Privacy Policy

1. Who we are

This Privacy Policy covers SignalX, offered as a website at signal-x.app and as an Android app on Google Play. The same account works on both. SignalX is operated by two affiliated businesses that act together as data controllers:

• Viva Technologies Lab, LLC, a Delaware limited liability company in the United States. It runs the website and sells web subscriptions and API credits through Stripe.
• 비바테크놀로지스 (Viva Technologies), a sole proprietorship in the Republic of Korea (representative: 이모세). It publishes the Android app and sells in-app subscriptions through Google Play Billing.

"We", "us" and "our" mean both. Questions about this policy go to contact@vivatechlab.com.

2. Information we collect

Account. When you sign in with Google we receive your name, email address and profile picture. We do not receive or store your Google password.

Settings and activity. Your plan and trial dates, the number of AI research questions and analyses you use (for quotas), the companies you follow, language and notification settings, and in the Android app a push notification token.

How you found us. When you arrive on the website from another site or from a link with campaign tags (for example an ad or a social post), a first-party cookie remembers for up to 30 days the campaign tags (UTM), which kind of ad click ID was present (not its value), the referring site's domain, the first page you opened and whether you used an in-app browser such as Instagram's. If you then create an account on the website, we save this with your account as its sign-up source and delete the cookie when you sign in.

AI research questions. The questions you type and the conversation so far are sent to our AI providers to produce an answer (Section 4). We do not store your questions or answers on our servers. Your browser keeps the current conversation in that tab so it survives a reload, and clears it when you close the tab or sign out.

Shared chats. If you press Share on an answer, we store that question, answer and its sources so anyone with the link can view it. Shared pages are not listed or indexed by search engines.

Reports and support messages. When you report a data error or contact support we store your message, the page address, an email address if you give one, your browser, screen size and language, and, if you are not signed in, a salted one-way hash of your network address to stop spam.

Payments. For web purchases Stripe collects your card details; we only receive your Stripe customer ID, subscription status and billing dates, and for API auto-recharge the ID of the saved payment method. For Android purchases we receive the Google Play purchase token and product. We never see or store full card numbers.

Developer API. API keys (stored only as a one-way hash plus a short prefix), request counts, credits used and tokens per request, and your credit purchases.

Technical data. IP address, browser and device type and request logs kept by our hosting providers, and error reports (Sentry) that include the page, browser and device and, on signed-in pages, a short screen recording around the error with all text and inputs masked.

Android app advertising (Free plan only). Free users of the Android app see banner ads and can choose to watch rewarded ads, served by Google AdMob. AdMob may collect your advertising ID, IP address, device and app information and ad interactions for ad delivery, frequency capping, measurement and fraud prevention. We request non-personalized ads only. Pro and Premium subscribers do not see ads. You can reset or delete your advertising ID in your Android settings (Settings > Privacy > Ads, or Settings > Google > Ads).

We do not collect precise location, contacts, photos, microphone or camera data, and we do not ask for sensitive information such as health, beliefs or government ID numbers. Please do not put such information in AI questions or reports.

3. How we use information

• To sign you in, provide the service and the plan you chose, and enforce quotas (performance of our contract with you).
• To answer AI research questions, generate summaries and keep shared links working (contract).
• To process payments, refunds and taxes (contract and legal obligation).
• To keep the service secure, prevent spam, fraud and abuse, and fix errors (our legitimate interests).
• To learn which ads, posts and websites bring sign-ups, using the sign-up source (our legitimate interests).
• To send service messages such as billing notices and, if you turn them on, filing alerts (contract, or your consent for push notifications).
• To show non-personalized ads to Free users of the Android app (legitimate interests).

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your questions to train AI models. Under their terms, OpenAI, Anthropic and TypeSafe do not use API data to train their models.

5. International transfers

Depending on where you live, your data may be processed in a country other than your own, including the Republic of Korea (our database) and the United States (several providers in Section 4). These transfers happen over encrypted connections when you use the service and are necessary to provide it. We rely on our providers' contractual safeguards, such as standard contractual clauses where they apply. If you do not want your data transferred, you can stop using the service and delete your account, which ends the transfers. Users in Korea can find the details required by the Personal Information Protection Act in the Korean section below.

6. How long we keep data

Aggregated counts that cannot identify you (for example, how many people upgraded in a month) may be kept after the data above is deleted.

7. Cookies and browser storage

On the website we use essential cookies that keep you signed in and one first-party cookie that remembers how you first arrived, for up to 30 days (Section 2). We also use your browser's local and session storage for things like your language, theme, the current chat in that tab and short-lived page caches. We do not use third-party analytics, advertising or cross-site tracking cookies on the website. Pages that show ads (some public company, sector and screener pages) load Google AdSense, which may set its own cookies under Google's policies. You can block or delete cookies and storage in your browser settings; if you block the sign-in cookies you will not be able to sign in.

8. Your rights

You can ask us to:

• Access the personal data we hold about you or get a copy of it.
• Correct inaccurate data.
• Delete your account and data (Section 9).
• Restrict or object to processing, or withdraw consent where processing is based on consent (for example, turn off push notifications in the app or your device settings).

Email contact@vivatechlab.com from the address on your account. We will reply within 30 days (within 10 days for requests under Korean law) and will not treat you differently for using these rights. If you are in the EU, UK or a US state with a privacy law (such as California), these rights apply as described in your local law, and you may also complain to your data protection authority. An authorized agent may make a request for you if we can verify it.

10. Security

Data is encrypted in transit (HTTPS) and at rest. Database access is limited by row-level security so each account can only read its own private data, and administrative access is restricted to named staff. We do not store passwords (sign-in is through Google), API keys are stored only as hashes, and card details stay with Stripe and Google. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.

11. Children

SignalX is not directed to children. We do not knowingly collect personal information from children under 13, or under 14 in the Republic of Korea. If you believe a child has given us personal information, contact contact@vivatechlab.com and we will delete it.

12. Changes to this policy

We will post any change on this page and update the date above. For material changes we will also give notice in the service or by email at least 7 days before they take effect (30 days if the change reduces your rights).

13. Contact

Privacy questions and requests: contact@vivatechlab.com. Privacy officer: 이모세 (Representative / 대표).