Privacy Policy.

Signal Alchemist LLC (“we,” “us,” or “our”) operates the Signal Alchemist platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

Account Information

When you register for an account, we collect:

• Full name
• Email address
• Hashed password (we never store plain-text passwords)
• Account creation date and subscription tier

Usage Data

We automatically collect certain information when you use the Service:

• Pages visited and features used
• Scan requests and filter preferences
• Browser type, device type, and operating system
• IP address (anonymized for analytics)
• Timestamps of activity

Device Fingerprint

We generate a non-identifying device fingerprint for trial abuse prevention. This fingerprint is a one-way hash that cannot be reversed to identify you personally. It includes general browser and display characteristics but does not track you across other websites.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send you service-related communications (account confirmations, billing notices, security alerts)
• Prevent fraud and abuse (including trial abuse)
• Analyze usage patterns to improve our algorithms and user experience
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Your data is stored on encrypted servers hosted by our infrastructure providers (Railway, Vercel, and managed PostgreSQL). We implement industry-standard security measures, including:

• Encrypted data transmission (TLS/HTTPS)
• Hashed and salted passwords (bcrypt)
• JWT-based authentication with short-lived access tokens
• Database encryption at rest

While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

We use the following third-party services that may process your data:

• Stripe - Payment processing. We never store your credit card information; it is handled entirely by Stripe. See Stripe’s Privacy Policy.
• Vercel - Frontend hosting and analytics.
• Railway - Backend hosting and database management.

We use essential cookies required for authentication (JWT tokens stored in localStorage). We do not use third-party advertising cookies or cross-site tracking pixels. We may use minimal analytics to understand aggregate usage patterns.

All Users

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your rights.

To exercise any of these rights, contact us at schuyler@trytaest.com.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law (e.g., billing records for tax purposes, which are retained for up to 7 years).

Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify you.

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at: schuyler@trytaest.com