Privacy Policy

Last updated: March 2026

1. Introduction

Signal ("we", "us", "our") is operated from Toronto, Ontario, Canada. We are committed to protecting your privacy and handling your personal information responsibly and in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our product management platform.

2. Information We Collect

Account information: When you sign up via Google OAuth, we receive your name, email address, and profile avatar from Google.

Workspace data: Your workspace configuration, connected channels, and integration settings.

Feedback signals: Messages, issues, and tickets ingested from your connected services (Slack, GitHub, Jira). These are the data you explicitly choose to connect.

AI-generated data: Sentiment scores, patterns, correlations, and epics generated by our AI analysis of your feedback signals.

Usage data: Basic analytics about how you interact with Signal (page views, feature usage).

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Signal platform
  • Perform AI analysis including sentiment scoring, pattern detection, ticket correlation, and epic generation
  • Display insights and analytics in your dashboard
  • Export data to your connected project management tools (Jira, Linear)
  • Send important service notifications
  • Improve our platform and develop new features

4. Data Storage and Security

Your data is stored on Supabase, which uses AWS infrastructure in the US-West (Oregon) region. All data is encrypted in transit (TLS) and at rest. We follow industry-standard security practices to protect your information.

5. Third-Party Services

We use the following third-party services to operate Signal:

  • Supabase: Database and authentication infrastructure
  • Nango: Secure OAuth integration management (SOC 2 compliant). Nango manages your third-party credentials; we never store raw OAuth tokens.
  • Stripe: Payment processing for subscriptions
  • Anthropic: AI analysis (sentiment, patterns, epic generation). Your feedback text is sent to Anthropic for processing.
  • Vercel: Application hosting

6. Cookies

Signal uses only essential cookies required for authentication (Supabase session cookies). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Your Rights Under PIPEDA

As a user, you have the right to:

  • Access your personal information held by Signal
  • Request correction of inaccurate personal information
  • Request deletion of your personal information
  • Withdraw consent for data processing
  • File a complaint with the Office of the Privacy Commissioner of Canada

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion or request, we will delete your personal information and workspace data within 30 days. Aggregated, anonymized data may be retained for analytics purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: support@productsignal.app
Location: Toronto, Ontario, Canada

← Back to Home← Back to Dashboard