Signalraft · Effective 13 November 2026
Your data and privacy.
This notice explains how QUANTUM CLOUD AI LTD, trading as Signalraft, handles personal information for the website and hosted business preview. The company is registered in England and Wales, number 16921441. Its registered office is 128 City Road, London, EC1V 2NX, United Kingdom. We are the controller of account, service administration and support information. Contact support@signalraft.app for privacy questions and requests.
1. Information we handle
- Account information: your name, email address, password hash and session records. We need the registration fields to provide an account. Passwords should not be included in support messages.
- Workspace content: the business and product information, audiences, goals, budgets, dates, conversations, website notes, plans, creative drafts and production packs you choose to save.
- Media and production records: uploaded files, captions, saved job inputs, status/error records and output metadata. Uploaded media is processed on the server for validation and normalisation. Video assembly combines the workspace assets you select on that server.
- Support correspondence: your email address, message and information you provide while asking for help or exercising your rights.
- Technical and security information: connection and request information, which can include IP address, browser information, authentication events and failures needed to operate and protect the service.
If you start a reviewed production run, we save its source choices, production settings, usage limits and progress in your account database. The background worker follows the approved plan and can continue after a service restart. Pause and stop controls affect future steps; an external provider job already accepted can finish if those integrations are enabled.
Do not enter customer lists, sensitive personal records, payment-card information or third-party credentials. The preview is intended for your own business planning information, not for maintaining personal records about customers.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide your account and the functions you request | Performance of our agreement where you are a party to it; our legitimate interests in providing the requested service to authorised representatives of business customers where the agreement is with the organisation. |
| Maintain service reliability, prevent misuse and investigate security incidents | Our legitimate interests in operating a secure and reliable service, subject to your rights and interests. |
| Respond to product questions and complaints | Performance of the requested service or our legitimate interests in assisting users and resolving enquiries. |
| Handle data-rights requests and applicable legal requirements | Compliance with legal obligations. Where necessary, our legitimate interests in establishing, exercising or defending legal claims. |
Information you choose not to supply may limit the relevant feature; you can browse the public website without an account. Optional product actions are not blanket consent to unrelated processing. If we ask for consent for a new purpose, we will explain it separately and how to withdraw it.
3. Browser storage and website reading
Sign-in uses necessary session cookies. Sessions have a seven-day lifetime and can renew during active use. The current website does not use analytics or advertising-tracking pixels. Hosting and security logs are separate from advertising tracking.
The standalone and earlier draft tools can save their state in your browser's local storage. Their reset controls or your browser's site-data settings remove those local copies. Clearing browser data does not erase your hosted account or server records.
When you choose to read a website, the requested public HTTPS URL is sent to our server. The server reads that page's visible text and selected same-site links without using your browser's cookies for that website. The destination site receives a request from our server. Imported information needs your review before you use it.
4. Hosting, email and optional providers
The current application and database are hosted on our dedicated infrastructure at Hetzner's HEL1 location in Finland. Service administration and support may involve authorised personnel and infrastructure providers.
Support messages are forwarded through Namecheap and pass through Microsoft's email protection service before reaching our designated business support inbox. These providers process message content and delivery information for routing, security and delivery.
Email processing can involve countries outside the UK and EEA, including the United States. Namecheap's published Data Processing Addendum describes US processing and contractual provisions for international transfers. Microsoft's published Products and Services Data Protection Addendum describes international processing and the use of the 2021 Standard Contractual Clauses, with the UK transfer addendum for transfers from the UK, where its terms apply. You can read these provider terms at those links or contact support@signalraft.app to request copies and information about the safeguards applicable to your correspondence. We do not promise that support email remains in any single country.
The following optional integrations are implemented in the software but are not currently enabled in the public service:
- Text AI: if made available and selected, a cloud request sends the supplied business context, selected offers, website evidence and recent conversation through Vercel AI Gateway to the configured model provider, currently OpenAI.
- Media generation: a requested generation job sends its saved prompt or narration and selected settings to fal.ai and its model providers, or to ElevenLabs for speech and sound effects. A selected reference image may be uploaded to fal storage. A requested storage expiry is not a guarantee about every downstream provider's retention.
- Advertising connections: if made available and authorised, Google or Meta supplies credentials, granted permissions and selected account/asset information. Requested reports can include delivery metrics, currency, reporting dates and time zone. Some requested platform permissions include management access; the current service does not publish ads.
Availability, recipient and applicable transfer information will be provided before new external processing is introduced. Merely viewing this website does not send your workspace content to those optional providers. There is no payment checkout, and Signalraft does not currently send your payment details to Stripe.
If advertising authorisation becomes available, it uses a temporary necessary cookie that expires after ten minutes. Disconnecting clears locally stored credentials and selections; it does not erase historical reports or revoke permissions directly in the provider's own account settings. You can also manage those permissions with the provider.
5. Retention, export and deletion
Hosted account and workspace data is retained to provide the account and saved work you request. Retention decisions take account of whether the account or material is still needed, unresolved support or security issues, legal obligations and the need to establish or defend claims. We do not currently operate an automatic account-inactivity deletion schedule.
Workspace export covers the workspace document. Clearing or resetting it does not delete the account, stored media, historical production jobs, advertising reports/events or recovery copies. Email us to request closure or a broader deletion, and identify the account and scope of the request. We verify authority where necessary and handle the request manually under applicable law, including explaining any lawful reason to retain information.
Database backups exist for recovery. They are managed separately and do not currently expire automatically. A deletion request therefore covers review of active records and recovery copies; using the workspace reset button is not complete erasure. When erasure applies, we manually delete affected recovery copies or put the relevant information beyond use until deletion, and explain any legally required retention. A backup must not return erased information to active use: erasures are reapplied before a restored service is made available. The continued need for retained copies is reviewed during backup maintenance and before restoration.
Support correspondence and technical records are retained according to their purpose, including resolving the enquiry, service security and applicable legal obligations. Files you export or share yourself remain under your control. Separate providers may retain records under their own applicable terms and obligations.
6. Your rights and complaints
Depending on the applicable law and circumstances, you can request access, correction, deletion, restriction, portability or object to processing, including processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Send requests to support@signalraft.app, preferably from your account email. We may ask for proportionate information to verify your identity or authority. We respond within the time limits required by applicable data-protection law and explain any applicable exception or extension. Do not send identity documents unless we request them through an appropriate channel.
You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to the competent data-protection authority where you live or work where that right applies. You do not have to contact us first, although we welcome the opportunity to resolve a concern.
7. Other information and updates
The service is intended for adult business users. We do not use the preview to make solely automated decisions about people that have legal or similarly significant effects; planning suggestions are for your review.
We update this notice when our processing changes and show the effective date above. Material changes will be brought to users' attention through the site or account contact details where appropriate. For help, see Support.