Privacy

Who is responsible

SignalLens is individually operated by Yuanyi Ouyang, the data controller, in England, United Kingdom. It is not a registered company. For privacy questions or data-rights requests, contact privacy@getsignallens.com.

Your workspace data

SignalLens receives your account identity and email from ChatGPT sign-in to keep workspaces private. We store the brands, competitors, prompts, settings, scheduled jobs and AI responses you choose to save, including citations and separately requested model analysis. Do not submit secrets, sensitive personal information or material you are not permitted to send to AI providers.

Who processes it

ChatGPT Sites and its Cloudflare hosting/database services operate the app. Selected tracking prompts and context are sent to the configured OpenAI, Google Gemini or Perplexity service. Optional interpretation sends a stored answer to OpenAI. Scheduled tracking sends prompts to your selected providers when the saved schedule runs. Reports and exports use your selected workspace evidence. Gemini tracking uses non-grounded responses: Google Search grounding is disabled, and Gemini citations/source intelligence are unavailable. These services have their own data policies. SignalLens cannot see your private AI conversations or promise a provider’s retention or training practices.

Purposes and legal bases

We use account and workspace data to provide the sign-in, tracking, evidence, reporting and deletion services you request under these beta terms. Required account information is needed to provide private workspaces. Our legitimate interests in protecting the service and understanding basic use support proportionate security counters, safe operational logs and minimal aggregate measurement. We do not use these features for advertising or decisions producing legal or similarly significant effects about you.

International processing

Hosting and AI providers may process data outside the UK. SignalLens does not promise UK-only storage. OpenAI’s Sites data processing addendum describes hosting safeguards, including standard contractual clauses with the UK Addendum for UK data. The applicable provider terms describe their processing and transfer safeguards: OpenAI API, Google Gemini and Perplexity API. You can ask the privacy contact for information about applicable safeguards.

Retention and deletion

Saved workspace evidence is kept to provide your requested history until you erase it, unless removal is required for service restrictions or legal obligations. There is no fixed automatic expiry for this history. Former Google-grounded Gemini captures are withdrawn from active analytics, reports and exports.

Prompt and competitor removal retains historical evidence. Project archive hides it and disables future schedules. Use Data controls in Workspaces to permanently erase a project, workspace or all SignalLens account data, including responses, citations and analysis. Shared source records remain only while another project cites them. In-flight requests, provider-held copies, infrastructure backups and downloaded files cannot be recalled by this control. Signing in again can create a new empty SignalLens account; deleting SignalLens data does not delete your ChatGPT account.

Historical Sites versions, managed source history, snapshots and platform backups may retain earlier copies, including withdrawn Gemini Google Search grounded data. OpenAI Support has not confirmed selective purge capability or a Sites-specific retention period. No supported customer action is currently available to purge those copies while preserving this Site; their deletion is not confirmed.

Minimal measurement

We count workspace creation, project creation, prompt saves, tracking starts/completions, evidence views, opportunity views and CSV export actions by UTC day. These counts contain no account, workspace, IP, session, prompt, URL or credential fields. There are no advertising trackers or analytics cookies. Counts older than 90 days are removed on the next measurement write. Browser-originated events respect Do Not Track and Global Privacy Control; essential aggregate server actions are counted separately. Export counts record the action, not a confirmed file download.

Security and browser storage

Access checks and temporary rate-limit counters protect private workspaces. Operational logs use limited status codes and timings; hosting request logs follow the platform’s policies. Security counters normally expire after seven days through the worker. Sign-in uses platform session mechanisms. An unfinished onboarding draft may remain in this browser’s session storage until saved, discarded or the session ends.

Beta notice and requests

Self-service export and deletion are available in Reports and Workspaces. Where applicable, you may request access, correction, erasure, restriction or portability of personal data, or object to processing based on legitimate interests. Email privacy@getsignallens.com; we may need proportionate identity verification to protect your data. These rights depend on the circumstances and do not guarantee removal of every third-party copy. You may complain to the UK Information Commissioner’s Office. This notice describes the current service and is not a certification of regulatory compliance. Material changes will be reflected in this dated notice.