Privacy Policy

1. Introduction

Signalix Inc. ("Signalix," "we," "our," or "us") operates the Signalix security operations management platform at https://app.signalix.net. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Signalix, you consent to the data practices described in this policy. If you do not agree with the terms of this policy, please do not access the platform.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name, email address, and phone number
• Employee ID and job title/role
• Organization name and business address
• Authentication credentials (managed by our auth provider, Clerk)
• Profile photo (if uploaded)

2.2 Location Data

GPS/geolocation data is collected when security guards clock in and clock out of shifts. This data is used to verify that guards are at their assigned sites. Location tracking only occurs during active clock-in/clock-out events — we do not continuously track guard locations outside of these events.

2.3 Employment & Operational Data

• Shift schedules, timesheets, and clock-in/out records
• Work orders, incident reports, and daily activity reports
• Uploaded documents (licenses, certifications, invoices)
• Wage rates and payroll-related data

2.4 Usage & Analytics Data

We collect anonymized usage analytics through PostHog (self-hosted proxy) to improve the platform. We do not capture form field values, passwords, or personally identifiable information in analytics events. See our Sub-Processor List for details.

2.5 Payment Data

Payment processing is handled entirely by Stripe. We do not store, process, or have access to your full credit card numbers. Stripe's privacy policy applies to payment data: stripe.com/privacy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Signalix platform
• Verify guard attendance at assigned security sites via GPS
• Send SMS notifications about shifts, clock-ins, and operational alerts (with your consent)
• Process payments and manage subscriptions
• Send transactional emails (invitations, password resets, shift reminders)
• Improve, personalize, and expand our platform
• Monitor and analyze usage trends and platform performance
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. SMS Communications

Signalix may send SMS notifications related to shift scheduling, clock-in/out confirmations, missed shift alerts, and incident notifications. SMS notifications are only sent to users whose organization has enabled SMS and who have provided consent.

• Message frequency varies based on shift activity
• Message and data rates may apply
• Reply STOP to any message to opt out of SMS notifications
• Reply HELP for assistance
• SMS is powered by Twilio — see Twilio's Privacy Policy

5. Data Sharing & Third Parties

We do not sell your personal information. We share data only with the third-party service providers ("sub-processors") necessary to operate the platform. See our Sub-Processor List for a complete list.

We may also share your information:

• With your organization's administrators (they can access data for users within their organization)
• To comply with legal obligations, court orders, or government requests
• To protect the rights, safety, and property of Signalix, our users, or the public
• In connection with a merger, acquisition, or sale of assets (with prior notice)

6. Multi-Tenant Data Isolation

Signalix is a multi-tenant platform. Each organization's data is logically isolated — users in one organization cannot access another organization's guards, sites, shifts, or documents. All API requests are scoped to the authenticated user's organization.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. See our Data Retention Policy for specific retention periods by data type.

You may request deletion of your personal data at any time by visiting our Data Request page.

8. Your Rights

Depending on your location, you may have the following rights:

CCPA (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

GDPR (EU/EEA Residents)

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please visit our Data Request page or contact us at privacy@getsignalix.com.

9. Security

We use industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted database connections
• Role-based access control (RBAC) with organization-scoped permissions
• Rate limiting on API endpoints and SMS notifications
• Secure authentication via Clerk (SOC 2 compliant)
• Error monitoring and alerting via Sentry
• Content Security Policy (CSP) headers

10. Children's Privacy

Signalix is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective date" above. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@getsignalix.com
• Data Protection Contact: privacy@getsignalix.com