SignalSumo

Privacy Policy

Last updated: 23 Aug 2026

Effective Date: June 1, 2025  |  Last Updated: June 1, 2025

Welcome to SignalSumo ("we", "us", "our"). Your privacy is important to us. This Privacy Policy explains what information we collect when you use signalsumo.com and our associated services (collectively, the "Platform"), how we use it, and the choices you have. By using the Platform you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide Directly

  • Account Registration: Name, email address, password (hashed), and billing details when you create an account or subscribe to a paid plan.
  • Payment Information: Credit/debit card details processed securely via Stripe. We never store raw card numbers on our servers.
  • Support Communications: Messages you send to our support team via email or in-app contact forms.
  • User-Submitted URLs & Keywords: Domains, URLs, and keyword lists you enter into our SEO tools.

1.2 Information Collected Automatically

  • Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
  • Usage Data: Feature interactions, crawl counts, keyword query volumes, and credit consumption events.
  • Cookies & Local Storage: Session tokens, preference settings, and analytics identifiers. See Section 6 for cookie details.

1.3 Third-Party Data Sources

To deliver our SEO intelligence features, we query Search Engines, LLMs other websites to get the data on your behalf. The responses returned — backlink data, SERP positions, keyword metrics — are processed and cached on our infrastructure and subject to this policy.

2. How We Use Your Information

  • Provision, operate, and improve the Platform and its features.
  • Process payments and manage subscription plans.
  • Send transactional emails (account confirmation, password reset, report alerts, downtime notifications).
  • Send optional product updates and marketing emails — you can unsubscribe at any time via the link in each email.
  • Monitor usage to enforce plan limits and prevent abuse.
  • Conduct aggregate analytics to understand how tools are used and prioritise development.
  • Comply with applicable laws and respond to lawful requests.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases:

  • Contract: Processing necessary to deliver the service you signed up for.
  • Legitimate Interests: Security monitoring, fraud prevention, product analytics, and service improvement.
  • Consent: Marketing emails and non-essential cookies (you may withdraw consent at any time).
  • Legal Obligation: Compliance with applicable laws.

4. Data Sharing & Disclosure

We do not sell your personal data. We share data only in the following circumstances:

  • Service Providers: Stripe (payments), Brevo (transactional email), cloud hosting providers, and analytics tools — all bound by data processing agreements.
  • Third-Party APIs: Domain and URL data you submit is passed to third-party SEO data providers to fulfil your queries. Refer to those providers' privacy policies for their data handling practices.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity.
  • Legal Requirements: Where disclosure is required by law, court order, or to protect the rights and safety of SignalSumo or others.

5. Data Retention

We retain your account data for as long as your account remains active. If you delete your account we will purge your personal data within 30 days, except where retention is required by law (e.g., financial records). Aggregated, anonymised analytics data may be retained indefinitely.

6. Cookies

We use the following types of cookies:

  • Strictly Necessary: Session authentication and CSRF protection. Cannot be disabled without breaking the Platform.
  • Functional: Remember your preferences (theme, language).
  • Analytics: Aggregate, anonymised usage statistics to improve the Platform. You can opt-out via your browser settings.

Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent login functionality.

7. Data Security

We implement industry-standard technical and organisational measures including TLS encryption in transit, encrypted storage at rest, hashed passwords (bcrypt), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

SignalSumo is operated from the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the US or other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for transfers from the EEA/UK.

9. Your Rights

Depending on your jurisdiction you may have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to certain processing activities.
  • Data portability — receive your data in a structured, machine-readable format.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

The Platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Platform at least 14 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related queries or to exercise your rights: