Privacy Policy

This Privacy Policy describes how Colmus inc. ("we", "us", "our") collects, uses, and discloses your personal data when you use SIGNALOS (signalosai.com) and related services.

Contact: colmusinc@gmail.com

1. Who we are

Colmus inc. is the data controller responsible for your personal data on SIGNALOS.

2. Data we collect

• Account data: email, display name, hashed password, OAuth identifiers (Google, Apple).
• Usage data: saved stories, preferences, settings, and feature interactions.
• Technical data: IP address, device, browser, timestamps, error logs.
• Payment data: handled by our payment processor (Paddle). We do not store full card details.

3. How we use it

• To provide and maintain the SIGNALOS service.
• To authenticate you and secure your account.
• To prevent fraud, abuse, and security threats.
• To send service-related communications.
• To improve product quality and reliability.

4. Legal basis

We process your data on the basis of contract performance (providing the service), legitimate interests (security, product improvement), and consent where required (marketing).

5. Sharing your data

We share data only with:

• Hosting and infrastructure providers (e.g. Lovable Cloud / Supabase).
• Payment processor: Paddle.com, our Merchant of Record, for billing.
• Authentication providers (Google, Apple) when you choose social sign-in.
• Authorities when required by law.

We never sell your personal data.

6. Data retention

We retain account data while your account is active. You may delete your account at any time; we delete or anonymize personal data within 30 days, except where retention is required by law.

7. Security

We use industry-standard measures including encryption in transit (TLS), encrypted databases, row-level security policies, breached-password detection, and least-privilege access controls. No system is 100% secure; you use SIGNALOS at your own risk.

8. Your rights

Subject to applicable law (including GDPR / UK GDPR / CCPA where applicable), you have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. Contact colmusinc@gmail.com to exercise these rights.

9. International transfers

Your data may be processed outside your country. We rely on standard safeguards (Standard Contractual Clauses, adequacy decisions) where applicable.

10. Cookies

We use essential cookies and local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies.

11. Children

SIGNALOS is not intended for users under 16. We do not knowingly collect data from children.

12. Changes

We may update this Policy. Material changes will be announced in-app or by email.