Legal
Privacy Policy
The short version: your prospect data lives in an encrypted vault on your computer, and we could not read it if we wanted to. If you have not subscribed to SIGNAL Pro, that vault never leaves your machine at all. If you have, a sealed copy of it is uploaded for backup — still encrypted, still unreadable to us. The only other personal information we hold about you is what we need to sell you a licence, bill you if you subscribe, and keep both working.
1. Where your prospect data lives
SIGNAL stores everything you put into it — prospects, phone numbers, emails, call notes, outcomes — in an encrypted vault file on your own device. That file is sealed with AES-256-GCM, under a key wrapped by Argon2id from your password.
Without a SIGNAL Pro subscription, that file never leaves your computer. We do not receive it, we cannot decrypt it, and there is no server holding a copy. That is the default, and it is exactly how the one-time-purchase app has always worked. If you never subscribe, nothing changes for you.
With a SIGNAL Pro subscription, a copy of that same sealed file is uploaded for backup. What goes up is a byte-for-byte copy of what sits on your disk: the same ciphertext, under the same key wrapped by the same password. Nothing is decrypted, re-encrypted or otherwise processed on the way. We hold no password, no recovery code and no data key, and there is no escrow copy of any of them anywhere, so the file we store is one we have no way to open. Backup is on by default for subscribers, can be switched off in Setup, and is off entirely for anyone who is not subscribed.
The app has no analytics, no telemetry, no crash reporting and no tracking of any kind. Apart from the licence check and, for subscribers, the backup upload, it does not phone home while you use it.
2. What we collect — the licence
When you buy SIGNAL we hold:
- Your name and email address, so we can send your download and licence key and reach you about your licence.
- Your order reference from Stripe.
- A device identifier — a salted SHA-256 of your Windows machine id, truncated, used to tie your licence to the device or devices it is allowed to run on. It is not reversible to a machine and does not tell us anything about your computer, its contents, or its location.
That is the whole list. We use it to issue and support your licence, to re-issue a key when you change machines, and to detect licences being shared in breach of the Terms of Service.
3. What we collect if you subscribe to SIGNAL Pro
On top of the licence records above, a subscription means we also hold:
- Your billing email address.
- Your Stripe customer and subscription ids, so we know whether the subscription is active.
- A hash of your licence key — not the key itself.
- Device fingerprints, in the same truncated, salted, one-way form described above.
- The timestamp and byte size of each upload, so we know which backup is the newest and when to prune the older ones.
- The encrypted vault file itself, as described in section 1 — ciphertext we cannot read.
That is the whole list. We do not look inside the vault, because we cannot.
4. How the Pro backup is stored
- Where. Supabase storage, in the ca-central-1 region — Canada. If you are outside Canada, your backup is stored there.
- Access. The bucket is private. There is no public URL. Access is server-side only, and every download is a short-lived signed link scoped to the subscriber it belongs to.
- How many. We keep the five most recent versions of your vault. Older ones are pruned automatically.
- Your control. Turn backup off in Setup and uploads stop. Ask us and we will delete the copies we already hold.
5. What we never collect
- Readable prospect data. Without a subscription we hold none of it at all; with one, what we hold is sealed ciphertext we have no key to.
- Your vault password or recovery code. We never see them, we hold no copy or escrow of them, and we cannot reset them. If you lose both, the backup we hold is as unreadable to us as it is to you — we cannot recover it for you, and nobody can.
- Your card details — those go directly to Stripe.
- Your browsing behaviour. The website sets no advertising or analytics cookies.
6. If you email us
If you fill in the form on the site or email us, we keep your message and address so we can answer, and so we can tell you when a new build ships if you asked for that. We do not sell it, rent it, or pass it to anyone for their own marketing. You can ask us to delete it at any time.
7. Who else is involved
- Stripe — payment processing, for both one-time purchases and SIGNAL Pro subscriptions. They receive your payment and billing details directly under their own privacy policy.
- Supabase — stores SIGNAL Pro backups, in Canada. What they hold on our behalf is the encrypted vault file and the upload metadata listed in section 3.
- Netlify — hosts this website and handles the contact form. Like any web host they keep standard server logs, which include IP addresses.
We use no advertising networks and no third-party analytics.
8. How long we keep it
We keep licence records for as long as your licence exists, and afterwards for as long as we need them for tax and accounting purposes. Contact-form messages are kept until they are no longer useful, or until you ask us to delete them.
Pro backups are kept five versions deep, newest first; each new upload pushes the oldest out. If your subscription ends, the backups we already hold stay where they are and no new ones are taken. Ask us and we will delete them.
9. Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it — including any Pro backups we are storing. Deleting your licence record will invalidate your licence, so we will confirm with you first. Deleting a backup is permanent and we cannot undo it, so we will confirm that too. Depending on where you live you may have further rights under the GDPR, the UK GDPR, or state privacy laws such as the CCPA — including the right to object to processing and to complain to your data protection authority. We honour these regardless of where you are.
We do not sell or share personal information as those terms are defined under the CCPA, and we never have.
10. Security
The design does most of the work here. Without a subscription there is no central store of your prospect data at all, because it never leaves your device. With a Pro subscription there is a stored copy, but it is the sealed file — anyone who reached it, including us, would get ciphertext and no key. For the licence and billing records we hold in readable form, we take reasonable measures to protect them. No system is perfectly secure, and we cannot guarantee absolute security.
11. Children
SIGNAL is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
12. Changes
If this policy changes we will update the date above. Material changes affecting how we use information we already hold will be notified to you by email.
13. Contact
Any privacy question, or to exercise any of the rights above: help@pdcmediaa.com.
SIGNAL is operated from Florida, United States.