Privacy Policy

This Privacy Policy explains what information Signal Strike ("we," "us") collects, how we use it, who we share it with, and what choices you have. Signal Strike is operated by Hilltop Ave LLC, an Iowa limited liability company.

We've tried to write this in plain language. If anything is unclear, email us at consulting@hilltopave.com.

1. Information We Collect

Information You Give Us

Account Information: Your name, email address, password (hashed, never stored in readable form), company name, and role.

Payment Information: Billing name, address, and payment method. We never see or store full credit card numbers — Stripe handles that. We only see the last 4 digits, card brand, and expiration date for display purposes.

Customer Data: The content you create and upload to Signal Strike — prospects, deals, notes, contacts, pipeline data, custom fields, integrations data, and similar information.

Communications: When you email support, fill out a form, or chat with us, we keep records of those communications.

Information We Collect Automatically

Usage Data: Pages you view, features you use, buttons you click, time spent in the application, and similar product analytics.

Device and Connection Data: IP address, browser type, operating system, device identifiers, and referring URLs.

Cookies and Similar Technologies: Small data files that recognize your browser, keep you signed in, and remember preferences. See section 8 for details.

Information from Third Parties

If you sign in with a third-party identity provider (such as Google), we receive basic profile information from that provider as authorized by you.

If you use the Apollo Prospect Finderfeature, we receive prospect data from Apollo's database based on your search queries. This data may include names, job titles, company information, and contact details about people who are not Signal Strike users.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve Signal Strike
• Process payments and manage your subscription
• Authenticate users and protect against fraud or abuse
• Send service-related emails (account notifications, security alerts, billing receipts)
• Respond to support requests
• Generate the Daily Signal email and other automated reports you've subscribed to
• Power AI features like Ask Signal (see section 4)
• Analyze usage patterns to improve features and performance
• Comply with legal obligations
• Send occasional product updates or marketing emails (you can opt out anytime)

We do not sell your personal information to third parties.

3. Who We Share Information With

We share your information only as needed to operate the service or as required by law.

Service Providers

We use a small number of trusted vendors to run Signal Strike. They access your information only to perform their function and are contractually required to protect it:

• Stripe — payment processing and subscription management
• Supabase — database hosting, authentication, and file storage
• Anthropic — AI model used for the Ask Signal feature
• Apollo — prospect data for the Prospect Finder feature
• Vercel — application hosting and deployment

Legal Requirements

We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If Signal Strike or Hilltop Ave LLC is acquired, merged, or sells substantially all assets, your information may transfer to the new entity. We'll notify you before that happens.

With Your Consent

We share information with other parties only when you ask us to (for example, when you connect a third-party integration).

4. AI Features and Your Data

When you use Ask Signal or other AI features:

• Your query and relevant context (such as the deal or prospect you're asking about) are sent to Anthropic's API to generate a response
• Anthropic processes the query to generate output and, per their policies, does not use API inputs to train their models
• We log your queries and AI responses to provide history, improve the feature, and debug issues
• AI features process Customer Data only as needed to answer your specific query

You can avoid AI processing of specific data by not using AI features for that data.

5. Data Retention

We keep your information for as long as your account is active and as needed to provide the service.

After you close your account:

• Customer Data is retained for 30 days to allow recovery, then permanently deleted
• Account information (name, email) is retained for up to 12 months for fraud prevention and legal compliance
• Billing records are retained for 7 years as required by tax and accounting regulations
• Backups may persist for additional time but follow the same deletion timeline

You can request earlier deletion of specific data — see section 7.

6. Security

We protect your information with reasonable technical and organizational measures, including:

• Encryption in transit (TLS/HTTPS) for all data sent between your browser and our servers
• Encryption at rest for stored Customer Data
• Hashed passwords (never stored in plain text)
• Access controls limiting which employees can access systems
• Regular security reviews and dependency updates

No system is perfectly secure. If we discover a breach affecting your data, we'll notify you in accordance with applicable law.

7. Your Rights and Choices

Depending on where you live, you may have rights over your personal information:

Everyone

• Access: Request a copy of the information we have about you
• Correction: Update or correct inaccurate information from your account settings
• Deletion: Request deletion of your account and associated data
• Export: Download your Customer Data anytime from your account
• Marketing Opt-Out: Unsubscribe from marketing emails using the link in any email

European Economic Area, UK, and Switzerland (GDPR)

You have additional rights including the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion, opt out of "sale" of personal information (we don't sell it), and not be discriminated against for exercising these rights.

How to Exercise Rights

Email consulting@hilltopave.comwith your request. We'll respond within the timeframe required by applicable law (typically 30–45 days). We may need to verify your identity before fulfilling certain requests.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies — required for the service to work (authentication, security)
• Functional cookies — remember your preferences (theme, layout)
• Analytics cookies — help us understand how the service is used (anonymized)

You can disable cookies in your browser settings, but essential cookies are required for Signal Strike to function. We don't use third-party advertising cookies.

9. International Data Transfers

Signal Strike is operated from the United States. If you're outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from your home jurisdiction. By using Signal Strike, you consent to this transfer.

For users in the EEA, UK, or Switzerland, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) to protect your data.

10. Children's Privacy

Signal Strike is not intended for anyone under 18. We don't knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

11. Changes to This Policy

We may update this Privacy Policy occasionally. If we make material changes, we'll notify you by email or in the application at least 30 daysbefore they take effect. The "Last Updated" date at the top will always reflect the current version.

12. Contact

Questions, requests, or complaints about this Privacy Policy? Reach us at:

Hilltop Ave LLC
Email: consulting@hilltopave.com

By using Signal Strike, you acknowledge you've read and understood this Privacy Policy.