Privacy
Policy

SignupGuard Intelligence Systems ("SignupGuard," "we," "us," or "our") operates the website signupguard.io and the SignupGuard API platform (collectively, the "Service"). This Privacy Policy explains in detail how we collect, use, disclose, retain, and protect your personal information when you visit our website, create an account, subscribe to our plans, use our API, or otherwise interact with our Service.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

We encourage you to review this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an account, subscribe to a plan, contact our support team, or otherwise interact with our Service, we may collect the following information:

• Account Information: Your name, email address, company name, job title, and password when you create an account.
• Billing and Payment Information: Your billing address, payment method details (such as credit card number, expiration date, and CVV). Note that payment processing is handled by our third-party payment processor (Stripe, Inc. and/or other payment gateways), and we do not store your full credit card number on our servers. We may retain the last four digits of your card, card type, and billing address for record-keeping and support purposes.
• Communications: Any information you provide when you contact our customer support, respond to surveys, participate in promotions, or communicate with us via email, chat, or other channels.
• API Configuration Data: API keys, webhook URLs, integration settings, and other technical configuration data you provide when setting up and using our API.

1.2 Information Collected Automatically

When you access or use our Service, we automatically collect certain information, including:

• Log Data: Your IP address, browser type and version, operating system, referring URL, pages visited, date and time of access, and other standard web log information.
• Device Information: Device type, unique device identifiers, screen resolution, language preferences, and time zone settings.
• Usage Data: API call frequency, endpoints accessed, response times, error rates, feature usage patterns, and other telemetry data related to how you use our Service.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies. For detailed information, please refer to our Cookie Policy.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction confirmations, payment status, and fraud screening results from Stripe and other payment gateways.
• Analytics Providers: Aggregated usage and demographic data from analytics services.
• Public Databases: IP reputation data, domain registration information, and other publicly available data used to enhance our fraud detection capabilities.

1.4 Data Processed Through Our API

When you use our API, you may submit email addresses, IP addresses, and other data points for risk assessment. This data is processed to provide risk scores and fraud detection results. We process this data on your behalf as a data processor (under GDPR) and retain it in accordance with our data retention policies described below. We do not use the data you submit through our API for any purpose other than providing our Service to you.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Maintain Our Service

• Create and manage your account
• Process your API requests and deliver risk scoring results
• Process payments, manage subscriptions, and issue invoices and receipts
• Provide customer support and respond to your inquiries
• Send you transactional emails (account confirmation, password resets, billing notifications, service alerts)

2.2 To Improve and Develop Our Service

• Analyze usage patterns to improve our API performance and accuracy
• Develop new features and functionality
• Conduct research and analysis to enhance our fraud detection algorithms
• Monitor and analyze trends, usage, and activities in connection with our Service

2.3 To Communicate With You

• Send you service-related announcements (e.g., maintenance windows, security updates, policy changes)
• Respond to your comments, questions, and support requests
• Send you marketing communications (only with your explicit consent, and you can opt out at any time)

2.4 To Ensure Security and Prevent Fraud

• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
• Monitor and protect the security and integrity of our Service and infrastructure
• Enforce our Terms of Service and other agreements

2.5 To Comply With Legal Obligations

• Comply with applicable laws, regulations, legal processes, or enforceable governmental requests
• Establish, exercise, or defend legal claims
• Fulfill tax reporting and accounting obligations

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal basis for collecting and using your personal information depends on the specific information and the context in which we collect it:

• Performance of a Contract: Processing is necessary to fulfill our contractual obligations to you, including providing the Service, processing payments, and managing your account.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our Service, ensuring security, preventing fraud, and marketing (where we have assessed that your interests and fundamental rights do not override our interests).
• Consent: Where we rely on your consent (e.g., for marketing emails or optional cookies), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Legal Obligation: Processing is necessary to comply with legal obligations to which we are subject, such as tax reporting requirements or responding to lawful requests from public authorities.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including payment processing (Stripe, Inc.), cloud hosting and infrastructure, email delivery, analytics, and customer support tools. These providers are contractually obligated to use your information only to provide services to us and are bound by confidentiality obligations.

4.2 Payment Processors

When you make a purchase, your payment information is processed by our third-party payment processor(s), including Stripe, Inc. These processors have their own privacy policies governing how they handle your payment information. We encourage you to review Stripe's Privacy Policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid request by a public authority (e.g., a court order, subpoena, or government agency), or if we believe that such action is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing; (d) protect the personal safety of users of the Service or the public; or (e) protect against legal liability.

4.4 Business Transfers

If SignupGuard is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4.5 Aggregated or De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This data may be used for industry analysis, benchmarking, research, and to improve our fraud detection database.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• Account Data: Retained for the duration of your account and for up to 30 days after account deletion to facilitate reactivation if needed.
• Billing Data: Retained for a minimum of 7 years to comply with tax and accounting regulations.
• API Logs: Retained for up to 90 days for operational purposes and then archived or deleted.
• Support Communications: Retained for up to 3 years after the last communication.
• Marketing Preferences: Retained until you withdraw consent or request deletion.

When we no longer need your personal information, we will securely delete or anonymize it. If deletion is not possible (e.g., because the information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.

6. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption: All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal information, and only on a need-to-know basis.
• Infrastructure Security: Our infrastructure is hosted on enterprise-grade cloud platforms with SOC 2 Type II compliance, regular penetration testing, and continuous security monitoring.
• Employee Training: All employees with access to personal data receive regular security and privacy awareness training.
• Incident Response: We maintain a comprehensive incident response plan and will notify affected users and relevant authorities of any data breach in accordance with applicable laws.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest standards of data protection.

7. International Data Transfers

Your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. When we transfer your personal information internationally, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party processors
• Ensuring that recipients are in countries deemed to have adequate data protection by the European Commission

8. Your Rights and Choices

8.1 Rights Under GDPR (EEA/UK Users)

If you are in the EEA or UK, you have the following rights under the General Data Protection Regulation:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request that we delete your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.

8.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Do Not Sell My Personal Information: We do not sell your personal information. If this changes in the future, we will update this policy and provide you with the right to opt out.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at [email protected] or [email protected]. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (web beacons, pixels, scripts) to collect and store information about your interactions with our Service. Cookies help us provide essential functionality, remember your preferences, analyze traffic, and improve your experience.

For comprehensive information about the types of cookies we use, their purpose, and how to manage them, please refer to our Cookie Policy.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18 ("Children"). We do not knowingly collect personal information from children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected]. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information from our servers promptly.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit. This Privacy Policy applies only to our Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will: (a) update the "Last updated" date at the top of this page; (b) notify you via email (if you have an account) at least 30 days before the changes take effect; and (c) post a prominent notice on our website. We encourage you to periodically review this page for the latest information on our privacy practices.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.