Privacy Policy

Last updated: 2025-12-25

This Privacy Policy explains how Signal Hunt (“Signal Hunt”, “we”, “us”, “our”) collects, uses, discloses, and protects information when you use our website, web app, and browser extension (collectively, the “Service”).

If you do not agree with this Privacy Policy, do not use the Service.

1. What Signal Hunt Does

Signal Hunt is an AI-driven Reddit business-signal discovery and validation workflow (“extension + web app”). You can analyze public Reddit sources (subreddits, search results, custom feeds) and generate evidence-backed reports (including “6-Signals” packs and an “Evidence Pack” with source links).

2. Information We Collect

2.1 Information you provide

Account information: name, email address, profile image (if provided through your sign-in method).
Communications: messages you send to us (for example, support requests).

2.2 Information we collect when you use the Service

Authentication and session data: login identifiers and session tokens/cookies used to keep you signed in.
OAuth provider data: identifiers and, in some cases, tokens received from your chosen sign-in provider (for example, Google or GitHub) to enable authentication.
Usage and technical data: device/browser type, pages viewed, approximate location inferred from IP address, and diagnostic logs needed to operate and secure the Service.
Report and workspace data: your created reports, saved opportunities, favorites, and related metadata (for example, the selected source type/name and time range).

2.3 Public Reddit content you choose to analyze

The Service processes public Reddit posts and comments from the sources you select in the browser extension. Depending on your workflow, we may:

Fetch posts/comments from Reddit’s public endpoints.
Send selected text (post titles, post bodies, and comment excerpts) to our servers to generate analyses and reports.
Store parts of the generated output, including evidence snippets and source links, so you can revisit reports later.

We do not ask for your Reddit password. We do not intentionally collect or access private messages on Reddit.Please do not submit sensitive personal information to the Service. Public Reddit content may sometimes contain personal information posted by third parties, and our reports may include excerpts and links for verification.

2.4 Payment and subscription data

If you purchase a subscription, our payment provider (Lemon Squeezy) processes your payment information. We receive and store limited billing-related data such as customer/subscription identifiers and plan status. We do not store full payment card numbers.

2.5 Browser extension permissions and access

The Signal Hunt browser extension is designed to work inside Reddit context. For example, it may:

Read the URL of your active tab to detect whether you are on a supported Reddit source (such as a subreddit, search result page, or custom feed).
Fetch publicly available Reddit content via reddit.com endpoints to perform the scan you initiated.

We do not intentionally read the contents of non-Reddit pages. We do not require your Reddit password.

3. How We Use Information

We use information to:

Provide and operate the Service (create accounts, authenticate users, generate and store reports).
Process subscriptions and manage billing status.
Send transactional communications (for example, sign-in links and account notices).
Maintain security, prevent abuse, and debug issues.
Improve and develop the Service (for example, improve relevance and output quality).
Comply with legal obligations and enforce our agreements.

We share information only as needed to provide the Service, including with:

Authentication providers: Google and GitHub (if you choose those sign-in methods).
Email delivery: Resend (for magic-link or transactional emails).
Payments and merchant-of-record: Lemon Squeezy (for checkout, tax handling, invoicing, and subscription lifecycle).
AI processing: OpenAI and/or other model providers configured by us to generate analyses from the content you submit for analysis.
Content platform: Sanity (to manage marketing and documentation content).
Hosting and infrastructure providers: for example, hosting platforms and database providers used to run the Service.

When you analyze Reddit sources, Reddit’s own services and policies apply. Signal Hunt is not affiliated with Reddit.

We may also disclose information:

To comply with law or legal process.
To protect the rights, safety, and security of our users, the Service, and the public.
In connection with a business transfer (for example, a merger or acquisition).

5. Legal Bases (EEA/UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data under the following legal bases:

Contract: to provide the Service you request.
Legitimate interests: to secure, operate, and improve the Service.
Consent: where required (for example, certain cookie categories, if applicable).
Legal obligation: to comply with applicable laws.

6. Cookies and Similar Technologies

The Service uses cookies and similar technologies for essential functionality, including authentication and session management. You can control cookies through your browser settings. If you disable cookies, some parts of the Service may not work.

7. Data Retention

We retain personal data for as long as needed to provide the Service and for legitimate business purposes such as complying with legal obligations, resolving disputes, and enforcing agreements.

In general:

Account data is retained while your account is active.
Reports and saved opportunities are retained so you can access your research history, unless you delete them or request deletion.
Technical logs are retained for a limited period, as needed for security and diagnostics.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No system is 100% secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to:

Access, correct, or delete your personal information.
Object to or restrict certain processing.
Receive a portable copy of your information.
Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the information in Section 13.If you are in the EEA/UK, you may also lodge a complaint with your local data protection authority.

9.1 California (CCPA/CPRA)

We do not sell personal information in exchange for money. We do not share personal information for cross-context behavioral advertising as defined by the CPRA.

10. International Data Transfers

We may process and store information in countries other than your own, including the United States and other jurisdictions where our service providers operate. When required, we rely on appropriate safeguards for international transfers.

11. Children’s Privacy

The Service is not intended for children, and we do not knowingly collect personal information from children under 13 (or under the age required by your jurisdiction). If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date.

13. Contact Us

If you have questions or requests related to privacy, contact:

Email: sancijun@gmail.com