Privacy Policy
Last updated: April 2026. Your privacy matters to us.
1. Information We Collect
We collect minimal personal data. When you create an account, we store your email address and authentication credentials (managed by Supabase Auth). When you make a purchase, payment processing is handled entirely by Stripe — we do not store credit card numbers or financial details. We collect usage data such as scan history linked to your account.
2. Company Data We Analyze
SIGNAL analyzes publicly available information about companies, including SEC filings, public GitHub repositories, job postings, news articles, executive profiles, investment data, and company websites. We do not access private or confidential company information. All data sources are public and freely available.
3. How We Use Your Information
Your email address is used for account authentication, purchase receipts, and optional report notifications (only when you opt in). We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage & Security
User data is stored in Supabase (hosted on AWS) with row-level security enabled. All data is encrypted in transit (TLS) and at rest. Payment data is processed and stored exclusively by Stripe in accordance with PCI DSS standards.
5. Cookies & Tracking
We use essential cookies for authentication session management. We do not use advertising cookies or cross-site tracking. No data is shared with ad networks.
6. Third-Party Services
We use the following third-party services that may process your data: Supabase (authentication & database), Stripe (payment processing), Resend (transactional email), Vercel (hosting), and Anthropic (AI analysis). Each service has its own privacy policy governing data handling.
7. Data Retention
Report data is retained indefinitely to provide ongoing access to purchased reports. Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.
8. Your Rights
You have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, and withdraw consent for optional communications. To exercise these rights, contact us at hello@reallyai.app.
9. Children's Privacy
The Service is not directed at individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top of this page reflects the most recent revision.
11. Contact
For privacy-related questions or requests, contact us at hello@reallyai.app.