Founder pricing for first 500 teams.Claim your spot →

Privacy Policy

Last updated: March 1, 2026

We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your information.

Summary

  • We never sell your data to third parties
  • Your conversation data is used only to provide and improve our services
  • You can request deletion of your data at any time
  • We are SOC 2 Type II certified
  • We comply with GDPR, CCPA, and other applicable privacy regulations

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Account information: Name, email address, company name, and billing information when you sign up.

Usage data: Information about how you use our services, including features accessed, conversations processed, and performance metrics.

Customer data: Support conversation content that you and your customers generate through the Signorian platform. This data is used solely to provide and improve our services.

Technical data: IP addresses, browser type, device identifiers, log data, and cookies to provide a secure and functional service.

We do not sell your personal data to third parties.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information, including purchase confirmations and invoices
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities in connection with our services
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve the services and provide content or features that match user profiles or interests
  • Train and improve our AI models (using anonymized, aggregated data only)
  • 3. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

    Conversation data: Retained for 12 months by default on Starter and Pro plans. Enterprise customers can configure custom retention periods.

    Account data: Retained until account deletion. Upon deletion, we purge personal data within 30 days, except where retention is required by law.

    Billing records: Retained for 7 years for tax and accounting compliance.

    4. Data Security

    We take the security of your data seriously. Signorian is SOC 2 Type II certified and employs industry-standard security measures including:

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • Regular security audits and penetration testing
  • Access controls and least-privilege principles
  • Audit logging for all data access
  • Multi-factor authentication for all internal systems
  • While we strive to protect your personal information, no security system is impenetrable. In the event of a security breach, we will notify affected users within 72 hours.

    5. Data Sharing

    We do not sell, trade, or rent your personal data to third parties. We may share your information with:

    Service providers: Third-party vendors who assist us in providing our services (e.g., cloud hosting, payment processing). These vendors are contractually obligated to protect your data.

    Legal requirements: When required by law, regulation, legal process, or governmental request.

    Business transfers: In connection with a merger, acquisition, or sale of assets, user data may be transferred. We will provide notice before such transfer.

    With your consent: We may share information with third parties when you explicitly authorize us to do so.

    6. Your Rights (GDPR & CCPA)

    Depending on your location, you may have the following rights regarding your personal data:

    Access: Request a copy of the personal data we hold about you.

    Rectification: Request correction of inaccurate or incomplete personal data.

    Erasure: Request deletion of your personal data ("right to be forgotten").

    Portability: Request your data in a machine-readable format.

    Objection: Object to processing of your personal data for certain purposes.

    Restriction: Request restriction of processing in certain circumstances.

    To exercise these rights, contact us at [email protected]. We will respond within 30 days.

    7. Cookies

    We use cookies and similar technologies to provide, improve, and protect our services. Cookies help us remember your preferences, understand how you use our platform, and deliver relevant content.

    Essential cookies: Required for the platform to function. Cannot be disabled.

    Analytics cookies: Help us understand usage patterns. Can be disabled in your account settings.

    Marketing cookies: Used to show relevant advertisements. Can be disabled in your account settings.

    You can control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

    8. Children's Privacy

    Signorian is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately at [email protected] and we will take steps to delete it.

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and sending you an email notification at least 30 days before changes take effect.

    Your continued use of our services after such changes constitutes acceptance of the new policy.

    10. Contact Us

    If you have questions about this Privacy Policy or our privacy practices, please contact us:

    Email: [email protected]

    Mail: Signorian, Inc., 548 Market St Suite 1200, San Francisco, CA 94104

    Data Protection Officer: [email protected]

    For EU residents, you may also contact your local data protection authority.