Privacy Policy

This Privacy Policy explains how Signaro LLC(“Signaro,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Signaro competitive-intelligence platform, the website at signaro.ai, and related services (the “Service”). It should be read together with ourTerms of Service.

Controller vs. processor. For information about visitors, waitlist sign-ups, and account holders, Signaro is the “controller.” For the business data you submit or connect through the Service to generate research (including data from your CRM), Signaro acts as a “processor” on your behalf, and you are the controller of that data; our handling of it is also governed by your agreement with us.

1. Information we collect

Information you provide:

• Waitlist & pilot sign-ups — name, company, work email, and title.
• Account & profile — name, email, password credentials, organization details, and preferences.
• Billing — plan selection and billing contact; payment-card details are collected and processed by our payment processor, not stored by us.
• Customer Data — the projects, competitors, products, documents, and other content you submit to run research, plus data you choose to connect from integrations such as your CRM (for example, HubSpot deal and contact signals).
• Support & communications — messages you send us.

Information collected automatically:

• Usage and log data (pages and features used, actions taken, timestamps), device and browser information, and IP address.
• Cookies and similar technologies needed to operate the Service and, where applicable, to measure usage (see §6).

Information from other sources:

• Public web sources. To generate competitive intelligence, the Service automatically gathers and analyzes publicly available information about the competitors and companies you research. This may incidentally include personal information that those sources have made public (for example, an executive named in a press release).
• Integrations. Data you authorize us to import from connected third-party services.

2. How we use information

• provide, maintain, secure, and improve the Service and generate your reports and outputs;
• create and manage your account, process billing, and provide support;
• communicate with you about the Service, including pilot access and product updates;
• monitor usage, prevent abuse, and enforce our Terms and applicable law;
• produce aggregated or de-identified statistics that do not identify you.

3. AI processing

The Service relies on third-party AI and research providers to analyze sources and generate your outputs — principally Anthropic(large-language-model processing), Voyage AI (text embeddings), and Tavily and Firecrawl(web research and retrieval); see §5 for the full list. To produce your results, content you submit and content retrieved for your research may be sent to these providers. We do not sell your personal information.

These providers process data under their own terms, which differ:

• Anthropic does not use data submitted through its commercial API to train its models. It may retain inputs and outputs for a limited period, and may retain content flagged under its usage policies for longer, for trust-and-safety and legal-compliance purposes.
• Where a provider offers a model-training opt-out or a no-retention option, we enable it.
• Some research providers may, under their standard terms, use the queries or content we send them to improve their services, including model training. We limit what we send to such providers to what is needed to perform your research (for example, search queries rather than your stored documents).

If you need contractual restrictions on subprocessor data use (such as a data processing agreement or a no-training commitment), contact us atsupport@signaro.ai.

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal information on the bases of: performance of a contract (to provide the Service); our legitimate interests (to operate, secure, and improve the Service and for direct B2B communications); consent (where required, e.g. certain cookies or marketing); and compliance with legal obligations. You may withdraw consent at any time.

5. How we share information & subprocessors

We do not sell your personal information. We share it only as follows:

• Service providers / subprocessors who host and power the Service under contract, currently including:Supabase (database & auth hosting),Render (application hosting),Anthropic (AI model processing),Voyage AI (text embeddings),Tavily and Firecrawl (web research and retrieval), Resend (transactional email),Cloudflare (DNS, security, and email routing), andStripe (billing).
• Integrations you connect (e.g., HubSpot), at your direction; data exchanged is also governed by that provider’s policies.
• Legal & safety — to comply with law, enforce our Terms, or protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Cookies & analytics

We use cookies and similar technologies that are strictly necessary to run the Service (such as authentication and security) and, where applicable, to understand usage. You can control cookies through your browser; blocking some may affect functionality.

7. Data retention

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. When you delete a project, it is soft-deleted and recoverable for a limited window (approximately 30 days) before being permanently removed, after which related records are deleted by cascade, except where longer retention is required by law or for business records. Waitlist and account information is retained until you ask us to delete it or it is no longer needed.

8. Security

We use reasonable administrative, technical, and organizational measures to protect personal information, including access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We and our providers may process information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. Where we act as a processor for your Customer Data, we will assist the relevant controller in responding to such requests. To exercise your rights, emailsupport@signaro.ai. You also have the right to complain to your local data-protection authority.

U.S. state privacy rights (e.g., California). We do not sell or “share” personal information for cross-context behavioral advertising. California and other state residents may exercise applicable rights to know, delete, and correct, and will not be discriminated against for doing so.

11. Children

The Service is for business use and is not directed to children under 16. We do not knowingly collect their personal information.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by additional notice. Your continued use after changes take effect constitutes acceptance.

13. Contact

Questions or requests? Emailsupport@signaro.ai or write to Signaro LLC, 1140 Woodruff Road, Ste. 106, Greenville, South Carolina 29607.