Privacy Policy

When you sign up, we collect your email address and, optionally, your team name. We use this to personalize your account and communicate service updates. We never sell your personal information to third parties.

Payment details are processed directly by our payment processor (Stripe) and never touch modsignal servers. We retain transaction records and billing addresses for invoicing and fraud detection.

For each monitor we store its configuration: the watched URL, your prompt, the check tier, and the schedule. On each check we store a snapshot of the fetched page and, when something changes, the resulting alert — the before, the after, the generated sentence, and its confidence score — as your evidence trail.

We log anonymized IP addresses during signup and account access for security and fraud prevention purposes.

Our marketing site runs no third-party trackers and sets no tracking cookies. We do not use Google Analytics. No personal data is shared with advertisers.

The dashboard uses first-party cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

• To provide, maintain, and improve the modsignal service
• To run the checks you configured and deliver alerts
• To authenticate your requests and manage your account
• To process payments and send invoices
• To send service-related communications (e.g., security alerts, downtime notices)
• To detect and prevent fraud and abuse
• To comply with legal obligations

modsignal employees access your account data only with your permission (e.g., when troubleshooting a support request) or as a last resort when investigating potential abuse. We may disclose data when legally required or to third-party subprocessors listed on our Subprocessors page.

Monitors on the semantic and browser-agent tiers send the fetched page content and your prompt to Anthropic's API for analysis. This processing happens per-check; under Anthropic's commercial API terms, this data is not used to train models. Exact-diff monitors involve no AI processing.

All data in transit is encrypted via TLS. All data at rest is encrypted. Database backups are encrypted. We use row-level security policies to ensure data isolation between teams.

Under the GDPR and other applicable data protection laws, you have the following rights:

• Right to know — what personal data we collect and why
• Right of access — request a copy of your personal data
• Right to correction — correct inaccurate personal data
• Right to erasure — request deletion of your personal data (this may prevent continued service use)

Account data is retained for the duration of your account. Upon account deletion, all data is permanently removed from active systems within 30 days and from backups within 60 days. Page snapshots and alert history are deleted with the monitor they belong to.

Your account data, monitor configurations, snapshots, and alert history are stored in the European Union. Some processing (AI analysis, browser rendering) happens in the United States — see our Subprocessors page for where each vendor processes data.

We use a small number of third-party services to operate modsignal. See our Subprocessors page for the full list, including what each processes and where.

We may update this privacy policy from time to time. Material changes will be communicated via email to account holders. The “last updated” date at the top reflects the most recent revision.

Questions about this privacy policy? Contact us at hello@modsignal.io.