Privacy Policy
Last updated: September 28, 2026
1. Who we are
SignalPipe (“we”, “us”, “our”) is an agentic sales pipeline tool operated as a sole-trader business. Our registered contact address is contact@signalpipe.io. This policy describes how we collect, use, and protect personal data when you use signalpipe.io or the SignalPipe backend service.
2. Data we collect
Waitlist sign-ups (before launch)
If you joined the waitlist before paid plans launched, we collected your email address through Web3Forms and store it to send product updates and your access invitation. The waitlist is now closed. You can unsubscribe at any time by emailing contact@signalpipe.io.
Backend operator data
If you are an operator using the SignalPipe backend, we store the product definitions, anchor sentences, station URLs, and prospect interaction data you configure. This data is stored in Supabase (EU region) and is used solely to operate the service for you.
Prospect data (processed for operators)
Public posts and their authors' public handles from the feeds an operator chooses, text an operator's agent submits to be judged, and the prospect handles (Reddit or X usernames, emails) and interaction signals operators record. We process this data on behalf of the operator. Operators are responsible for ensuring they have a lawful basis to submit this data. We do not use prospect data for any purpose other than providing the service to the operator.
Usage and technical data
We collect standard server logs (IP address, request timestamps, error traces) for security and operational purposes. These are retained for 30 days and are not used for marketing or profiling.
3. Legal basis for processing (GDPR)
For users in the European Economic Area, our legal bases are:
- Contractual necessity — processing your operator data to provide the service you signed up for.
- Legitimate interests — server logs for security and abuse prevention.
- Consent — sending product update emails to people who joined the waitlist. You may withdraw consent at any time.
4. Sub-processors
We use the following sub-processors to operate the service:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database (leads, prospects, products) and dashboard sign-in | EU (Frankfurt) |
| Railway | Backend hosting | US |
| Vercel | Website hosting | US / Edge |
| OpenAI | Scoring, reply drafting and embeddings: the text being judged (a public post's title and text, or a message your agent submits for scoring, with any context sent alongside it), a prospect's latest reply when drafting a follow-up, and your product description. When a post from a feed mentions one of your competitors, its author's public handle is sent too, to judge why they mentioned it. | US |
| Anthropic | Alternative model provider for scoring and drafts, when selected (the same data as above) | US |
| Web3Forms | Waitlist sign-ups (closed; historical only) | US |
| Stripe | Payment processing and the billing page (card details go to Stripe; we never see them) | US |
| Resend | Transactional email | US |
For transfers to the US, we rely on Standard Contractual Clauses where applicable. Sub-processors are selected for GDPR compliance.
5. Data retention
- Waitlist emails: retained until you unsubscribe or request deletion.
- Operator account data: retained for the duration of the service relationship plus 30 days after account closure.
- Prospect data: retained as long as the operator account is active. Deleted within 30 days of account closure.
- Server logs: 30 days.
6. Your rights (GDPR / CCPA)
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your personal data (“right to be forgotten”).
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — unsubscribe from emails at any time.
To exercise any of these rights, email contact@signalpipe.io. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
7. Cookies
signalpipe.io does not use tracking cookies or third-party advertising cookies. We do not use Google Analytics. We count page visits with Vercel Web Analytics, which sets no cookies and does not identify individual visitors. Any cookies set are strictly functional (session state only) and do not require consent under ePrivacy rules.
8. Security
All data is transmitted over TLS. Operator keys are stored only as a one-way hash (SHA-256): a new key is shown once, when you create it, and can then be replaced but never read back. The only author detail we add to what we send model providers is a public handle, when a post mentions one of your competitors. Text is sent as written, so anything its author included in it goes with it. We conduct regular security reviews of our infrastructure.
9. Changes to this policy
We will update this policy when our data practices change. Material changes will be communicated via email to active operators. The “last updated” date at the top of this page will always reflect the most recent revision.
10. Contact
For any privacy-related questions or requests: contact@signalpipe.io