Privacy, with a visible boundary.

What this notice covers

This notice covers the Signals & Solution website, secure Portal, Signals Entry, Conductor, Cases, Evidence, Reports and payment-request records. Contract-specific controller and processor roles remain stated in the applicable client agreement.

What we process

• Identity and access records such as email, role, session and invitation state.
• Workspace records supplied by an authorized user, including Cases, business Evidence and Reports.
• Authorized Meta business, asset, permission and aggregate performance records.
• Commercial scope and payment status. Card details remain with Stripe and are not stored in the Portal.
• Security, audit, verification and service-reliability events.

Purpose and legal basis

We process data to provide and secure the requested service, perform contractual operations, protect legitimate security and audit interests, meet legal obligations and, where required, act on explicit consent. We do not sell personal data or use private Workspace records for public advertising.

Sensitive data boundary

The Portal is not a patient-record or clinical system. Do not upload patient-identifiable health data, account passwords, access tokens or payment-card details. Meta passwords and tokens are never requested from clients.

Retention and rights

Authentication artifacts expire automatically and are removed on a bounded schedule. Workspace and commercial records are retained for the active service, audit continuity and applicable contractual or legal periods, then deleted or anonymized under the agreed retention schedule. You may request access, correction, deletion, restriction, portability or objection using the contact below; legal exceptions may apply.

International processing

Cloud infrastructure and approved service providers may process data outside your country. The applicable client agreement identifies the required contractual and technical safeguards for that processing under the governing law.