Privacy Policy

1. Introduction

SignGuy AI ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. This policy complies with applicable data protection regulations including GDPR.

2. Information We Collect

Account Information: Name, email address, company name, phone number, and password (hashed).

Business Data: Customer records, job details, invoices, quotes, employee information, time entries, and financial data you enter into the Platform.

Payment Information: Billing details are processed securely by Stripe. We do not store full credit card numbers.

Usage Data: Pages visited, features used, AI tool usage, credit consumption, and session information.

AI Interaction Data: Prompts sent to AI tools, generated content, and voice input/output transcriptions.

3. How We Use Your Information

• To provide and maintain the Platform and its features.
• To process payments and manage subscriptions.
• To power AI-driven tools and personalized business insights.
• To send transactional emails (invoices, notifications, password resets).
• To improve the Platform based on usage patterns.
• To comply with legal obligations.

4. AI Data Processing

When you use AI-powered features, your input data is processed by third-party AI providers (OpenAI). AI-generated content is stored in your tenant's data. We do not use your business data to train AI models. Voice input is transcribed using OpenAI Whisper and is not retained beyond the session.

5. Third-Party Services

We share data with the following third-party services as necessary to operate the Platform:

• Stripe: Payment processing, subscription management, and webstore transactions.
• SendGrid: Transactional email delivery (invoices, notifications).
• OpenAI: AI text generation, image generation, speech-to-text, and text-to-speech.
• MongoDB Atlas: Database hosting and storage.

Each third-party service operates under its own privacy policy and data protection standards.

6. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), JWT-based authentication, role-based access control, and multi-tenant data isolation. Despite these measures, no method of electronic storage is 100% secure.

7. Data Retention

• Active account data is retained as long as your subscription is active.
• After account termination, data is retained for 30 days before permanent deletion.
• Payment records may be retained longer as required by law.
• AI interaction history is retained for your reference and can be deleted upon request.

8. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Export your data in a machine-readable format (JSON).
• Restriction: Restrict processing of your personal data.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at privacy@signguyai.com.

9. Cookies

We use essential browser storage for authentication and session management. Auth tokens are stored with session-first handling, and persistent storage is used only when explicitly requested (for example, with a remembered login). We do not use third-party tracking cookies or advertising pixels. Analytics data is collected server-side without marketing cookies.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For privacy-related inquiries, data requests, or concerns:

Email: privacy@signguyai.com