Privacy policy

Signaic, Inc., a Delaware corporation, runs signaic.com and the Signaic platform. We decide how the personal information described here is used. Our address is 411 North Main Street, Suite 105, Glen Ellyn, IL 60137, United States. You can reach us at ryan@signaic.com.

Most of what Signaic shows is compiled from public records: regulatory filings, exchange disclosures, government contracts, orbital catalogs and the trade press. Those records are about companies and agencies. This policy covers the information about you that we handle when you visit the site or use the platform.

• Your account. Your name, email address and password when you sign up. The password is stored by our authentication provider as a one-way hash; we never see it. If you turn on two-step sign-in, we store the authenticator setup our provider needs to check your codes.
• Your workspace. The organization you belong to, your role in it, your plan and the things you create: watchlists, alerts, reports, dashboards, shared report links and settings.
• Questions to SIG/NAIC AI. The questions you ask the artificial intelligence (AI) assistant, its answers and the conversation history, so you can return to them. We also count each use against your plan's allowance.
• Messages to us. What you send through the support assistant, the "Talk to us" form (your name, email, company and message) or by email. With a "Talk to us" message we store a one-way keyed hash of your network address and your browser's user agent to stop abuse; we do not store the address itself.
• Billing. When you subscribe, Stripe collects your payment details. We store the Stripe customer and subscription references, your plan, its status and renewal dates. Card numbers never reach Signaic.
• Email delivery. For each email we send we keep the recipient, the kind of email, the subject and the delivery status our email provider reports (delivered, bounced, marked as spam and, where the provider reports them, opened or clicked). We never store the body of the email.
• Activity and security records. An audit log of account and workspace actions (for example a plan change or an invitation), which owners and admins of an organization can read in Settings. Your network address is used to apply rate limits and to protect sign-up and sign-in from abuse.
• Errors and performance. When something breaks, our error tracker receives technical details: the page, the browser, the error and a sample of performance timings. We do not record sessions or screens.

• To run your account and workspace and to give you the plan you chose.
• To send the email you asked for: account confirmation and sign-in links, The Orbital Brief, your alerts, trial reminders, invitations and messages about your plan.
• To answer your questions to SIG/NAIC AI and to build the reports you request.
• To answer support requests and sales enquiries.
• To keep the service secure, find and fix errors and enforce rate limits and plan allowances.
• To meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for advertising. The site has no advertising or third-party analytics trackers.

When you ask SIG/NAIC AI a question or have it build a report, your question and the relevant records are sent to Anthropic, whose Claude models write the answer. To find the records related to your question, its text is also sent to OpenAI, which turns it into a numeric representation used for the search. Under the terms these providers offer for their programming interfaces, they do not train their models on what we send them.

Answers cite the records they come from. AI can still be wrong, so check the cited source before you rely on an answer.

We use a small number of service providers, each for one job, under contracts that limit them to processing data for us. The security page lists each one with what it does and where it runs. In short:

• Vercel hosts the site, the platform and the application programming interface (API).
• Supabase holds the database, sign-in, file storage and backups.
• Resend sends and receives our email.
• Stripe handles billing and payments.
• Anthropic and OpenAI provide the AI models described above.
• Sentry receives error and performance reports.
• BetterStack monitors uptime and runs the status page.
• Trigger.dev runs our scheduled tasks, including sending the brief and backing up the database.
• Metabase draws the charts and boards in Mission Control.
• Upstash counts requests for rate limiting.
• Firecrawl fetches public regulator and operator web pages for the record. It receives no information about you.
• Doppler stores our keys and passwords. It receives no information about you.

We may also disclose information when the law requires it, or to a buyer or successor if the company is sold or merged, in which case this policy continues to apply to it.

Our providers store and process data in the United States; BetterStack, which handles only monitoring data, also runs in the European Union. If you use Signaic from outside the United States, your information is transferred to and processed in the United States.

We set only the cookies the service needs:

• sign-in cookies that keep you signed in to your account;
• a preference cookie that remembers whether you chose the light or dark theme in the platform;
• a short-lived cookie that returns you to the right page after signing in to connect another app.

We set no advertising or analytics cookies.

Every email we send carries an unsubscribe link, and mail apps that support one-click unsubscribe can use it. Unsubscribing stops The Orbital Brief and our other regular email. We still send the email you need to use your account, such as sign-in links and messages about your plan. If an address bounces or reports our email as spam, we stop sending to it.

We keep your account and workspace information while your account is open. When you ask us to delete your account, we delete or anonymize your personal information, except what we must keep for legal, tax or accounting reasons or to resolve a dispute.

The database is backed up every night. We keep the newest 14 nightly backups and the newest 4 Sunday backups, so deleted information leaves the backups as they roll over. Our database provider also keeps its own daily backups for a limited time.

You can see and change your name and settings in the platform at any time. Write to ryan@signaic.com to ask for a copy of your personal information, to correct it, or to delete your account; we will confirm the request comes from you and act on it within the time the law requires. Depending on where you live, you may have further rights, such as to object to or restrict some uses, or to complain to your data protection authority. We will not treat you differently for using them.

Connections to Signaic are encrypted, data at rest is encrypted by our database and storage providers, each organization's data is kept apart by rules in the database itself, and two-step sign-in is available on every account. The security page describes these measures in more detail. No system is perfectly secure; if we learn of a breach that affects your information, we will tell you as the law requires.

Signaic is a service for businesses and professionals. It is not meant for children, and we do not knowingly collect information from anyone under 16.

When we change this policy we update the date at the top. If a change materially affects how we use your information, we will tell account holders by email before it takes effect.

Questions about privacy go to ryan@signaic.com, or by post to Signaic, Inc., 411 North Main Street, Suite 105, Glen Ellyn, IL 60137, United States.