Privacy Policy

Last updated: 2 June 2026

GrowthSignal ("we", "our", or "us") operates growthsignal.live and app.growthsignal.live. This policy explains how we collect, use, and protect your information when you use our service.

Minimum Age

GrowthSignal is an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. By registering, you confirm that you are 18 or older. If we become aware that a user is under 18, we will delete their account and associated data without delay.

Information We Collect

When you register, we collect:

• Your email address and a hashed (irreversible) password
• Your creator name and primary Reddit username
• Niche match terms you provide
• A record that you confirmed your age (18+) and agreed to our Terms of Service and Privacy Policy at registration, including the date and time of that confirmation

During use of the platform, we store:

• Your workspace configuration — subreddit lists, readiness states, and operator notes
• Managed Reddit account names you add to your workspace
• Outcome log entries (post outcomes, dates, subreddits) that you create
• Session information required for authentication
• Reddit activity snapshot data sourced from public Reddit profiles via the Qoest API (where you choose to sync this)

How We Use Your Information

We use your data to:

• Operate and personalise your GrowthSignal workspace
• Calculate subreddit match scores based on your niche terms
• Provide account building and discovery intelligence features
• Send transactional emails (account confirmation, password reset, billing notifications)
• Maintain records of age and consent confirmations as required by law
• Process subscription payments via Stripe

Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you have subscribed to
• Consent — your explicit confirmation at registration that you are 18+ and agree to these terms; you may withdraw consent by deleting your account
• Legitimate interests — operating and securing the platform, preventing fraud and misuse, maintaining service reliability
• Legal obligation — retaining consent records as required by applicable law

What We Do Not Collect

• We do not access, store, or interact with your Reddit account credentials or OAuth tokens
• We do not collect payment card details (these are handled entirely by Stripe)
• We do not track your browsing history across other websites
• We do not sell, rent, or share your personal data with third parties for marketing purposes
• We do not use your data to train AI or machine learning models

Reddit Data

The Creator Activity snapshot feature uses publicly available Reddit profile data sourced via the Qoest API. This includes recent post and comment activity visible on your public Reddit profile. We do not post, comment, vote, or take any action on Reddit on your behalf. Reddit's own privacy policy governs the data that Reddit makes publicly available.

Third-Party Service Providers

We use the following third-party services in the operation of GrowthSignal:

• Stripe — payment processing. Stripe's privacy policy governs how they handle your billing information.
• Qoest — Reddit public data API used for the Creator Activity snapshot feature. Data accessed is limited to publicly available Reddit profile activity.
• Resend — transactional email delivery for account and billing notifications.

These providers act as data processors on our behalf and are contractually required to handle your data in accordance with applicable data protection law.

Data Isolation

Your workspace data — including your subreddit list, match terms, outcome logs, and account configuration — is private to your account. No data is shared between users of the platform.

Data Storage and Security

Your data is stored on servers located in the United Kingdom. Access to stored data is protected by authentication and access controls. Passwords are stored as one-way hashes and cannot be recovered.

Data Retention

We retain your personal data for the duration of your active subscription. Following cancellation or account deletion, we retain data for up to 90 days to support account recovery requests, after which it is deleted. Consent records (age confirmation and ToS agreement) are retained for up to 7 years as required for legal compliance purposes.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Withdraw consent (by deleting your account)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at support@growthsignal.live. We will respond within 30 days.

Changes to This Policy

We may update this policy as the product evolves. We will notify registered users of material changes by email with at least 14 days' notice before the change takes effect.

Contact

Questions about this policy or your data: support@growthsignal.live