Privacy Policy

1. Who We Are

Signal Atlas is operated from the United Kingdom. For any question about this Policy or how your information is handled, contact us at the address in Section 14.

2. Information We Collect

2.1 Information you provide directly

• Account registration: name, email address, password (stored using industry-standard hashing, never in plain text), and country.
• Alerts and notifications: if you choose to enable WhatsApp or SMS alerts, a phone number in order to deliver those messages.
• Support requests: any information you include when you contact support or submit a help ticket.
• Watchlists, preferences, and configuration: the symbols, alerts, and settings you create while using the Service.

2.2 Information from third-party sign-in

If you choose to sign in with Google, we receive basic profile information from Google (such as your name, email address, and profile picture) to create and authenticate your account. We do not receive your Google password.

2.3 Billing information

Subscription payments are handled directly by Stripe, our payment processor. We do not store your full card number or other sensitive payment card details on our servers. We do store limited billing metadata needed to operate your subscription, such as your subscription plan, status, renewal date, and Stripe customer/subscription identifiers.

2.4 Usage and device data

When you use the Service, we automatically collect standard technical data, including your IP address, browser and device type, pages and features accessed, timestamps, and similar log data. We use this for security, fraud prevention, debugging, and understanding how the Service is used.

2.5 Cookies and similar technologies

See Section 5.

3. How We Use Your Information

We use the information described above to:

• create and maintain your account, and authenticate you when you sign in;
• provide the Service, including watchlists, scanners, AI-generated reports, and alerts;
• process subscription payments and manage billing;
• send you service-related communications (for example, account, billing, or alert notifications) by email or, if you opt in, WhatsApp/SMS;
• respond to support requests;
• monitor, secure, and improve the Service, including detecting abuse or violations of our Terms of Service;
• comply with legal obligations.

We do not use your account data to train third-party AI models, and we do not sell your personal data to third parties.

4. Legal Basis for Processing

Where UK/EU data protection law applies, we process your information on the following bases: performance of a contract with you (providing the Service you signed up for), our legitimate interests (such as securing the Service and preventing abuse), your consent (for example, opting in to WhatsApp/SMS alerts), and compliance with our legal obligations.

5. Cookies and Advertising

We use a small number of cookies and similar local-storage technologies to:

• keep you signed in and maintain your session;
• remember your display preferences (for example, light/dark theme);
• (free-tier pages only) support advertising served through Google AdSense.

If you use the free tier of the Service, pages may display ads served by Google AdSense or similar ad networks. These networks may set their own cookies and use data about your visits to this and other sites to serve more relevant ads. You can manage ad personalization through your Google Ads Settings or industry opt-out tools such as the Digital Advertising Alliance's opt-out page. We do not control third-party ad cookies directly and are not responsible for the privacy practices of ad networks.

We do not currently respond to browser "Do Not Track" signals.

6. How We Share Your Information

We do not sell your personal data. We share information only with the following categories of third parties, and only as needed to operate the Service:

• Payment processing — Stripe (subscription billing and payment processing).
• Sign-in — Google (OAuth sign-in, if you choose to use it).
• Email delivery — our transactional email provider, used to send account, billing, and alert emails.
• WhatsApp/SMS delivery — our messaging provider (Twilio), used only if you opt in to WhatsApp/SMS alerts.
• AI report generation — our AI providers (Anthropic and/or OpenAI), which process the market data and prompts needed to generate AI Reports. We do not send your account credentials, payment details, or contact information to these providers as part of report generation.
• Market data providers — providers such as Alpaca and Yahoo Finance supply the market data shown on the Service. Data flows from these providers to us; we do not send your personal data to them.
• Legal and safety — where required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of Signal Atlas, our users, or others.
• Business transfers — if Signal Atlas is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy (or a successor policy you are notified of).

Each of these providers is only permitted to use your information as necessary to provide their service to us.

7. International Data Transfers

Signal Atlas is operated from the United Kingdom, and our service providers (including Stripe, Google, Twilio, and our AI and hosting providers) may process data outside the UK, including in the United States. Where we transfer personal data internationally, we rely on the transfer mechanisms and safeguards those providers make available (such as standard contractual clauses), consistent with applicable data protection law.

8. Data Retention

We retain your account information for as long as your account remains active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated personal data at any time (see Section 9); some information may be retained longer where required by law (for example, billing records).

9. Your Rights

Depending on your location, you may have rights to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• object to or restrict certain processing;
• request a portable copy of your data;
• withdraw consent at any time where processing is based on consent (for example, disabling WhatsApp/SMS alerts).

To exercise any of these rights, contact us at the address in Section 14. If you are in the UK or EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). If you are a resident of a US state with its own privacy law, you may have similar rights under that law; contact us and we will do our best to honor applicable requests.

10. Data Security

We use reasonable technical and organizational measures to protect your information, including password hashing and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at the address in Section 14.

11. Children's Privacy

The Service is not directed at, and must not be used by, anyone under 18 (see our Terms of Service). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it.

12. Third-Party Links

The Service may contain links to third-party websites or services (including data providers, advertisers, and payment processors). This Policy does not apply to those third parties, and we encourage you to review their own privacy policies.

13. Changes to This Policy

We may update this Policy from time to time, including to reflect changes to the Service, our data practices, legal requirements, or the outcome of the independent legal review referenced at the top of this document. If we make material changes, we will post the updated Policy on this page with a new "Last updated" date, and where practicable, notify registered users (for example, by email or in-app notice). Your continued use of the Service after an update takes effect constitutes your acceptance of the revised Policy.

14. Contact Us

Questions about this Policy, or requests relating to your personal data, can be sent to: rajchander378@gmail.com