Privacy Policy

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored encrypted)

Newsletter Content

When you forward emails to Hidden Signal, we receive and store:

• The full content of forwarded emails (text, images, HTML)
• Sender information and subject lines
• Date and time of receipt

Usage Data

We automatically collect:

• Log data (IP address, browser type, pages visited)
• How you interact with digests and summaries

How We Use Your Information

To Provide the Service

• Store and organize your forwarded newsletters
• Generate AI-powered summaries of your content
• Send you digest emails

Third-Party AI Processing

Important: To generate summaries, we send your newsletter content to third-party AI services (such as OpenAI, Anthropic, or similar providers). This means:

• The text content of your emails is transmitted to these services
• These services process your content to generate summaries
• Each provider's use of this data is governed by their respective data usage policies

We only send the content necessary for summarization. We do not send your account credentials or personal identifiers to AI providers. We may change AI providers at any time to improve the service.

To Improve the Service

• Understand how people use Hidden Signal
• Fix bugs and improve features

Data Storage and Security

Where Your Data Lives

Your data is stored on servers in the United States.

International Users

If you are located outside the United States, your data will be transferred to and processed in the US. By using Hidden Signal, you consent to this transfer. If you are in the European Economic Area, UK, or Switzerland, you have rights under GDPR that we respect regardless of where data is stored.

How We Protect Your Data

• Passwords are hashed and salted
• Data transmitted over HTTPS
• Access to production systems is restricted

Data Retention

• We retain your newsletter content and summaries indefinitely while your account is active
• When you delete your account, we delete your data within 30 days

Your Rights

You have the right to:

• Access your data — see what we have stored
• Delete your data — remove your account and all associated content
• Export your data — download your stored newsletters and summaries
• Correct inaccurate information

To exercise these rights, contact us at privacy@hiddensignal.app.

For EU Users

Under GDPR, you have additional rights including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

Cookies

We use essential cookies for:

• Keeping you logged in
• Security (CSRF protection)

We may also use cookies for advertising or analytics in the future. If we do, we will update this policy and provide appropriate notice and controls.

Children's Privacy

Hidden Signal is not intended for users under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy. If we make significant changes, we'll notify you by email or through the service before the changes take effect.

Contact Us

Questions about this policy? Email us at privacy@hiddensignal.app.

Hidden Signal is operated by Orange House Labs LLC.