Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains what information Wylsyde Signal collects, how we use it, and the choices you have. It covers two different groups of people, which we're explicit about throughout: you, the business owner with a Wylsyde Signal account, and your customers, whose contact information you upload so we can email them on your behalf.

1. Information We Collect

About you (the account holder):

• Name, business name, email address, and password (stored as a salted hash, never in plain text);
• Billing information - handled entirely by our payment processor, Stripe. We never see or store your full card number;
• Technical data such as your IP address, used only to prevent abuse (for example, limiting login attempts and account registrations from a single source);
• Any customizations you make, like email templates, review links, and follow-up timing.

About your customers (uploaded by you):

• Name, email address, and any notes you add;
• Whether and when a review request or follow-up was sent to them, and whether they clicked the "I already left a review" link.

We never collect your customers' information directly - it only enters the Service because you add it, and you're responsible for having a legitimate reason to do so (see our Terms of Service, Section 7 and 8).

2. How We Use Information

We use the information above to:

• Provide the Service - sending review requests and follow-ups on your behalf, running your dashboard and reports;
• Send you account-related email (verification, password reset, weekly summaries - which you can turn off);
• Process billing through Stripe;
• Detect and prevent abuse (rate limiting, fraud prevention);
• Monitor for and fix errors in the Service.

We do not sell your data, or your customers' data, to anyone. We don't use it for advertising, and we don't share it beyond the service providers listed below.

3. Third-Party Service Providers

We rely on a small number of specific providers to run the Service, each of which processes some data on our behalf:

• Brevo - sends the actual emails (review requests, follow-ups, account emails) and reports back bounces/complaints so we can protect deliverability;
• Stripe - processes payments; handles and stores your payment details directly, not us;
• Neon - hosts our database;
• Render - hosts the application itself;
• Sentry - error monitoring, configured to exclude personal information from error reports by default;
• Cloudflare Turnstile - checks that account signups and password-reset requests come from a person rather than an automated bot. When you use those forms, Turnstile receives your IP address and technical signals from your browser (such as browser type, settings, and how the page was used) to make that check. We receive only a pass or fail result. Cloudflare's handling of this data is covered by its own privacy policy.

We don't use any advertising or analytics trackers beyond what's listed here.

4. Cookies

We use one functional cookie to keep you logged in (signed and, in production, transmitted only over HTTPS). We also store your light/dark theme preference in your browser's local storage. Neither is used for tracking or advertising, and we don't use any third-party tracking cookies.

5. Data Retention

We retain account and customer data for as long as your account is active. If you delete a customer record, it's removed from our systems (aside from residual copies in routine backups, which age out over time). If you close your account, see Section 6 below.

6. Your Rights & Data Deletion

You can review and update most of your own account information directly in the app. To request deletion of your account and associated data, or to ask what data we hold about you, email support@wylsydesignal.com. We'll respond and complete reasonable requests within a reasonable time.

7. Your Customers' Rights

Every review request and follow-up email includes a link your customer can click themselves - "Already left a review? Click here so we don't bother you again" - which immediately and permanently stops any further emails to them through the Service. If one of your customers contacts us directly wanting their information removed, we'll direct them to you as the business that added them, and will honor a deletion request from either of you.

8. Data Security

Passwords are hashed with bcrypt, not stored in plain text. Data in transit is encrypted (HTTPS). We use signed, tamper-resistant session cookies and CSRF protection on every form. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security, but we take reasonable, industry-standard measures to protect your data.

9. Children's Privacy

The Service is intended for business use and is not directed at, or knowingly used to collect information from, children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reasonably communicated (such as a notice in the app). Continued use of the Service after changes take effect means you accept the updated policy.

11. Contact

Questions about this policy, or a privacy request? Reach us at support@wylsydesignal.com.