PRIVACY POLICY

1. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, password, and profile details you provide during registration.
• Financial Information: Portfolio positions, trade history, watchlists, and other investment data you add to the Platform. We do not collect or store your brokerage credentials, bank account numbers, or credit card details — payment processing is handled entirely by Stripe.
• Creator Information: If you enable Creator Mode, we collect additional information required for payouts via Stripe Connect, including identity verification and banking details (processed and stored by Stripe, not SIGNAL).
• Usage Data: IP address, browser type, device information, operating system, referring URLs, pages visited, timestamps, and interaction patterns.
• Communications: Any messages, feedback, or support requests you send us.

2. How We Use Your Information

• To provide, maintain, and improve the Platform's features and services
• To personalise your experience, feed, and content recommendations
• To process subscriptions, payments, and creator payouts via Stripe
• To send important account, security, and product notifications
• To analyse usage patterns, diagnose technical issues, and improve performance
• To detect, prevent, and address fraud, abuse, and security incidents
• To comply with legal obligations and enforce our Terms of Service

3. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data only in the following circumstances:

• Service Providers: We share data with trusted third-party providers necessary to operate the Platform, including Stripe (payments), Cloudflare (hosting/security), and analytics providers. These providers are contractually obligated to protect your data.
• Public Content: Portfolio data, posts, and profile information you choose to make public are visible to other users.
• Legal Requirements: We may disclose data if required by law, subpoena, court order, or government request, or to protect the rights, safety, or property of SIGNAL or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change.

4. Portfolio Data

Your portfolio positions, trade history, and financial data are private by default. You have full control over what is visible publicly. We do not share your financial data with any third parties without your explicit consent. Aggregated, anonymised data (which cannot identify you) may be used for Platform analytics and improvements.

5. Payment Processing

All payment processing is handled by Stripe, Inc. SIGNAL does not store your credit card numbers, bank account details, or other sensitive payment information on our servers. Stripe's handling of your data is governed by Stripe's Privacy Policy.

6. Cookies & Tracking

We use cookies and similar technologies (local storage, session storage) to maintain your session, remember preferences, and analyse usage. We use only essential and functional cookies — we do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may impair Platform functionality.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain data for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, financial records). Anonymised, aggregated data may be retained indefinitely.

9. International Data Transfers

SIGNAL operates from the United Arab Emirates. Your data may be processed and stored in the UAE and other jurisdictions where our service providers operate. By using the Platform, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

10. Children's Privacy

SIGNAL is not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal data, please contact us immediately.

11. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data in certain circumstances.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at founder@getsignal.finance. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Platform at least 14 days before taking effect. Your continued use after changes take effect constitutes acceptance. We encourage you to review this policy regularly.

13. Contact

For questions, concerns, or data requests, contact us at founder@getsignal.finance