not submit bank account numbers, identity documents or private financial records.
The contact form asks for your email address, the reason for contacting us and your message. You may also provide your name and a page or discussion link. We use these details to respond to your request, investigate the issue and verify account or privacy requests where necessary. Sending a message does not subscribe you to the newsletter. Do not include passwords, security codes, bank account numbers, identity documents or private financial records.
Services and newsletter choices
HYSA manages reader sign-in and its connection to the Discourse community. DigitalOcean hosts the application and its storage. Postmark handles transactional mail. Kit independently manages newsletter confirmation, preferences and suppression. A reader account does not subscribe you to the newsletter. Deleting a reader account does not silently change separate newsletter consent; tell us if you also want newsletter action, or use the unsubscribe link.
Retention and deletion
Unverified registrations expire after seven days. After an authorized deletion request, we revoke access immediately and complete deletion or anonymization in our active systems within 30 days. Restricted recovery copies and provider-held records follow the separate limits below. Public discussion may remain after anonymization; identifying text and attachments need separate review. Restricted audit and closed moderation records follow a 12-month retention rule, with a documented limited extension where justified.
Contact-message retention
We delete routine contact messages and replies from active systems within 90 days after the request is resolved, or sooner for a verified deletion request. Necessary account, privacy, moderation and security case records follow their separate retention rules. At resolution, we delete corresponding external Inbox, Sent and Trash copies, avoid exports, and remove necessary temporary local copies within seven days. Archiving is not deletion.
Provider copies and backups
HYSA targets no more than 35 days for the operational database and forum recovery copies available to us. DigitalOcean documents a seven-day managed PostgreSQL backup window; our weekly forum-host backups are configured for 28 days. These are recovery windows, not guarantees of physical deletion of every provider-held copy. Restricted backups are used for recovery, and current deletion and suppression records must be reapplied before access is reopened after a restore.
Email providers have separate retention. Our current Postmark plan retains message content and activity for 45 days before queuing deletion. Minimal bounce and complaint suppression records are maintained separately to prevent unwanted mail. Contact notifications contain an opaque reference and a private administrative link rather than your message text.
Google processes deletion from its backend systems over a period generally around two months, sometimes longer. Encrypted backup copies can remain for up to six months. These are provider-controlled periods, not a promise that every provider copy is erased within 35 days.
DigitalOcean infrastructure records
DigitalOcean processes network requests, including client IP addresses, to deliver and protect the service. DigitalOcean states that App Platform build and deployment logs are retained for 90 days and that runtime and crash logs are not retained. Its documentation describes live runtime and recent crash-log access; the support statement is not a promise that logs are never temporarily available. We do not forward application logs to an external log service.
DigitalOcean has not supplied us with a fixed maximum retention or deletion period for provider-managed ingress, edge, CDN or security request records. We do not promise that those records contain no IP addresses or request information, or that all provider-held copies are erased within our own retention targets. DigitalOcean’s privacy policy describes purpose-based retention for information it controls. Customer content is covered separately by its applicable service terms and Data Processing Agreement, which permit isolated backup copies under automated retention and legally required retention. These provider limits do not remove your privacy rights or our responsibility to handle valid requests.
DigitalOcean Data Processing Agreement ↗
DigitalOcean App Platform log documentation ↗
Cookies, security and requests
Sign-in and security use essential cookies and session records. Use the contact form for access, correction or deletion requests. We verify the requester before disclosing or changing account information. We cannot recall public copies held by other people.
Corrections and error reporting