Signallabs Privacy Policy

1. Introduction

This Privacy Policy describes how we handle personal information when you use the Signallabs platform and related services (the “Service”), including registration, dashboards, integrations, and AI-assisted workflows. It applies to visitors and registered users. By using the Service, you acknowledge the practices described here. For contractual terms, see our Terms of Service.

2. Data we collect

Depending on how you use the Service, we may collect:

• Account data — such as name, email, and authentication information when you register, verify your email, sign in with a password, or use third-party sign-in (e.g. Google).
• Brand and workspace data — such as brand profiles, campaign and calendar information, creative assets, publishing settings, and workspace membership or invites you create or receive.
• Messaging and conversation data — messages and related metadata you send or receive through connected channels (for example Slack or WhatsApp Business), when you use those features with the Service.
• Integration data — tokens, identifiers, or configuration required to connect third-party channels (for example Slack, WhatsApp Business, Meta, LinkedIn, or TikTok), subject to the permissions you grant when you connect an account or workspace.
• Billing and payment data — credit balance, transaction history, subscription plan and status, and order information for Done-For-You services. Payment card details (card number, CVV, expiry) are collected and stored directly by our payment processor, Stripe, and are never transmitted to or stored on our servers. We receive and store only non-sensitive billing information such as the last four digits of a card, card brand, billing country, and Stripe-issued customer and subscription identifiers.
• Technical data — such as IP address, device/browser type, cookies or similar technologies associated with session or security needs, and logs for troubleshooting and security.

3. How we use data

We use personal information to:

• Provide, maintain, and improve the Service (including onboarding, authentication, integrations, and dashboards)
• Operate AI-assisted features such as strategy, content, calendar, and publishing workflows
• Schedule, publish, or deliver content through channels you connect
• Process payments, manage subscriptions, allocate and track credits, and fulfill Done-For-You service orders
• Verify identity, protect accounts, and detect abuse or fraud
• Communicate about the Service, including billing events, security alerts, and policy updates
• Comply with law and enforce our terms

4. AI processing

To deliver AI-assisted features, we may process account, brand, messaging, and content data described above. This can include sending relevant inputs to AI and infrastructure providers that process data on our instructions and under contractual safeguards. We do not use your data to train public third-party models for unrelated products unless we tell you otherwise and, where required, obtain your consent.

5. Legal bases (where applicable)

If the GDPR or similar laws apply, we rely on appropriate bases such as performance of a contract, legitimate interests (for example securing the Service and understanding usage in aggregate), consent where required, and legal obligations.

6. Sharing

We do not sell your personal information. We may share data with service providers who process it on our instructions, including:

• Stripe, Inc. — our payment processor. When you make a purchase, you interact with Stripe's checkout flow. Stripe receives your payment card details and billing information directly and processes them under Stripe's Privacy Policy. We share your email address and a user identifier with Stripe to associate payments with your account.
• Hosting, email, security, and AI infrastructure providers — who process data on our instructions under confidentiality obligations.
• Third-party platforms you connect — such as Slack, Meta, LinkedIn, or TikTok, when you direct us to publish content or integrate those channels.

We may also share data when required by law or to protect the rights and safety of us, our users, or others. Recipients are contractually or legally obligated to protect data appropriately.

7. Cookies and storage

We and our auth infrastructure may use cookies or similar technologies—for example, to keep you signed in across parts of the application or to rotate access tokens securely. You can control certain cookies through browser settings; blocking some cookies may limit functionality.

8. Retention

We retain information for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods may vary by data category.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we encourage strong passwords and safe account practices.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You may withdraw consent where processing is consent-based. To exercise rights, contact us as described below. You may also lodge a complaint with a supervisory authority where applicable.

11. Children

The Service is not directed at children under 16 (or the age required in your jurisdiction). Do not register if you are not of legal age to agree.

12. International transfers

If we process data across countries, we use appropriate safeguards (such as standard contractual clauses) where required by law.

13. Changes to this policy

We may update this Privacy Policy. We will post the new version and revise the “Last updated” date. Where required, we will provide additional notice.

14. Contact

For privacy questions or requests, contact us using through our support channels or through our email socials@thesignallabs.com. You can return to Registration or view our Terms of Service.