Privacy Policy

1. Introduction

SignalsLoop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our feedback management service at signalsloop.com.

2. Information We Collect

Account Information

• Email address (for account creation and login)
• Project names and settings you configure
• Billing information (processed securely through Stripe)

Feedback Data

• Feedback posts, comments, and votes you submit
• Optional email addresses provided with feedback
• Status changes and moderation actions

Usage Information

• Pages visited and features used
• Browser type, device information, and IP address
• Analytics data through PostHog (anonymized)

3. How We Use Your Information

• Provide and maintain our feedback management service
• Send transactional emails (login links, status updates)
• Process payments and manage subscriptions
• Improve our service and develop new features
• Prevent fraud and ensure security
• Comply with legal obligations

4. Information Sharing

We do not sell, trade, or rent your personal information. We only share information in these situations:

• Public Feedback: Posts on public boards are visible to anyone with the link
• Service Providers: Stripe (payments), Supabase (database), Vercel (hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfer: In connection with a merger, sale, or asset transfer

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• All data transmitted over HTTPS/TLS 1.3 encryption
• AES-256 encryption for sensitive data at rest
• Database access restricted with Row Level Security (RLS)
• Regular security updates, monitoring, and vulnerability scanning
• No storage of payment card information (handled by Stripe PCI-DSS)
• Multi-factor authentication available for accounts
• Audit logging of security-relevant events
• Daily automated backups with 30-day retention

6. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active, deleted within 30 days of account deletion
• Feedback Data: Retained for the lifetime of the project unless deleted by you
• Audit Logs: Retained for 2 years for compliance and security purposes
• Security Logs: Retained for 1 year
• Analytics Data: Retained for 90 days (anonymized)
• Backups: Retained for 30 days

7. Sub-Processors

We use the following third-party service providers to process your data:

8. Your Rights

You have the right to:

• Access, update, or delete your account information
• Export your feedback data in standard formats
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Lodge a complaint with a data protection authority
• Contact us with privacy concerns

For GDPR/CCPA requests: Email [email protected] with your request. We will respond within 30 days.

9. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of discovery
• Notify relevant data protection authorities as required by law
• Provide details about the nature of the breach and data affected
• Describe the measures taken to address the breach
• Provide recommendations for protecting yourself

10. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze usage patterns (via PostHog)
• Prevent duplicate voting

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

12. International Users

Your information may be transferred to and processed in the United States. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Email: [email protected]
Address: [Your Business Address]