SignalX

1. Introduction

This Privacy Policy applies to the SignalX platform, which is offered as a web service at signal-x.app and as an Android application distributed via Google Play.

The service is operated by two affiliated entities acting jointly as data controllers:

Viva Technologies Lab, LLC — a limited liability company registered in the United States; operates the web service at signal-x.app and processes web payments via Stripe.
Viva Technologies (비바테크놀로지스) — a sole proprietorship registered in the Republic of Korea; publishes the SignalX Android application on Google Play and processes in-app subscription payments via Google Play Billing.

Collectively referred to as "we," "our," or "us." This Privacy Policy explains how we collect, use, and protect your information across both the web and mobile app.

2. Information We Collect

Account Information: When you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Usage Data: We may collect information about how you interact with our service, including pages visited, features used, and the number of AI research queries made for quota enforcement.

Purchase & Subscription Data: When you subscribe, we store a purchase token (from Stripe for web, or Google Play Billing for Android), your subscription tier, and the current billing period end date. We do not store your credit card or bank account details — these are handled entirely by Stripe or Google.

Mobile App Data (Android only): The mobile app may access limited device information required by Google Play Billing (such as a Google Play purchase token) to verify your subscription status. We do not collect precise location, contacts, photos, microphone, or camera data.

Cookies: On the web, we use essential cookies to maintain your authentication session. No third-party tracking cookies are used. The mobile app does not use web cookies.

3. How We Use Your Information

To authenticate your identity and provide access to the platform
To display your profile information within the application
To improve and maintain our service
To communicate important service updates

4. Data Storage & Security

Your data is stored securely using Supabase, which provides enterprise-grade security with row-level security, encryption at rest, and encryption in transit. We do not sell, rent, or share your personal information with third parties.

5. Third-Party Services

Our service integrates with the following third-party services:

Google OAuth — for authentication
Google Play Billing — for processing Android in-app subscription payments
Supabase — for data storage and authentication
Google Cloud Platform — for backend services (Cloud Run, Pub/Sub)
SEC EDGAR — for public filing data (no personal data shared)
Stripe — for web payment processing (we do not store your payment card details)
Anthropic and OpenAI — for AI analysis of public SEC filings; no personal data is sent to these services
Vercel — for web hosting

6. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you.
Correct — update inaccurate or incomplete personal data.
Delete — request deletion of your account and personal data (see Section 7).
Withdraw consent — revoke SignalX's access through your Google Account settings at any time.
Object / Restrict — object to certain processing activities, where applicable under GDPR or PIPA.

To exercise any of these rights, contact us at contact@vivatechlab.com. We will respond within 30 days.

7. Account Deletion

You may delete your account and all associated personal data at any time using one of the following methods:

In the mobile app: Open the Android app → Settings tab → Danger zone → Delete account → confirm.
On the web: Sign in at https://signal-x.app/settings → scroll to Delete Account → confirm. This is accessible from any browser without installing the app.
Email: Send a deletion request from your registered email to contact@vivatechlab.com.

What gets deleted: profile information (name, email, avatar), usage history, AI query logs, watchlists, and subscription records. What is retained: anonymized, aggregated analytics and records required for legal or tax compliance (e.g., invoices) for the period mandated by applicable law.

Your data will be removed within 30 days of the request. Active subscriptions must be cancelled separately through your billing provider (Stripe Customer Portal or Google Play subscriptions page) before deletion.

8. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, subject to the exceptions noted in Section 7.

9. Children's Privacy

SignalX is not directed to children under the age of 13 (or under 14 in the Republic of Korea, as required by PIPA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at contact@vivatechlab.com and we will promptly delete such information.

10. International Data Transfers

Your personal data may be transferred to and processed in countries other than the country in which you reside, including the United States (where Supabase, Stripe, Vercel, Anthropic, and OpenAI operate). We rely on standard contractual safeguards provided by these service providers. By using SignalX, you consent to this transfer. If you are a user in the Republic of Korea, this constitutes consent under Article 17-2 of PIPA.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also provide in-app or email notice.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: contact@vivatechlab.com