Table of Contents
1. Who we are
- Controller: Point Signal, Inc. ("Point Signal").
- Contact: privacy@pointsignal.io or support@pointsignal.io.
- EEA/UK: If required, we will appoint an EU/UK representative and update this policy with their details.
2. What we collect
- Account data: name, email, username, password (hashed), profile photo.
- Subscription status and entitlements (from our web billing system).
- Device and app data: app version, OS version, device model, language, country, time zone, IP address.
- Usage data: features used, screens viewed, clicks, timestamps.
- Push notification token and your notification preferences.
- Support communications.
- Website: cookies and similar technologies as described in our Cookies Policy.
- Payments: processed by Stripe on the web. We do not store full card numbers.
3. Why we use your data (legal bases)
- Provide and secure the service, authenticate you, deliver content and notifications (contract).
- Improve the product, debug, and prevent abuse (legitimate interests).
- Send product updates or marketing if you opt in; you can opt out anytime (consent or legitimate interests, depending on region).
- Comply with legal obligations (legal obligation).
5. Google Analytics (website)
- We use GA4 for aggregated usage analytics. We do not enable Google Ads features or Google Signals by default, and we do not use GA4 for targeted advertising. If we enable such features later, we will update this policy and our cookie banner choices.
- You can reject analytics cookies via our Preferences panel and we honor Global Privacy Control signals.
6. International transfers
We may transfer data internationally. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses and the UK IDTA.
7. Retention
- Account data: kept while your account is active, then deleted or anonymized within 30 days after closure unless needed for legal or security reasons.
- Support tickets and logs: retained for 24 months unless needed longer for disputes or security.
- Backups: automatically purged on a rolling basis within 35 days.
8. Your rights
- Depending on your region: access, correction, deletion, portability, restriction, objection, and withdrawal of consent.
- EEA/UK: You may lodge a complaint with your local data protection authority.
- California: You have rights to know, delete, correct, and opt out of "sale"/"sharing" of personal information. We do not sell or share personal information for cross‑context behavioral advertising. We honor Global Privacy Control signals on our website.
9. Children
Our Services are for 18+. We do not knowingly collect data from children.
10. Security
We use industry‑standard technical and organizational measures, including encryption in transit, least‑privilege access, and monitoring. No system is 100% secure.
11. Deletion and account closure
In the iOS app or on the web, go to Account > Delete Account. We will permanently delete or anonymize your data within 30 days, subject to legal holds.
12. Changes
We will update this policy as needed and post the effective date.
13. Contact
privacy@pointsignal.io or postal mail to Point Signal, Inc., 1111B S Governors Ave STE 40228, Dover, DE 19904, USA.