Privacy Policy

1. Introduction

SignalMax Technologies (“we,” “us,” “our,” or “Company”) operates ProductBrain (the “Service”). This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our Service, website, and related applications.

We are committed to protecting your privacy. Please read this Privacy Policy carefully. By using ProductBrain, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration

• Name, email address, company name, and job title
• Password and authentication credentials
• Payment and billing information (credit card, billing address)
• Phone number (optional)
• Company size and industry (optional)

Service Usage

• Documents, analyses, prompts, and data you upload to ProductBrain
• Feedback, feature requests, and communications with our support team
• Information about your competitive landscape and market positioning inputs

Payment Information

• Credit card details, billing address, and transaction history
• We use third-party payment processors (e.g., Stripe); we do not store full credit card details on our servers

Communications

• Email correspondence with our support team
• Inquiry forms, survey responses, and feedback submissions

2.2 Information Collected Automatically

Usage Data

• Pages visited, features accessed, and time spent on each feature
• Analyses performed, credit consumption, and subscription plan details
• Device type, operating system, browser type, and IP address
• Referral source (if applicable)

Cookies and Tracking Technologies

• Session cookies (temporary, expire when you close your browser)
• Persistent cookies (remain on your device to remember preferences)
• Web beacons and similar tracking technologies
• Analytics tools (e.g., Google Analytics) to understand usage patterns

Automatic Error Logging

• Error messages, crash reports, and performance diagnostics
• System logs and API request metadata

Web Visitor Analytics & B2B Enrichment

When you visit our marketing pages, we record anonymous traffic data to understand how visitors find and use our site. This includes:

• A first-party cookie that stores a randomly-generated visitor identifier (no personal info)
• Pages visited, referring URL, UTM campaign parameters, and device/browser type
• Approximate geolocation (country, region, city) derived from your IP address via our hosting provider
• IP address & B2B identification: we store your IP address alongside your visitor record and use it to look up the associated company or organization via a third-party service (ipinfo.io). We use this to understand which businesses are evaluating ProductBrain. The IP address is retained for the same period as the rest of your visitor record (see Section 7).
• When you sign up, we link your prior anonymous visitor data to your account so we can understand the full path from first visit to signup.

Bot traffic: requests we identify as bots, crawlers, or automated agents are flagged and excluded from analytics. We do not collect IP addresses or perform B2B enrichment on bot traffic.

2.3 Third-Party Data Sources

Publicly Available Data

• We collect and analyze publicly available market intelligence, company information, and competitive signals
• This includes public websites, news sources, press releases, industry reports, and similar publicly accessible information
• This data is used to provide competitive analysis and market insights

No Collection Without Consent

• We do not purchase personal data from data brokers
• We do not collect data about you from third parties without your knowledge (except for payment processing)

3. How We Use Your Information

3.1 Service Delivery

• Creating and maintaining your account
• Processing subscriptions, billing, and payments
• Delivering analyses, market intelligence, and competitive insights
• Responding to support requests and technical issues

3.2 Service Improvement

• Analyzing usage patterns to improve features and user experience
• Developing new modules and capabilities
• Debugging and fixing technical issues
• Training and improving our machine learning models

3.3 Communication

• Sending transactional emails (account confirmations, password resets, billing receipts)
• Sending product updates, feature announcements, and service-related notices
• Responding to inquiries and support requests
• Sending marketing communications (with your consent, if applicable)

3.4 Analytics and Research

• Understanding market trends and competitive dynamics
• Generating anonymized, aggregated insights about platform usage
• Measuring service performance and reliability

3.5 Legal Compliance

• Complying with applicable laws, regulations, and legal obligations
• Responding to government requests, court orders, or subpoenas
• Protecting against fraud, abuse, and security threats
• Enforcing our Terms and Conditions and other agreements

4. How We Share Your Information

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

4.2 Sharing With Service Providers

We share information with trusted third-party vendors who help us operate the Service:

• Payment Processors: Stripe, Square, or similar services (for billing)
• Cloud Infrastructure: Amazon Web Services, Google Cloud, or similar providers
• Email Services: SendGrid, Mailgun, or similar services (for transactional emails)
• Analytics Platforms: Google Analytics (anonymized usage data only)
• Customer Support Tools: Help desk and ticketing systems

These vendors are contractually obligated to:

• Use your information only to provide services to us
• Maintain strict confidentiality
• Comply with applicable data protection laws

4.3 Sharing When Required by Law

We may disclose your information when:

• Required by law (subpoenas, court orders, government requests)
• Necessary to protect our legal rights and the safety of our users
• Investigating fraud, security violations, or Terms violations
• Complying with regulatory requirements

We will attempt to provide you with notice of legal requests when permitted by law.

4.4 Business Transfers

If SignalMax is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice and, where applicable, seek your consent before such transfer.

4.5 With Your Explicit Consent

We may share information with third parties only when you explicitly consent. For example:

• Integrations with third-party tools (if you authorize such integration)
• Sharing analysis results with specific team members or stakeholders (at your direction)

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted.
• Access Controls: Only authorized employees with a legitimate business need can access your personal data.
• Authentication: Multi-factor authentication (MFA) available for account security.
• Regular Audits: We conduct regular security assessments and penetration testing.
• Data Minimization: We collect only the information necessary to provide the Service.

5.2 Security Limitations

While we strive to protect your information, no system is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and account credentials.

