Privacy, with a visible boundary.

Optional advertising measurement — 25 September 2026

On our public website and application page, Google Analytics and Meta Pixel run only after you select “Accept”. It measures page visits and applications accepted by our server. It does not run on login, client workspaces, reports, billing or staff screens.

Google and Meta may process your IP address, browser information, the measurement-page URL and advertising cookies. _fbp identifies a browser and _fbc associates an advertising click when present; their lifetime is up to 90 days. Application events carry an opaque identifier derived from a random submission key, not contact details. We do not send names, email addresses, phone numbers, application text, client records or payment amounts. Automatic advanced matching and server-to-Meta conversion delivery (CAPI) are not used.

An older Meta-only choice does not authorize Google. Your choice is stored in ss_measurement_v2 for up to 180 days across the website and application page. Rejection does not affect the service. Withdraw permission using “Cookie preferences” on either page; new transfers stop and accessible measurement cookies are removed. This does not recall information already received by the providers. We record the application-time measurement choice, notice version and timestamp in the application audit record.

For Meta’s processing and international transfer information: Meta Privacy Policy. Rights requests and questions: [email protected].

Automatic form measurement, Google Signals and advertising personalization are disabled. Google advertising storage is denied. Analytics cookies _ga and _ga_* last up to 90 days. We send only the public page category, language and a sanitized known referring-site address, not private screen URLs or query text. No Google or Meta measurement requests are sent before consent. Google Privacy Policy.

What this notice covers

This notice covers the Signals & Solution website, secure Portal, Signals Entry, Conductor, Cases, Evidence, Reports and payment-request records. Contract-specific controller and processor roles remain stated in the applicable client agreement.

What we process

• Identity and access records such as email, role, session and invitation state.
• Workspace records supplied by an authorized user, including Cases, business Evidence and Reports.
• Authorized Meta business, asset, permission and aggregate performance records.
• Commercial scope and payment status. Card details remain with Stripe and are not stored in the Portal.
• Security, audit, verification and service-reliability events.

Purpose and legal basis

We process data to provide and secure the requested service, perform contractual operations, protect legitimate security and audit interests, meet legal obligations and, where required, act on explicit consent. We do not sell personal data or use private Workspace records for public advertising.

Sensitive data boundary

The Portal is not a patient-record or clinical system. Do not upload patient-identifiable health data, account passwords, access tokens or payment-card details. Meta passwords and tokens are never requested from clients.

Retention and rights

Authentication artifacts expire automatically and are removed on a bounded schedule. Workspace and commercial records are retained for the active service, audit continuity and applicable contractual or legal periods, then deleted or anonymized under the agreed retention schedule. You may request access, correction, deletion, restriction, portability or objection using the contact below; legal exceptions may apply.

International processing

Cloud infrastructure and approved service providers may process data outside your country. The applicable client agreement identifies the required contractual and technical safeguards for that processing under the governing law.