Privacy Policy
This policy explains what SignDeployer ("we," "us," "our") collects, why, who we share it with, and the rights you have — with specific attention to the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA/CPRA"). The short version: we collect only what's needed to run a paid sign-placement tool — your email, your subscription status, and the listings you choose to save — we do not sell or share your personal information, and we do not use advertising trackers.
Your California privacy choices
If you are a California resident, you have the right to know, delete, and correct the personal information we hold, to opt out of the "sale" or "sharing" of personal information, and to limit the use of sensitive personal information. You will never be treated differently for exercising these rights.
We do not sell or share your personal information (including for cross-context behavioral advertising), so there is nothing to opt out of on that front. You can still control optional cookies and analytics at any time:
We also honor the Global Privacy Control (GPC) browser signal: if your browser sends it, we treat it as a valid request to opt out of sharing and keep optional analytics off.
1. Who we are
SignDeployer is a sign-placement tool for real-estate professionals, operated from California and available at signdeployer.com. For privacy questions or to exercise your rights, contact us at hello@signdeployer.com.
2. Notice at collection — what we collect and why
In the last 12 months we have collected the following categories of personal information (using the categories defined in Cal. Civ. Code § 1798.140). For each, we describe what it is, why we use it, and how long we keep it. We disclose data only to the service providers listed in Section 5, and we do not sell or share any category.
| CCPA category | Examples we collect | Purpose | Retention |
|---|---|---|---|
| Identifiers | Email address; account ID; a one-way hashed IP address (free demo only, never the raw IP) | Account identity and sign-in; rate-limiting the demo to prevent abuse | While your account exists; demo hashes are short-lived |
| Customer records | Name, company/brokerage name, phone, team size (Brokerage plans only) | Setting up your team account and contacting you about it | While your account exists |
| Commercial information | Subscription/plan status and billing records (from Stripe) | Unlocking paid features; tax and accounting | As required by tax/accounting law |
| Internet / electronic activity | Saved and searched listing addresses; app settings; anonymous usage/performance measurements (only if you allow Analytics) | Syncing your saved listings; computing sign plans; understanding and improving performance | Saved listings until you delete them; caches live in your own browser |
| Geolocation (approximate) | The listing addresses you type — these are property locations, not your device location | Sent to Mapbox to geocode and compute the sign plan | Not retained by us beyond your saved listings and browser cache |
| Visual information | Company logo/branding, if a brokerage owner uploads one | Displaying your branding to your team | While your account exists or until you remove it |
Payment details: your card number is handled entirely by Stripe and never touches our servers.
We do not knowingly collect: government IDs, biometric data, precise device geolocation, health information, or the contents of your communications.
3. Sensitive personal information
We do not collect or process sensitive personal information (such as government identifiers, precise geolocation of your device, race, religion, health, sexual orientation, or account log-in credentials combined with access codes) for the purpose of inferring characteristics about you. Because we don't use it beyond what is necessary to provide the Service, the "right to limit" has nothing to restrict — but you can still contact us with any concern.
4. Sources of the information
We collect the information above directly from you (when you sign in, buy a plan, run a search, or save a listing), automatically from your device (basic request data and, only with your consent, anonymous usage measurements), and from our service providers (for example, subscription status from Stripe).
5. Who we disclose it to (service providers)
We share personal information only with vendors who process it on our behalf under contracts that prohibit them from using it for their own purposes. These are "service providers"/"contractors" under the CCPA — not sales.
| Provider | What they handle |
|---|---|
| Supabase | Account database and saved listings |
| Netlify | Website and serverless hosting |
| Stripe | Payment processing and subscription billing |
| Mapbox | Maps, address geocoding, and routing; anonymous map usage telemetry (only if you allow Analytics) |
| Email delivery provider | Sending one-time sign-in links |
All fonts, scripts, and styles on this site are served from our own domain — loading a page sends nothing to font or script CDNs. Map imagery loads from Mapbox only when you use the map itself.
