Privacy Policy

Last Updated: November 29, 2024

Signal X Studio ("we," "our," or "us") operates BIX - Brand Intelligence Experience (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, and organization name when you create an account
• Profile Information: Any additional information you add to your profile
• Domain Data: Domains you configure for monitoring and analysis
• API Keys: Profound API keys you provide (stored encrypted)
• Category Metadata: Industry and category classifications you assign

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, and referring URLs
• Analytics Data: Citation statistics, sentiment scores, domain performance metrics
• Time Series Data: Historical daily statistics on domain performance

1.3 Information from Third Parties

We receive domain analytics and citation data from the Profound API based on your configured domains.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process domain analytics and generate reports
• Calculate and display Brand Intelligence Experience scores
• Pre-compute aggregated statistics for faster dashboard performance
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud

3. Third-Party Services

3.1 Infrastructure and Analytics

We use the following third-party services that may collect information:

• Supabase: Database, authentication, and real-time features
• Cloudflare Workers: Background processing and cron jobs
• Sentry: Error tracking and performance monitoring

3.2 Analytics Data Providers

Important: Our Service uses the Profound API to retrieve domain-centric analytics and citation data. When you configure domains for monitoring:

• Profound API: Provides citation tracking, sentiment analysis, and domain metrics

What this means for you:

• Your configured domains are sent to Profound for analysis
• We do not control how Profound handles data beyond our agreements with them
• Profound has its own privacy policy governing data use

3.3 Data Sub-Processors

4. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption at Rest: API keys are encrypted before storage
• Encryption in Transit: All data is transmitted over HTTPS/TLS
• Row-Level Security: Multi-tenant data isolation via Supabase RLS policies
• Access Controls: Role-based access within organizations
• Secure Authentication: Supabase Auth with secure session management

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a portable copy of your data
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing

To exercise these rights, contact us at hello@signalx.studio.

6.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information to third parties.

7. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. By using the Service, you consent to such transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us:

Signal X Studio
Email: hello@signalx.studio

This Privacy Policy is effective as of November 29, 2024.