Privacy Policy

1. Introduction

Signal Smith Labs ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679), and the Data Protection Act 2018.

2. Data We Collect

We collect the following types of data when you use our Service:

We do not collect trading data, portfolio information, or brokerage account details.

3. How We Use Your Data

We use your data for the following purposes:

• Providing access to The Anvil indicator on TradingView
• Processing subscription payments and billing
• Communicating with you about your account, updates, and support
• Improving the Service and user experience
• Complying with legal obligations
• Preventing fraud and ensuring security

We do not sell your data. We do not use it for targeted advertising.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you subscribed to.
• Legitimate interest: Improving the Service, preventing fraud, and ensuring security.
• Legal obligation: Complying with tax, accounting, and regulatory requirements.
• Consent: Where you have provided explicit consent (e.g., marketing emails).

5. Third-Party Services

We use the following trusted third-party services to operate our platform:

• Clerk: Authentication and user management. Privacy Policy
• Stripe: Payment processing. Privacy Policy
• Supabase: Database and backend services. Privacy Policy
• Vercel: Website hosting and infrastructure. Privacy Policy
• TradingView: Charting platform for indicator delivery. Privacy Policy

6. Data Retention

We retain your data for the following periods:

• Active subscription data: Retained while your subscription is active and for 30 days after cancellation.
• Billing records: Retained for 7 years to comply with UK tax and accounting regulations.
• Support correspondence: Retained for 12 months after the last communication.

7. Your Rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Restriction: Request that we limit how we use your data.
• Portability: Request a machine-readable copy of your data.
• Object: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw consent for marketing or other consent-based processing.

To exercise any of these rights, contact us at support@signalsmithlabs.com. We will respond within 30 days.

8. Cookies

We use essential cookies only to maintain your session and authentication state. We do not use advertising or tracking cookies. By using our Service, you consent to essential cookies.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS/TLS encryption for all data transmission
• Clerk authentication with secure password hashing
• PCI-compliant payment processing via Stripe (we never store card numbers)

While we take all reasonable precautions, no internet-based system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

10. International Transfers

Some of our third-party providers (e.g., Vercel, Supabase) may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data.

11. Children's Privacy

The Anvil is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or dashboard notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact and Complaints

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at support@signalsmithlabs.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.