Privacy Policy

1. Introduction

SignalFloor (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Personal Information

• Account information (name, email address, password)
• Profile information (avatar, bio, trading preferences)
• Payment information (processed by secure third-party providers)
• KYC documents (for verified providers only, stored securely)

Usage Information

• Log data (IP address, browser type, device information)
• Platform usage (pages visited, features used, time spent)
• Trading activity (signals viewed, providers followed)

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send notifications about signals, providers, and platform updates
• Respond to customer service requests
• Monitor and analyze usage patterns
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations

4. Data Sharing

We do not sell your personal data. We may share your information with:

• Service Providers (sub-processors): See section 4b below for the full list
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4b. Sub-processors we use

Under GDPR Article 28 we must disclose every third party that processes personal data on our behalf. The current list:

• Supabase — database, auth, storage, edge functions. Privacy policy
• Vercel — web + edge hosting, analytics. Privacy policy
• Resend — transactional email delivery. Privacy policy
• Microsoft (M365 / Outlook) — inbound mailbox + role-based aliases. Privacy statement
• Google Firebase / FCM — Android push notifications. Privacy policy
• Google OAuth — sign-in with Google. Privacy policy
• Stripe — card + bank payments (once activated). Privacy policy
• Anthropic — AI-assisted signal analysis and moderation (Claude API). Privacy policy
• Sentry — error monitoring (diagnostic data only, no PII by default). Privacy policy
• Cloudflare — DNS + DDoS mitigation on some third-party RPC endpoints we consume. Privacy policy
• Blockchain explorers (Blockcypher, Tronscan, public RPC) — on-chain confirmation of crypto subscription payments. No user PII sent; only the wallet address + tx hash.
• GoDaddy — domain registrar + DNS for signalfloor.com. Privacy policy

Each of these is bound by a Data Processing Agreement that restricts how they use your data. When we add or remove a sub-processor we update this list before the change takes effect.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data
• Restriction: Request limitation of processing

To exercise these rights, contact us at privacy@signalfloor.com

7. Cookies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for more details.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

9. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children's Privacy

SignalFloor is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.

12. Contact Us

For questions about this Privacy Policy, please contact our Data Protection Officer at privacy@signalfloor.com