5.3 Data Breach Notification

In the event of a confirmed data breach involving personal information, we will:

• Notify affected users without unreasonable delay (typically within 30 days)
• Provide information about the breach and recommended protective steps
• Comply with all applicable notification laws

6. Your Data Rights

6.1 Access

You have the right to request access to the personal information we hold about you. You can download your account information and usage data from your ProductBrain dashboard, or contact us for assistance.

6.2 Correction

You may request that we correct inaccurate or incomplete personal information. You can update your account information directly in your profile settings.

6.3 Deletion

You have the right to request deletion of your personal data, subject to legal and operational constraints:

• Upon account termination, we delete or anonymize your personal account data within 90 days
• Some data may be retained for legal, compliance, or legitimate business purposes
• Aggregated, anonymized data may be retained indefinitely

6.4 Data Portability

You have the right to request a copy of your data in a portable format. We will provide this within a reasonable timeframe (typically 30 days).

6.5 Opt-Out

• Marketing Communications: You can unsubscribe from promotional emails by clicking the unsubscribe link in any email or updating your preferences in your account settings.
• Analytics: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.
• Cookies: You can manage cookie preferences through your browser settings.

6.6 Data Subject Rights (GDPR/CCPA)

If you are located in the European Union, United Kingdom, California, or other jurisdictions with data protection laws, you have additional rights:

• Right to Know (CCPA): Request what personal information is collected, used, and shared
• Right to Deletion (GDPR/CCPA): Request deletion of personal data (with exceptions)
• Right to Opt-Out (CCPA): Opt out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your data rights
• Right to Rectification (GDPR): Request correction of inaccurate data
• Right to Restrict Processing (GDPR): Request that we limit how we use your data
• Right to Object (GDPR): Object to processing of your data on certain grounds

To exercise these rights, contact us at privacy@product-brain.com with your request details.

7. Data Retention

7.1 Retention Policy

• Account Data: Retained while your account is active. Deleted or anonymized within 90 days of account termination.
• Payment Data: Retained for 7 years (required for tax and financial compliance).
• Usage and Analytics Data: Retained for up to 2 years; older data is aggregated and anonymized.
• Web Visitor Data: Anonymous visitor records, sessions, IP addresses, and derived company info are retained for up to 2 years, after which the records are deleted or anonymized.
• Support Communications: Retained for 3 years or as required by law.
• Backup Data: May be retained for up to 30 days for disaster recovery purposes.

7.2 Legal Holds

We may retain information longer if required by law, for legal proceedings, or to comply with government requests.

8. Cookies and Tracking Technologies

8.1 Types of Cookies

Essential Cookies

• Session management (login, authentication)
• CSRF protection
• Necessary for Service functionality

Analytics Cookies

• Google Analytics to understand user behavior
• Improvements to user experience and feature development

Marketing Cookies

• Used only with your consent
• Track campaigns and remarketing efforts

8.2 Managing Cookies

You can control cookies through your browser settings:

• Accept or reject cookies
• Delete stored cookies
• Receive warnings before cookies are stored

Note: Disabling essential cookies may impair Service functionality.

8.3 Do Not Track

We honor “Do Not Track” signals from your browser, though we cannot guarantee all partners will honor such requests.

9. Third-Party Links

ProductBrain may contain links to third-party websites, services, and applications. This Privacy Policy applies only to ProductBrain. We are not responsible for the privacy practices of third-party services.

We encourage you to review the privacy policies of any third-party services before providing your information.

10. Children’s Privacy

ProductBrain is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete such information promptly.

If you are under 18, please obtain parental consent before using ProductBrain.

11. International Data Transfers

ProductBrain is operated from the United States. Your information may be transferred to, stored in, and processed in the United States or other countries where we operate.

For EU/UK Users: We comply with the GDPR and utilize appropriate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Privacy Shield certification (where applicable)
• Your explicit consent

By using ProductBrain, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request what personal information we collect, use, and share
• Right to Delete: Request deletion of personal information (with exceptions)
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data, but we may share with service providers)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Correct: Request correction of inaccurate personal information

To submit a request, contact us at privacy@product-brain.com and include “CCPA Request” in the subject line.

13. Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of covered information. While we do not sell personal information, Nevada residents may submit opt-out requests to privacy@product-brain.com.

14. EU/UK Data Protection

Legal Basis for Processing:

• Contract performance (providing the Service)
• Legal obligations (compliance)
• Legitimate interests (service improvement, fraud prevention)
• Consent (marketing, optional features)

GDPR Rights: EU/UK residents have the rights described in Section 6.6 of this policy.

15. Contact Us

If you have questions about this Privacy Policy, requests regarding your data, or privacy concerns, please contact us at:

Response Time: We will respond to privacy inquiries within 30 days.

16. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a new “Last Updated” date.

Your rights: If we make material changes to how we use your information, we will provide notice and, where required by law, seek your consent.

Your continued use of ProductBrain after changes indicates your acceptance of the updated Privacy Policy.

Appendix: Data Processing Addendum (DPA)

For customers subject to GDPR or similar regulations, we offer a Data Processing Addendum (DPA) available upon request. The DPA specifies:

• Our role as a Data Processor
• Data subject rights and obligations
• Security measures and certifications
• Sub-processor information
• Data breach notification procedures

Request a DPA by contacting dpo@product-brain.com.