Your privacy and enterprise data security are our highest priority. We ensure that your personal information, website inquiries, and ingested customer feedback are processed securely, transparently, and in strict compliance with the General Data Protection Regulation (GDPR) and applicable data protection legislation.
1. Data Controller
The data controller of your personal information collected via the Signalia Studio platform and website is:
2. What Data We Collect
- Contact and Inquiries: name, business email address, company name, phone number (optional), and voluntary details submitted via consultation or demo forms.
- Usage & Diagnostic Telemetry: page navigation flows, interaction timestamps, feature evaluation metrics, and platform telemetry collected via Google Analytics and Amplitude (subject to your cookie consent).
- Technical Information: IP address, browser type and version, device identifier, operating system, preferred language, and session identifiers.
- Enterprise Processing Data (Signalia Engine): customer feedback, review corpora, and text extracts ingested via batch integrations or API connectors are processed strictly under individual Service Agreements and Data Processing Addenda (DPA). Ingested customer text is never used to train public foundation models.
3. Purposes of Processing & Legal Basis
- Responding to pilot inquiries, consultation bookings, and demonstration requests (GDPR Art. 6(1)(b) – pre-contractual steps).
- Analyzing platform usage, evaluating feature discovery, and optimizing website experience (GDPR Art. 6(1)(a) – user consent via cookie banner).
- Securing platform infrastructure, mitigating fraudulent submissions, and auditing service reliability (GDPR Art. 6(1)(f) – legitimate interest).
- Customer relationship management, pilot onboarding communication, and enterprise correspondence (GDPR Art. 6(1)(f) – legitimate interest).
Legal basis: consent (Art. 6(1)(a) GDPR) for non-essential analytics and cookies, contract performance / pre-contractual requests (Art. 6(1)(b) GDPR), and legitimate interest (Art. 6(1)(f) GDPR) for essential security and direct communications.
4. Data Recipients
We share personal data only with trusted enterprise sub-processors under strict GDPR data processing agreements:
| Recipient | Purpose | Data Location / Safeguards |
|---|---|---|
| Google Cloud & Firebase Hosting | Static web delivery, secure global edge routing, and cloud infrastructure | EU / US (Standard Contractual Clauses / Data Privacy Framework) |
| Google Analytics (GA4) | Aggregated website traffic analysis, consent-gated telemetry | Standard Contractual Clauses (IP Anonymization active) |
| Amplitude Analytics | Behavioral analytics, product exploration telemetry (consent-gated) | Standard Contractual Clauses / Data Privacy Framework |
| HubSpot | Enterprise inquiries, contact form submission handling, and relationship management | Standard Contractual Clauses / Data Privacy Framework |
5. Your GDPR Rights
Under GDPR, you maintain comprehensive rights regarding the processing of your personal information:
To exercise any of these rights, contact our Data Protection representative directly at: contact@signalia.ai
6. Cookies & Consent Preferences
We employ Google Analytics (GA4) and Amplitude solely with your explicit consent via our cookie consent banner. You can review, update, or withdraw your cookie preferences at any time by clicking the “Cookie Preferences” link in the website footer or adjusting your browser configuration.
7. Enterprise Data Confidentiality Guarantee
Signalia Studio implements enterprise tenant isolation. Proprietary enterprise text corpora, internal survey results, and reviews processed through our intelligence pipelines are:
- Encrypted at rest using AES-256 and in transit via TLS 1.3.
- Strictly segregated per client workspace.
- Never shared with third-party advertising networks or used for public foundation model training.
8. Minors
Our enterprise services and website are intended strictly for commercial professionals and individuals aged 16 and older. We do not knowingly collect personal data from minors.