Privacy Policy

Last Updated: November 29, 2024

Signal X Studio ("we," "our," or "us") operates CIX - Commerce Intelligence Experience (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, and organization name when you create an account
• Profile Information: Job title, industry, role preferences
• Workspace Data: Transformation goals, capability selections, industry classifications
• Conversation Data: Messages and queries submitted to the AI transformation advisor
• Community Content: Posts, comments, and reactions you submit to the knowledge base

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, capabilities explored, time spent
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, and referring URLs
• Progress Data: Capability adoption rates, transformation journey snapshots, gap analysis results

1.3 Information from Third Parties

We may receive information from third-party services you connect to your account.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Power AI-driven gap analysis and capability recommendations
• Generate personalized transformation roadmaps
• Enable semantic search across 137 capabilities and 550 functions
• Facilitate community knowledge sharing
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends

3. Third-Party Services

3.1 Infrastructure and Analytics

We use the following third-party services that may collect information:

• Supabase: Database, authentication, storage, and real-time features
• Sentry: Error tracking and performance monitoring

3.2 Artificial Intelligence Services

Important: Our Service uses third-party AI providers to power the transformation advisor and semantic search features. When you use AI-powered features, your input may be sent to:

• OpenAI (GPT-4 Turbo): For conversational AI and gap analysis
• OpenAI Embeddings: For semantic search across capabilities

What this means for you:

• Your queries and transformation context are processed by OpenAI to generate recommendations
• We do not control how OpenAI handles data beyond our agreements with them
• OpenAI has its own privacy policy governing data use
• We do not use your data to train AI models; however, OpenAI may have their own policies

3.3 Data Sub-Processors

4. Community Content

CIQ includes a community knowledge base where users can share posts, comments, and reactions. Please be aware:

• Content you post may be visible to other users
• You retain ownership of your contributions
• By posting, you grant us a license to display your content within the Service
• We may moderate content that violates our community guidelines

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in Transit: All data is transmitted over HTTPS/TLS
• Row-Level Security: Multi-tenant data isolation via Supabase RLS policies
• Access Controls: Role-based access within workspaces
• Secure Authentication: Supabase Auth with secure session management

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a portable copy of your data
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing

To exercise these rights, contact us at hello@signalx.studio.

7.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information to third parties.

8. Open Source License

CIQ is licensed under the MIT License. The privacy practices described here apply to our hosted version of the Service. Self-hosted instances are subject to the privacy practices of the hosting party.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

Signal X Studio
Email: hello@signalx.studio

This Privacy Policy is effective as of November 29, 2024.