Privacy Policy

Last updated: May 2026

CleanSignal ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Who We Are

CleanSignal is a product of K Squared Sdn Bhd, registered in Malaysia. Our mailing address is:

B-6-33, Level 6, Block B, Ativo Plaza Bandar Sri Damansara PJU 9 Kuala Lumpur 52200 Malaysia

For privacy queries, contact us at: privacy@cleansignal.app

2. Information We Collect

We collect the following information when you create an account or use CleanSignal:

Email address, used to create your account, send signal deliveries, and recover access
Business or audience profile, including the description you provide during onboarding, your service area or geography, your customer type or audience, and your preferred signal cadence
Monitoring queries, generated from your profile and used to find relevant conversations on public platforms
Signal interaction data, including which signals you mark as useful, which you skip, and which you reply to, so we can improve future signal quality
Account activity, including login times, plan changes, and cancellation events
IP address, used for security, rate limiting on account creation, and abuse prevention
Consent records, including the version of these Terms and this Privacy Policy you agreed to at signup and the timestamp of that consent
Device and usage data, anonymised analytics to help us improve the product (such as which features are most used)

We do not collect your real name (unless you provide it), home address, phone number, or payment card details. Payments are handled securely by Stripe and we never see your card information.

3. Information We Do Not Collect

CleanSignal monitors publicly available posts on Reddit, Facebook, and other online communities. Some of these posts may contain personal information about the posters (such as usernames, locations, or other details they have chosen to share publicly). We do not collect, store, or process this information beyond what is necessary to deliver the signal to you. We do not build profiles of third-party individuals, attempt to identify them beyond their public usernames, or use their information for any purpose other than delivering relevant signals to you.

4. How We Use Your Information

We use your information to:

Provide CleanSignal's monitoring and signal delivery service
Generate queries based on your business or audience profile
Score signals for relevance to your specific needs
Send signal delivery emails and account-related notifications (such as billing confirmations or password resets)
Improve our service using anonymised usage data and signal quality feedback
Detect and prevent abuse, fraud, and violations of our Terms of Service
Comply with legal obligations

We do not sell your data. We do not use your data for advertising or share it with advertisers.

5. Data Storage and Security

Your data is stored securely using Supabase, hosted in the United States (Northern California region). We use industry-standard encryption in transit (TLS) and at rest. Only authorised team members can access user data, and only when necessary to support you or maintain the service.

6. Data Retention and Deletion

You can delete your account at any time from your account settings. When you delete your account:

Your profile, queries, signal history, and personal data are permanently removed within 30 days
Anonymised usage data may be retained for product improvement purposes
Some information may be retained as required by law (such as billing records for tax compliance)

If you cancel your subscription but do not delete your account, your data is retained for 90 days in case you wish to reactivate. After 90 days of inactivity, the account is deleted automatically.

7. Third-Party Services

We use the following third-party services to operate CleanSignal:

Supabase, for database hosting and authentication. Data is hosted in the United States (Northern California region).
Stripe, for payment processing. Stripe handles all card details directly.
Netlify, for hosting our website and application.
Resend, for sending account-related emails and signal deliveries.
Anthropic (Claude), for AI-powered query generation, signal relevance scoring, and reply draft suggestions.
Serper, for searching publicly available web content.
Cloudflare, for bot detection on our signup form (see Section 8 for details on Cloudflare Turnstile).

Each service has its own privacy policy and is bound by appropriate data processing terms. We choose providers that meet our standards for data protection and security.

8. Cloudflare Turnstile

We use Cloudflare Turnstile on our signup form to distinguish human users from automated bots. Turnstile may collect signals such as your IP address, browser characteristics, and interaction patterns. These signals are used solely to detect and block bots and are not used to identify or profile individual visitors.

For full details on how Cloudflare processes Turnstile data, see Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/.

9. Cookies and Local Storage

We use cookies and browser local storage to:

Maintain your login session
Save your preferences (such as which view you last used)
Detect and prevent abuse (such as repeated signup attempts from the same browser)

We do not use tracking cookies for advertising or third-party analytics. The only third-party scripts on our site are those described in Section 7 above, and they operate within the scope of their stated purposes.

10. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), and depending on your location under GDPR (EU), UK GDPR, or CCPA (California), you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your personal data
Object to certain processing of your data
Receive a copy of your data in a portable format
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email privacy@cleansignal.app. We will respond within 30 days.

11. International Transfers

CleanSignal operates from Malaysia with data hosted in the United States (via Supabase's Northern California region). By using CleanSignal, you consent to the transfer and processing of your data in these jurisdictions.

For users in the European Union, United Kingdom, or other regions with cross-border data transfer rules, the transfer of personal data to the United States is governed by Standard Contractual Clauses (SCCs) and other appropriate safeguards as required by GDPR and equivalent laws. Our data processor (Supabase) maintains the necessary frameworks for these transfers.

If you have concerns about the location of your data, contact us at privacy@cleansignal.app.

12. Children's Privacy

CleanSignal is not intended for use by people under 18 years old. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, contact us at privacy@cleansignal.app and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

For any privacy-related questions or requests, email us at privacy@cleansignal.app.