Last updated 22 Sep 2026 · This is a plain-English summary — please have your own legal counsel review before publication in your jurisdiction.
Who we are
The SignalSumo agency catalog is operated by SignalSumo LLC, which is the controller for the information described here. Write to [email protected] with any privacy question or request.
The catalog has its own accounts, separate from the SignalSumo SEO platform. Signing up here does not create a platform account and does not share your details with it.
What we collect
- Account information — email address, hashed password, display name and an optional picture, given by you at signup.
- Reviews you write — rating, title, text, any photos or video you attach, and which agency it is about.
- Agency profiles — what a claimed agency enters about itself, and for compiled listings the business details published in public listings (name, address, phone, opening hours, services and the ratings shown there).
- Enquiries — when you use Contact agency: your name, email, optional phone, company and website, what you need, your budget range and your message.
- Interactions — replies, claims and flags.
- Technical signals — a hash of the IP address behind each review or enquiry (never the raw address), user agent, timestamps, and the fact that you are signed in on this device.
- Verification tokens — for email confirmation, password reset and domain verification during a claim.
How we use it
- To run the catalog: sign you in, publish reviews, deliver replies, pass your enquiry to the agency you wrote to.
- To keep it honest: rate limits, manipulation patterns, anti-fraud signals, moderation.
- To communicate about what you did: verify your email, answer a report, tell an agency it has a new review or enquiry.
Your enquiry to an agency
An enquiry is delivered to the one agency you sent it to, and to nobody else. We do not sell enquiries, do not pass them to several agencies at once, and do not use your details to market anything to you.
Which of your details that agency sees depends on its plan: on the free plan your name and contact details are masked and the agency sees only what you need and your message with contact details removed; on a paid plan it sees your name, email, phone, company and website so that it can reply. Once an agency has your details, it is a controller of them in its own right and its own privacy policy applies to what it does next.
Enquiries are not published anywhere on the site.
What's public
Your display name, picture, and published reviews and replies are visible to anyone. Your email address is never shown. Your IP address is stored only as a hash. Enquiries are never public.
What we share
We don't sell personal information. We use a small set of providers to operate:
- Brevo — transactional email (verification, password reset, invitations, enquiry alerts).
- Cloudflare — delivery, DDoS protection and Turnstile anti-bot.
- Our hosting provider, for the infrastructure underneath.
We may also disclose information where the law requires it, or to protect people's rights and safety.
Search and AI answer engines
Published reviews and agency pages are indexed by search engines and, deliberately, by AI answer engines, so an assistant asked about an agency can quote what clients actually wrote. That applies only to what is published: never your account details, and never an enquiry.
How long we keep it
- Account information: while your account is open, plus a short window after deletion for audit and abuse recovery.
- Reviews: while your account is open. Deleting one removes it from the page immediately; the record is kept for audit.
- Enquiries: kept in the agency's dashboard until they or we delete them, and in our records for up to 24 months so that disputes can be settled.
- Verification tokens: 7 days for a claim, 2 days for email verification, 1 hour for a password reset.
- Flags and moderation logs: kept, so patterns of abuse stay investigable.
Your rights
Depending on where you live you may have the right to see, correct, export or delete the personal information we hold about you, and to object to some uses of it. Email [email protected] from the address on your account, or the address you used to send an enquiry, and we'll act on it. If your request is about what an agency did with an enquiry after we delivered it, ask them — and tell us if they don't answer.
Children
The catalog is not for people under 16. If we learn we hold information about a child without a parent's consent, we delete it.
Security
HTTPS across the site, passwords hashed with bcrypt, session cookies HttpOnly; Secure; SameSite=Lax, IP addresses stored only as hashes. No system is perfect — if you suspect a problem, email [email protected] and we'll treat it seriously.
Changes
We update the date at the top when this policy changes. Material changes are also surfaced on your account overview next time you sign in.