Signal Digest ("we", "us", "our") is a keyword monitoring service that tracks mentions across Reddit, Hacker News, and Google News and delivers a weekly email digest. This policy explains what data we collect, why, and how we handle it. We've written it in plain English — no legalese.
What we collect
- Email address — to create your account and send your weekly digest.
- Keywords — the terms you add to monitor. Stored in our database.
- Subscription status — whether you're on the Free or Pro plan.
- Mentions data — results fetched from public sources (Reddit, Hacker News, Google News) matching your keywords. This is all publicly available content.
- Payment information — handled entirely by Stripe. We never see or store your card details.
What we do not collect
- We do not use cookies for tracking or advertising.
- We do not sell your data to third parties.
- We do not build advertising profiles.
- Our analytics tool (Plausible) is privacy-friendly, cookieless, and collects no personally identifiable information.
How we use your data
- Sending your weekly digest email every Monday.
- Processing your subscription payments via Stripe.
- Authenticating your account and keeping it secure.
- Improving the service based on aggregate, anonymised usage patterns.
We do not use your data for any purpose beyond operating Signal Digest.
Third-party services
We use the following services to operate Signal Digest. Each has its own privacy policy.
Data retention
- Your account data (email, keywords) is kept as long as your account is active.
- Mention data is retained to power your digest history.
- If you delete your account, we delete your personal data within 30 days.
Your rights
You have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data.
- Export your keywords and mention history.
- Opt out of the digest email by cancelling your account.
To exercise any of these rights, email us at hello@signal-digest.com.
Security
Your data is stored on Supabase with row-level security enforced — each user can only access their own data. Passwords are never stored in plaintext. Payment data is handled by Stripe and never passes through our servers.
Changes to this policy
If we make material changes, we'll notify you by email before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.