Privacy Policy

1. Data We Collect

• Account information: name, email address, company name, and password (hashed).
• Usage data: API key activity logs, request timestamps, IP addresses, and browser/device metadata.
• Billing information: payment method details processed securely by our third-party payment processor (never stored on our servers).

2. How We Use Your Data

• To provision, operate, and secure your signelpoint-portal account and API keys.
• To send transactional emails (account alerts, billing receipts, security notifications).
• To improve our platform through aggregated, anonymised analytics — never sold to advertisers.

3. Cookies & Tracking

• We use strictly necessary session cookies to authenticate your dashboard session.
• Optional analytics cookies (e.g., first-party telemetry) may be set with your consent via the cookie banner.
• We do not use third-party advertising or cross-site tracking cookies.

4. Third-Party Sharing

We share personal data only with sub-processors essential to deliver our service — including our cloud infrastructure provider, payment processor, and transactional email provider. All sub-processors are bound by Data Processing Agreements (DPAs) and are prohibited from using your data for their own purposes. We do not sell or rent your personal data.

5. Your Rights (GDPR & CCPA)

• Access, correct, or delete your personal data at any time via your account settings or by emailing [email protected].
• Withdraw consent, restrict processing, or request data portability — we respond within 30 days.
• California residents may opt out of the sale of personal information (we do not sell data) and exercise rights under the CCPA by contacting us at the address below.

6. Data Retention

We retain your account data for the duration of your subscription plus 90 days after account closure, after which it is permanently deleted. API request logs are retained for a rolling 12-month window. Anonymised, aggregated analytics may be kept indefinitely.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). API keys are stored as salted, hashed values — we cannot retrieve your plaintext key. We conduct periodic third-party security audits and maintain an incident response plan.

8. Children's Privacy

signelpoint-portal is a B2B developer tool intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a minor has provided us with data, contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-dashboard notice at least 14 days before taking effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.

10. Contact & Data Controller

• Data Controller: Signelpoint Technologies Ltd.
• Email: [email protected]
• Mailing address: 12 Harbour Exchange Square, London, E14 9GE, United Kingdom.
• For EU/EEA residents, we act as the data controller under GDPR Article 4(7).