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger or acquisition (in which case this policy continues to govern your information).
6. We do not sell or share your personal information
We have not sold personal information and have not shared it for cross-context behavioral advertising in the preceding 12 months, and we have no plans to. We do not use third-party advertising networks or ad-tech trackers. We also do not sell or share the personal information of minors under 16.
7. How we use the information
- Provide, secure, and operate the Service (sign-in, computing sign plans, saving your listings).
- Process payments and manage your subscription.
- Prevent fraud and abuse (e.g., demo rate-limiting).
- Respond to your requests and provide support.
- Comply with legal, tax, and accounting obligations.
- With your consent, measure and improve performance.
8. Cookies, local storage, and tracking
We use a small number of cookies and similar technologies (including your browser's local storage). They fall into three groups, and you control the optional ones:
- Strictly necessary — keep you signed in (Supabase session), secure forms, and remember your privacy choices. These are always on because the site can't work without them.
- Functional (optional) — remember your recent searches, settings, and a local cache of results so repeat searches are instant. Stored only in your browser.
- Analytics (optional) — let us and Mapbox collect anonymous usage/performance measurements. Off unless you turn them on.
We do not use advertising cookies or third-party ad networks. Manage your choices any time with the Your Privacy Choices link in the footer of every page, or here:
Clearing your browser storage removes local caches and your saved consent choice; saved listings remain in your account.
9. Your rights and how to exercise them
Depending on where you live (California and several other states grant similar rights), you may have the right to:
- Know / access the personal information we have collected about you, and how we've used and disclosed it.
- Delete personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of any "sale" or "sharing" of personal information (we don't do either).
- Limit the use of sensitive personal information (we don't use it beyond what's necessary).
- Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised a right.
How to submit a request
Email hello@signdeployer.com with the right you want to exercise — including full deletion of your profile and saved listings, which we complete on request. You can cancel billing yourself any time from Account → Manage billing.
Verification & timing
To protect your data, we verify requests using the email address associated with your account (for account holders, we may send a confirmation to that email). We aim to confirm receipt within 10 business days and to respond within 45 days, extendable by a further 45 days where permitted, and we'll tell you if we need the extra time.
Authorized agents
You may use an authorized agent to submit a request. We may ask the agent for proof of your written permission and may still ask you to verify your identity directly.
Appeals
If we decline your request, you may appeal by replying to our decision or emailing hello@signdeployer.com with "Privacy Appeal" in the subject. If you are a California resident and have concerns, you may also contact the California Privacy Protection Agency or the California Attorney General.
10. California "Shine the Light"
California Civil Code § 1798.83 lets California residents ask about personal information shared with third parties for their direct-marketing purposes. We do not share personal information with third parties for their own direct marketing, so no such disclosures are made.
11. Where your data lives
Account data and saved listings are stored with Supabase; the site is hosted on Netlify; payments are processed by Stripe; address searches are processed by Mapbox; sign-in emails are delivered via our email provider. Each processor maintains its own security and privacy program.
12. Security
Sign-in uses one-time email links (no passwords to leak). Access to paid features is verified server-side on every request. Database access is restricted with row-level security so each user can only read their own records. Secrets and API keys are stored in server environment variables, not in the site's code. The site is served over HTTPS with strict transport security.
13. How long we keep data
Account data is kept while your account exists. Saved listings are kept until you delete them. Demo rate-limit hashes are short-lived operational records. Billing records are retained as required for tax and accounting purposes. When you delete your account, we remove your profile and saved listings, except where we're required to keep certain records by law.
14. Children
The Service is for working real-estate professionals and is not directed at children under 16. We do not knowingly collect personal information from children under 16, and we do not sell or share it.
15. Changes
If we materially change this policy, we'll update this page and the "Last updated" date above, and — where required — re-prompt you for consent.
16. Contact
Privacy questions or requests: hello@signdeployer.com