Legal

Privacy Policy

Last updated: 10 September 2026

Who we are

This policy explains what personal data we process and your rights. If you have questions, contact us at hello@signalhill.ai.

What we collect

We keep data collection to the minimum needed to run the service:

  • Account data — your email address and login credentials, handled by our authentication provider (Supabase).
  • Workspace content — the prompts, inputs and models you create in your workspace.
  • Technical data — standard server logs (such as IP address and request time) needed for security and to keep the service running.

We do not sell your data, and we do not use it for advertising.

Cookies and local storage

We use only the storage that is strictly necessary to run the service. We do not use analytics, advertising or tracking cookies.

  • Authentication cookie — when you sign in, our provider (Supabase) sets a first-party cookie that keeps you logged in. It is essential to the service you asked for, so it does not require consent.
  • Preference storage — we store a small setting (such as your chosen theme) in your browser’s local storage. It stays on your device and is not used to track you.

Because we set no tracking or advertising cookies, we do not show a cookie consent banner. If we add such tools in the future, we will ask for your consent first, in line with CNIL guidance.

Our web fonts are served from our own domain, so loading a page does not share your data with a third-party font provider.

Why we process your data (legal basis)

  • To provide the service and your account — performance of a contract.
  • To keep the service secure and working — our legitimate interest.
  • To meet legal obligations where they apply.

Who we share it with

We share data only with the providers that help us run the service, and only as needed. Each acts under a data-processing agreement.

How long we keep it

We keep your account and workspace data for as long as your account is active. If you close your account, we delete or anonymise your personal data within 90 days, unless the law requires us to keep it longer.

Your rights

Under the GDPR you can ask us to:

  • see the data we hold about you;
  • correct it if it is wrong;
  • delete it;
  • limit or object to how we use it;
  • receive it in a portable format.

To use these rights, contact hello@signalhill.ai. You can also complain to the French data protection authority, the CNIL (www.cnil.fr).

Security

We use appropriate technical and organisational measures to protect your data. No system is perfectly secure, but we work to keep the risk low.

Changes to this policy

We may update this policy. When we make an important change, we will update the date above and, where appropriate, tell you.