Your data, handled properly.

Who we are

Signal is a product of KinIoT Limited, trading as DataDirect Intelligence, a software and infrastructure business registered and operating in N. Ireland. The Signal platform is hosted in the United Kingdom.

For your operational data, meaning the data your hardware and your team generate in Signal, you are the data controller and we act as data processor on your behalf. For account, billing, support and diagnostic data, we are the data controller.

What we collect

Account data

When you create a Signal tenancy we store your name, work email, organisation name, and login credentials (password hashes only). We do not handle payment card details ourselves: payments are processed by Stripe, our PCI-DSS compliant payment provider.

Operational data

Signal processes the data your hardware generates: tag identifiers, gateway identifiers, location references, sensor readings and alert events. This is the data that makes the product work.

Usage and diagnostic data

We log requests and errors on the server side: timestamps, the endpoint called, error details, and the browser or device type sent with the request. We use this to find bugs and keep the platform healthy. These logs are held for us by Grafana Labs in their United Kingdom region and are deleted after 14 days.

Product analytics (Signal web app)

When you use the Signal web app, and only if you have given consent, we collect information about how the app is used so we can improve it. This covers the pages you visit and the actions you take, for example creating a rule, registering a gateway or acknowledging an alert, together with your name, email address, organisation, your role and your subscription plan.

We record what you do, not what you write. Where you type something, such as a rule description or a message to our AI assistant, we record only how long it was, never its content. We do not record asset names, location names, notes, coordinates, or any other content you have stored in Signal. Page addresses are recorded as route patterns rather than real addresses, because a real address can contain an invitation token or a device identifier.

Our analytics provider also records your browser, operating system, screen size, and approximate location to city or region level, derived from your IP address.

This information is processed on our behalf by Mixpanel and is held in their European Union data region. It is not shared with anyone else, is not used for advertising, and is not used to track you across other websites.

Our legal basis is your consent. Analytics is off until you accept it, and you can turn it on or off at any time from your Profile page in the web app. If you decline, or later turn it off, we collect nothing about how you use the app. Turning it off stops collection immediately; to have data already collected removed, see Your rights below.

The Signal mobile app does not include product analytics, and neither does this marketing site.

Error monitoring

When something goes wrong in the Signal web app, we send a diagnostic report to Sentry, our error tracking provider, so we can find and fix the fault. A report contains the technical error, the page it happened on, and your user and organisation identifiers, so we can tell how many customers a fault affects.

Alongside an error, Sentry also captures a short recording of the page in the moments before it, to show us what led to the fault. All text, input values and images are masked in your browser before that recording is sent, so the content of your data never leaves your device. We do not record sessions where nothing has gone wrong.

Sentry holds this data in its European Union (Frankfurt) region. Our legal basis is our legitimate interest in keeping the service working. It is not product analytics, and it is not used to measure or profile you.

What we don't do

• We do not sell your data.
• We do not share your operational data with third parties for advertising.
• We do not allow your data to be used to train AI models. See AI features below.
• We do not set advertising cookies, and we do not track you across other websites.
• We do not record your screen or your session, apart from the masked error diagnostics described above.

Where your data is held

The Signal production platform is hosted in the United Kingdom. Your operational data, including asset records, readings, rules and alert history, is stored and processed in UK data centres, and is encrypted at rest and in transit over public networks. Backups are held in the UK, as are our server logs.

Two parts of the service are processed inside the European Economic Area rather than the UK:

• Product analytics. Mixpanel, in its European Union data region.
• Error monitoring. Sentry, in its European Union (Frankfurt) region.

The UK recognises the EEA as providing an adequate level of data protection, so no additional transfer safeguard is needed for these.

Three parts of the service involve processing outside both the UK and the EEA:

• AI features, as set out below.
• Payments. Billing data is handled by Stripe, our payment processor, which processes it outside the UK.
• Mobile push notifications. Push alerts are delivered through Google Firebase Cloud Messaging, which processes notification content outside the UK.

Where data is processed outside the UK and the EEA, transfers are made under the UK International Data Transfer Addendum or equivalent safeguards.

Who processes your data

These are the third parties who process personal data on our behalf. None of them are permitted to use your data for their own purposes. We keep this list current: if we add a processor, we will update this page.

• Stripe, payments and billing. Outside the UK.
• Google Firebase Cloud Messaging, mobile push notification delivery. Outside the UK.
• OpenAI, via the Vercel AI Gateway, AI features. United States.
• Mixpanel, product analytics in the web app, with your consent. European Union.
• Sentry, error monitoring for the web app. European Union (Frankfurt).
• Grafana Labs, server log and metrics storage. United Kingdom.

AI features

Signal includes AI-assisted features, including the Swift assistant and AI-suggested rules. These are powered by OpenAI models, accessed through the Vercel AI Gateway.

When you use them, your prompt and the relevant context from your data are sent to our AI provider, which processes them in the United States. This is the only part of the platform where your operational data leaves the UK in the ordinary course of use.

Our agreement with the provider does not permit your data to be used to train its models. Prompts and outputs may be held briefly by the provider for abuse monitoring, and are then deleted. Swift can only access data your account already has permission to see.

How long we keep it

We keep your operational data for as long as your Signal tenancy is active. When you cancel, we retain it for 30 days so it can be recovered, then delete it permanently. We may keep certain records for longer where we are required to by law, for example billing records for tax purposes.

Product analytics events are deleted 24 months after they are recorded. Your analytics profile, which holds your name, email address and organisation, is kept while your account exists, and is deleted when your account is deleted, along with the events linked to it.

Error reports, and the masked recordings attached to them, are kept for no more than 90 days. Server logs are kept for 14 days.

Your rights

Under UK GDPR you have the right to access, correct, export and erase your personal data. You can action most of these directly from your Signal tenancy. For anything you can't, email hello@datadirect.co.uk and we'll respond within the timeframes set out in UK GDPR.

You can withdraw your consent to product analytics at any time from your Profile page in the Signal web app. Withdrawing consent stops further collection straight away. If you also want analytics data we have already collected to be removed, ask us and we will delete it, or delete your account, which removes it automatically.

If you are not satisfied with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.

Cookies and local storage

This marketing site uses essential cookies only. We do not set tracking or advertising cookies on it, and it carries no analytics.

The Signal web app uses session cookies required to keep you signed in. Your analytics choice, and the identifier used for analytics, are stored in your browser's local storage rather than in cookies, so they stay on your device and are not sent to other sites. Clearing your browser storage clears your analytics choice, and you will be asked again.

Changes

We may update this page as Signal evolves. Material changes will be announced in-app before they take effect.