1. Who We Are
ACX Signal ("we", "us", "our") operates the website at acxsignal.com and provides signal intelligence services on U.S.-listed China equities. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
2. Data We Collect
| Data Type | What | When |
|---|---|---|
| Account data | Name, email address, password (hashed) | When you register or subscribe |
| Payment data | Payment method details (card last 4 digits, billing address) | When you subscribe — processed by Stripe and PayPal; we do not store full card numbers |
| Usage data | Pages visited, features used, time on site | Automatically during your use of the Service |
| Device data | Browser type, operating system, IP address | Automatically via server logs |
| Communication data | Email correspondence, support inquiries | When you contact us |
3. How We Use Your Data
- Provide the Service: Deliver signal intelligence reports, manage your subscription, authenticate your account
- Process payments: Bill your subscription through Stripe
- Communicate: Send Weekly Briefs, service announcements, and subscription-related notifications
- Improve the Service: Analyze usage patterns to improve content and user experience
- Legal compliance: Comply with applicable laws and regulations
We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data under the following legal bases:
- Contract performance: Processing necessary to deliver the Service you subscribed to
- Legitimate interests: Usage analytics to improve the Service, fraud prevention
- Consent: Marketing communications (you may withdraw consent at any time)
- Legal obligation: Tax and financial record-keeping requirements
5. Third-Party Services
We use the following third-party services that may process your data:
- Stripe — payment processing (Stripe Privacy Policy)
- PayPal — payment processing (PayPal Privacy Policy)
- Vercel / Render — website hosting
- Analytics provider — anonymous usage tracking (no personally identifiable data shared)
We do not use third-party advertising networks or retargeting pixels.
6. Cookies
We use essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Maintain your login session | Until browser close or logout |
| Auth token | Persistent authentication | 30 days |
7. Data Retention
We retain your account data for the duration of your subscription plus 12 months after cancellation. Payment records are retained as required by tax law (typically 7 years). Usage data is retained in anonymized form indefinitely.
You may request deletion of your account data at any time by contacting us. Deletion will be completed within 30 days, subject to legal retention requirements.
8. Your Rights
Under GDPR and applicable privacy laws, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate personal data
- Erasure — request deletion of your personal data
- Portability — receive your data in a structured, machine-readable format
- Restriction — restrict processing of your data in certain circumstances
- Objection — object to processing based on legitimate interests
- Withdraw consent — withdraw previously given consent at any time
To exercise these rights, contact contact@acxsignal.com. We will respond within 30 days.
9. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security but take reasonable measures to protect your data.
10. International Transfers
Your data may be processed in countries outside your jurisdiction, including the United States (hosting infrastructure). Where transfers occur outside the EEA, we ensure appropriate safeguards are in place.
11. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to active subscribers. The "Effective date" at the top of this page indicates the latest revision.
13. Contact
For privacy-related inquiries: contact@acxsignal.com
Data controller: ACX Signal