Privacy Policy

1. Information you give us

• Account details: email address, name if you provide it, and login credentials (passwords are stored hashed, never in plain text).
• Content you add: the items, notes, and any other information you save or post within a Service.
• Support messages: anything you send us by email or through a Service.

2. Information collected automatically

• Device and app data: device model, operating system, app version, language, and time zone.
• Usage data: which features are used and how often, in aggregate, so we know what to improve.
• Diagnostics: crash reports and performance logs.
• Website data: basic server logs such as IP address and browser type. Our websites do not use advertising cookies.

3. Information from app stores and payment processors

If you subscribe through the Apple App Store, Google Play, or another store, that store processes your payment and we receive confirmation of your subscription status, not your card details. If you subscribe directly through a Service's website, our payment processor handles your payment information directly; we receive confirmation of payment and limited billing details (such as a receipt), not your full card number.

4. How we use information

• To provide the Services and the features specific to whichever product you're using.
• To create and secure your account and prevent fraud or abuse.
• To respond to support requests.
• To fix bugs and improve features, using diagnostics and aggregate usage data.
• To send service messages, such as security alerts or changes to our terms. Any marketing email is optional and includes an unsubscribe link.
• To meet our legal obligations.

5. AI features

Where a Service uses AI to generate content (for example, summaries or explanations), it sends the relevant, minimum information necessary to an AI service provider to do so. We do not include your name or email address in these requests. We do not permit our AI providers to use your data to train their models, and we do not use your data to train models of our own.

6. How we share information

We share information only with:

• Service providers who host our infrastructure, deliver data, provide AI processing, send email, or report crashes for us, under contracts that limit their use of your information to providing that service to us.
• App stores and payment processors, to process subscriptions and purchases.
• Legal and safety recipients, when required by law or to protect the rights and safety of our users or the public.
• A successor, if Shoeboxed Platforms LLC is involved in a merger, acquisition, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

7. Data retention

We keep account data while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep limited records for legal, tax, or security reasons. Diagnostic logs are kept for up to 90 days.

8. Security

We use encryption in transit (HTTPS/TLS), encryption at rest where supported by our infrastructure providers, hashed passwords, and access controls limiting who can reach production data. No system is completely secure. If a breach affects your information, we will notify you as required by applicable law.

9. Your choices and rights

• Access, correct, or export your information.
• Delete your account and associated data, in the applicable Service or by emailing us.
• Opt out of marketing email at any time.
• Turn off crash reporting and analytics where a Service or your device settings allow it.

Depending on where you live — for example, California (CCPA/CPRA), the EU/UK (GDPR), or other U.S. states with their own privacy laws — you may have additional rights, including the right to object to or restrict certain processing and to appeal a decision about your request. Email shoeboxedplatforms@gmail.com to make a request. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.

10. International users

We are based in the United States, and our service providers may process information in the United States and other countries. Where required by law, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

11. Children's privacy

Unless a Service's own Schedule says otherwise, our Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information without appropriate consent, contact us at shoeboxedplatforms@gmail.com and we will delete it.

We may in the future offer a Service directed at children. Where we do, that Service's own Schedule will describe the specific information we collect, how we obtain verifiable parental consent, and the additional rights parents have over their child's information, consistent with the Children's Online Privacy Protection Act (COPPA) and similar laws, and those terms will apply to that Service instead of this general section.

12. Changes to this policy

If we make material changes to this policy or an applicable Schedule, we will update the effective date above and notify you in the applicable Service or by email before the change takes effect.

13. Contact

Privacy questions or requests: shoeboxedplatforms@gmail.com — Shoeboxed Platforms LLC

A.1 Financial account and wallet connections

SIGNALS HQ lets you connect information about your investments so it can track them for you:

• Brokerage or exchange accounts: when you connect one through a supported integration, your login credentials are entered directly with that integration provider (for example, Plaid or SnapTrade), never with us. We receive and store the data needed to display your holdings — such as account and position balances, holdings, and transaction history relevant to tracking your portfolio — not your username or password.
• Public wallet addresses: when you connect a cryptocurrency wallet by its public address, you're giving us information that is inherently public on the relevant blockchain. We use it to look up your holdings; we cannot move funds from it.
• Prediction-market positions: if you connect a public prediction-market address, the same applies — we read public position data; we do not have the ability to place trades or move funds.

A.2 AI Insight and asset scoring

When SIGNALS HQ generates an AI Insight, an asset score, or an answer to a question you ask about your portfolio, it sends the minimum necessary data to our AI provider to do so — for example, an asset's ticker, price, and your position size for that asset — without your name, email address, or account identifiers.

A.3 What we do not collect

SIGNALS HQ does not ask for, and we do not store, your brokerage or exchange password, or any information that would let us move your money or place a trade on your behalf.