Back to legal documents

Yocto Capitals — Legal

Device Usage Policy

Last updated June 24, 2026

Security is shared. We harden the platform; you are responsible for the devices you use to reach it. This policy sets out how to access Yocto Capitals safely and what we expect of the devices you sign in from. It is a template and should be reviewed by qualified counsel before launch.

1. Keep your devices secure

Access Yocto Capitals only from devices you trust and control. Keep the operating system and browser up to date, use a screen lock and full-disk encryption where available, run reputable anti-malware, and avoid jailbroken, rooted or otherwise compromised devices.

2. Sessions

Sessions are issued as httpOnly, short-rotation cookies, so a token can’t be read by scripts and a stolen one expires quickly. Always sign out when you finish on a device you don’t exclusively control, and don’t let your browser save your password on a shared machine.

3. Credentials & two-factor authentication

You are responsible for all activity under your account. Use a strong, unique password, enable two-factor authentication (TOTP), and store your backup codes somewhere only you can reach. Never share your password, two-factor codes or backup codes with anyone — including people claiming to be Yocto Capitals support. We will never ask for them.

4. Public & shared devices

Avoid signing in from public or shared computers and untrusted networks. If you must, use a private browsing window, never save credentials, and sign out completely afterwards. Be alert to shoulder-surfing when entering codes.

5. Automated access

Access the platform through its official interfaces only. Do not scrape, automate, or use bots, scripts or other tools to interact with your account or the platform except where we explicitly provide an interface for it. Automated abuse is rate-limited and may lead to suspension.

6. Lost, stolen or compromised devices

If a device with access to your account is lost or stolen, or you suspect unauthorized access, change your password and reset two-factor immediately, then contact us. Report suspected security issues to support@yoctocapitals.com.

7. Changes

We may update this policy as threats and best practices evolve; material changes will be notified through the platform.

This page is provided for general information and does not constitute legal, tax or investment advice.

Back to legal documents