Privacy Policy

ManySignal collects information you provide directly — name, business email, job title, company name, and phone number — when you create an account, fill out a contact form, request a demo, or correspond with our team. We also collect billing and payment information through our payment processor when you subscribe to a paid plan.

We collect information automatically when you visit our website or use the Service: IP address, browser type and version, operating system, referral URLs, pages viewed, time spent per page, links clicked, and other clickstream data. Our servers log this data for security and performance purposes.

Customers who deploy the ManySignal platform transmit security telemetry ("Customer Data") to the Service for processing. Customer Data is subject to the Data Processing Addendum and the commercial agreement, not this Privacy Policy.

We use contact and account information to provision and support the Service, send transactional communications (account setup, password resets, invoice receipts), and respond to support and sales inquiries. We do not sell personal data to third parties.

We use automatically collected data to monitor site performance, diagnose technical issues, detect fraud and abuse, and generate aggregate analytics that inform product decisions. These analytics are de-identified before any team-level review.

We may send marketing communications — product announcements, security research, webinar invitations — to business contacts who have engaged with us or who have not opted out. Every marketing message includes a one-click unsubscribe link.

ManySignal uses cookies and similar technologies. Strictly-necessary cookies are required for authentication and session management and cannot be disabled. Analytics cookies (provided by PostHog) help us understand how visitors navigate the site. Marketing cookies (provided by HubSpot and LinkedIn Insight Tag) support lead attribution and remarketing campaigns.

You can manage your cookie preferences via the consent banner displayed on first visit to our website. Withdrawing consent for analytics and marketing cookies does not affect your ability to use the Service. See the Cookie Policy for the full cookie inventory.

Where data-protection law requires a legal basis, ManySignal processes personal data under the following: (a) Contract — to perform obligations under your subscription or to take steps at your request before entering a contract; (b) Legitimate interests — to operate and improve the Service, detect and prevent abuse, and conduct business-to-business marketing, provided those interests are not overridden by your rights; (c) Consent — for optional analytics and marketing cookies and for direct marketing where required by law; (d) Legal obligation — to comply with applicable laws, including tax, financial reporting, and law-enforcement requests.

We share personal data with service providers acting as processors on our behalf: cloud infrastructure (AWS, GCP), error monitoring (Sentry), observability (Datadog), CRM and marketing automation (HubSpot), payment processing (Stripe), and customer support tooling. Each provider is bound by a data-processing agreement and may only process data as directed by ManySignal.

We may disclose personal data to comply with a court order, subpoena, or legal obligation; to enforce our agreements; or to protect the rights, property, or safety of ManySignal, our customers, or the public. We will notify you of any government request for your data unless prohibited by law from doing so.

We do not share personal data with advertisers or data brokers. We do not sell personal data as defined under the CCPA or any equivalent statute.

ManySignal is headquartered in the United States. If you are located in the European Economic Area, United Kingdom, or Switzerland, your personal data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses approved by the European Commission (Module Two: Controller to Processor) as the transfer mechanism for such transfers. Copies of the applicable SCCs are available upon request at privacy@manysignal.com.

Account and contact data is retained for the duration of the business relationship and for up to three years thereafter for audit and legal-hold purposes, unless a shorter retention period is required by law or requested under the right to erasure (see below).

Website analytics data is retained in identifiable form for 13 months, after which it is aggregated and anonymised. Server access logs are retained for 90 days and then deleted. Marketing engagement data is retained until you unsubscribe or request deletion.

Backup snapshots are retained for 30 days and are purged on a rolling basis. Deletion requests are applied to all production and warm-standby systems within 30 days and to backup archives within the next rotation cycle.

If you are located in the EEA, UK, or Switzerland, you have the right to: access a copy of the personal data we hold about you; rectify inaccurate data; request erasure (subject to legitimate retention obligations); restrict processing; data portability in a machine-readable format; object to processing based on legitimate interests or for direct marketing; and withdraw consent at any time where processing is based on consent.

To exercise these rights, submit a request to privacy@manysignal.com. We will respond within 30 days. We may need to verify your identity before fulfilling the request. You also have the right to lodge a complaint with the supervisory authority in your jurisdiction.

California residents have the right to know what personal information we collect, the right to delete personal information (subject to exceptions), the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising these rights. ManySignal does not sell or share personal information as those terms are defined under the CCPA.

To submit a CCPA rights request, email privacy@manysignal.com or use the Data Removal Request form. We will respond within 45 calendar days. Authorised agents may submit requests on your behalf with written authorisation.

The Service is directed at business professionals and is not intended for, and we do not knowingly collect personal data from, individuals under the age of 16. If we learn that we have inadvertently collected data from a child under 16, we will delete it promptly. If you believe a child has provided us data, please contact privacy@manysignal.com.

For privacy-related questions, requests, or complaints, contact our Privacy team at privacy@manysignal.com or by post at ManySignal, Inc., Privacy Team, 1 Market Street, Suite 300, San Francisco, CA 94105.

Our EU representative and Data Protection Officer contact can be reached at dpo@manysignal.com. We aim to resolve all privacy inquiries within 30 days. If you are unsatisfied with our response, you may escalate to the relevant supervisory authority.