Privacy Policy & Data Protection

Signalis Systems Inc. ("Signalis," "we," "us," or "our") operates the Signalis early renewal-risk detection intelligence platform. This Privacy Policy details the rigorous protocols under which customer enterprise telemetry, call recordings, support interactions, and organizational communications are processed, protected, and isolated.

2. Architectural Encryption & Security Standards

Signalis enforces bank-grade security standards across all layers of our data pipeline:

• Data in Transit: All incoming webhooks, streaming API feeds, and browser sessions are strictly enforced using Transport Layer Security (TLS) version 1.3. Deprecated protocols (TLS 1.0, 1.1, and 1.2) are systematically refused at our edge gateways.
• Data at Rest: All stored telemetry, extracted entity graphs, and early-warning index scores are encrypted using Advanced Encryption Standard with 256-bit keys (AES-256) at the storage volume and database record level.
• Key Management (BYOK): Enterprise tier customers may provision Customer-Managed Encryption Keys via AWS Key Management Service (KMS) or Google Cloud KMS, retaining unilateral authority to revoke decryption privileges at any instant.
• Tenant Isolation: Customer workspace telemetry is logically and cryptographically partitioned. Zero cross-tenant data pooling or collective benchmarking takes place without explicit cryptographic anonymization.

3. Telemetry Ingested and Scope of Processing

Signalis acts solely as a Data Processor on behalf of our enterprise customers. To calculate upstream renewal indicators, the platform ingests authorized telemetry feeds via customer-configured OAuth integrations:

• Meeting & Calendar Telemetry: Meeting subject lines, scheduled durations, attendee email addresses, acceptance status, and seniority hierarchies from Google Calendar and Microsoft 365 Exchange. Meeting notes or attached confidential files are excluded from default ingestion.
• Call Audio & Transcripts: Customer conversational streams originating from Gong, Zoom, and Chorus. We extract speaker turns, acoustic hesitation coefficients, and conversational sentiment inflection points.
• Support Interaction Metadata: Ticket creation timestamps, time-to-first-response, reopening occurrences, customer tone gradient scores, and escalation tags from Zendesk, Freshdesk, and Jira Service Management.
• Shared Communication Channels: Message frequency, response latency, and emoji reactions from designated Slack Connect and Microsoft Teams customer-facing channels.

4. Compliance with GDPR & CCPA / CPRA

Signalis complies with the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

4.1 Rights of Data Subjects

Depending on your jurisdiction, data subjects possess the following non-waivable statutory rights regarding their personal telemetry:

• Right of Access: The right to obtain confirmation as to whether personal data concerning them is being processed and receive a machine-readable copy.
• Right to Rectification: The right to require the correction of inaccurate or incomplete corporate contact data.
• Right to Erasure ("Right to be Forgotten"): The right to compel the permanent deletion of personal records across all active databases and secondary backups within thirty (30) days.
• Right to Data Portability: The right to export all account telemetry and calculated early-warning indicators in standard JSON format.
• Right to Non-Discrimination: We will never deny services, charge differentiated pricing, or alter service levels based on an individual exercising their statutory privacy rights.

5. Data Retention & Deletion Schedules

Signalis does not store unstructured customer conversational content indefinitely. We enforce an automated rolling data retention policy:

• Raw Audio & Full Transcripts: Automatically purged from primary memory within ninety (90) days of ingestion, retaining only calculated mathematical vector embeddings and sentiment inflection scores.
• Account Index Scores & Timelines: Maintained for the duration of the customer's active subscription to establish historical renewal velocity models.
• Contract Termination Deletion: Upon subscription expiration or termination, all associated tenant data, cryptographic keys, and index backups are irreversibly overwritten within thirty (30) calendar days.

6. Sub-processors & Infrastructure Partners

Signalis hosts all production infrastructure within SOC 2 Type II, ISO 27001, and FedRAMP certified data centers provided by Amazon Web Services (AWS) and Google Cloud Platform (GCP). Telemetry processing is localized within the geographical jurisdiction specified in the customer's Enterprise Service Agreement (United States, European Union, or United Kingdom).

7. Contacting the Data Protection Officer

For inquiries regarding our cryptographic verification, sub-processor lists, or to execute a Data Subject Access Request (DSAR), contact our compliance office directly:

Data Protection Officer
Signalis Systems Inc.
Direct Privacy Inquiries: privacy@signalis.online
General Security Support: support@signalis.online