Privacy Policy
Last updated: September 19, 2026
What we collect
- Account: your email address. You sign in with one-time codes sent to that address; we don't use passwords.
- Company information you enter: company name, description, stage, milestones, goals, website URL, and optionally a pitch deck (PDF).
- Generated content: narratives, journalist shortlists, pitch drafts, notes and pitch statuses you set.
- Usage records: how many AI generations you have used, to enforce plan limits.
- Billing status: membership status, purchase dates and IDs from Gumroad (and a one-way hash of your licence key). We never receive card numbers.
- Technical data: IP address and browser information in logs, used for security and rate limiting.
- Funnel records: our own record of the steps taken through the product — a page view, starting signup, verifying a code, generating a narrative, upgrading. Each record holds a random identifier stored in your browser (not a cookie, and not linked to your name), the step reached, which site or campaign referred you, a rough device type and your country. It never contains your email address, your company details, a journalist's details or any generated copy. Where a purchase must be connected to an account we store a one-way hash of the email address, never the address itself. Clearing your browser storage resets the identifier.
How we use it
To provide Signal PR: to sign you in, generate content from the information you give us, enforce usage limits, process your subscription, prevent abuse and send transactional email. We do not sell your data, and we do not use your company information or generated content to train AI models.
Your company information and deck text are sent to our AI provider (Anthropic) to produce outputs. AI output can be wrong: always verify it before you send it to anyone.
Subprocessors
We use these service providers to run Signal PR:
Anthropic
AI model provider (Claude). Generates narratives, journalist shortlists, pitch drafts and other outputs.
Data: The company information you enter, text extracted from your website and uploaded pitch deck, and your generated drafts. Not your password or payment details.
Supabase
Database, authentication (email sign-in codes) and file storage for uploaded pitch decks.
Data: Email address, company profile, generated content, usage records, uploaded decks.
Vercel
Hosts the web application and processes requests.
Data: Request data such as IP address and browser information in server logs.
Resend
Sends transactional email (sign-in codes are sent by Supabase; welcome, billing and product emails by Resend).
Data: Email address and the content of the email.
Gumroad
Checkout, payment processing, receipts, sales tax/VAT handling and membership management for subscriptions.
Data: Email address, billing details and payment method (we never see or store card numbers). We receive your purchase email, subscription status and IDs.
Google Analytics (Sheets, historically)
Website analytics on signal-pr.com and app.signal-pr.com, when a measurement ID is configured. The Google Ads tag was removed on 19 September 2026 and no ad-conversion data is sent to Google any more. Before 17 September 2026 the signal-pr.com signup form also stored submitted email addresses and company names in a Google Sheet.
Data: Pages visited, device/browser data, cookie identifiers; historically email and company name from the landing form.
Cloudflare
Hosts the signal-pr.com marketing site and DNS, and provides Cloudflare Web Analytics, which counts page views without cookies and without tracking anyone across sites.
Data: Request data such as IP address; aggregate page-view counts.
Sentry (when enabled)
Error monitoring.
Data: Technical error details, which may include your account or company ID.
Google Analytics uses cookies where it is enabled. Cloudflare Web Analytics and our own funnel records do not. There is no Google Ads tag on either site as of 19 September 2026. Some of these providers process data outside your country, including in the United States.
Retention and deletion
We keep your data while your account exists. You can delete your account at any time in Settings. If your membership is still renewing, cancel it on Gumroad first (Settings links there). Deletion removes your company profile, generated content, uploaded decks, sessions and sign-in account. We keep a usage counter tied only to a one-way hash of your email address (not the address itself), so that deleting and re-creating an account does not reset the free trial. Gumroad keeps its own billing records as required by law.
Your rights
You can access, correct, export or delete your personal data. For requests you can't complete in the app, email privacy@signal-pr.com. We respond within 30 days.
Contact
Questions about this policy? hello@signal-pr.com.