Privacy Policy

This Privacy Policy describes how Bug Hutch Ltd ("we", "us", "our") collects, uses, and protects your personal data when you use TownSignal AI and SignalOS ("the Platform").

Bug Hutch Ltd is the data controller for personal data processed through the Platform. We are registered in England and Wales and are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For privacy enquiries, contact us at support@townsignalai.com.

We collect the following categories of personal data:

We process your personal data for the following purposes:

• Providing and operating the Platform and delivering Signal outputs
• Managing your account and subscription
• Processing payments and managing billing through Stripe
• Sending transactional emails (account creation, subscription confirmation, password reset)
• Responding to support and contact requests
• Improving Platform performance and features through usage analysis
• Complying with legal obligations

Our lawful bases for processing are: performance of contract (account and subscription management), legitimate interests (Platform improvement, security), and compliance with legal obligations.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

All payment processing is handled by Stripe, Inc. When you subscribe to the Platform, you provide your payment details directly to Stripe via their secure hosted payment interface.

Bug Hutch Ltd does not receive, store, or process your full card number, expiry date, or CVV code. We receive only a Stripe customer ID and subscription reference, which we store to manage your account.

Stripe's use of your payment data is governed by their own Privacy Policy, available at stripe.com/privacy.

Your account data, preferences, and usage records are stored using Supabase, a managed database platform. Data is stored on secure, encrypted infrastructure. Supabase processes data in accordance with GDPR.

Email communications are sent via Resend. Your email address is shared with Resend solely for the purpose of delivering transactional messages you have requested.

The Platform uses cookies and similar technologies. Essential cookies are required for authentication and Platform functionality. Analytics cookies may be used to understand usage patterns and improve the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent the Platform from functioning correctly.

For full details, see our Cookie Policy.

We retain your personal data for as long as your account is active or as necessary to provide the Platform. Following account deletion or cancellation:

• Account data is retained for up to 30 days before permanent deletion
• Billing records may be retained for up to 7 years to comply with financial regulations
• Support communications are retained for up to 2 years

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restrict processing — request that we limit how we use your data
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@townsignalai.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted data storage, secure authentication, and access controls.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your data may be processed by our service providers (Supabase, Stripe, Resend) in locations outside the UK. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The date at the top of this page indicates when the policy was last revised.

For all privacy-related requests or questions, please contact Bug Hutch Ltd at: support@townsignalai.com

Bug Hutch Ltd · Registered in England and Wales