Privacy policy

1. Data controller

The controller of personal data at SignalOkay (signalokay.com) is Better Skills. For any privacy question or to exercise your rights, write to geral@signalokay.com.

2. Data we process

People who only browse the site do not need to identify themselves. We process the following data:

• Account: your email address, your name (if you provide it), language, plan and its validity, the date the account was created, the date of last access and any internal account management notes.
• Configuration: the services and groups you follow, the addresses of your own sites you ask us to monitor, the alert rules you create and the channels you connect, including email addresses, the Telegram chat identifier, the receiving addresses for Slack, Microsoft Teams and automations, and browser notification subscriptions.
• Alert history: what was sent, when, through which channel and whether delivery succeeded.
• Plan access requests: the plan requested and the message you write.
• Subscription to a status page: if you ask to get alerts from a status page created by a SignalOkay user, we keep your email address until you unsubscribe. It is used only for those alerts and the page owner cannot see it, only the number of subscribers.
• Text for creating rules with artificial intelligence: the sentence you write to describe the rule.
• Problem reports: when you indicate that you also have a problem with a service, we do not store your IP address. We compute an irreversible code from the IP address, the browser and the day, only to avoid counting the same person twice.
• Technical data: access logs (IP address, browser type, date and time), kept for short periods for the security and operation of the service.

3. Why we use the data

• To provide the service: create and maintain the account, show your dashboard and send the alerts you configured. The legal basis is the performance of the contract with you.
• Service communications: access codes, alerts, invitations and, if you turn it on, the email summary. The legal basis is the performance of the contract.
• Security and abuse prevention: usage limits, detection of repeated reports and account protection. The legal basis is our legitimate interest in keeping the service secure and reliable.
• To comply with legal obligations, where they exist.

We do not sell personal data, we do not use it for advertising and we do not build marketing profiles.

4. Artificial intelligence

Incident explanations are generated from public information about the services and do not use personal data.

When you create an alert rule by writing, the sentence you write and the names of your groups and channels are sent to a provider of artificial intelligence models, only to generate the proposed rule. The addresses of your channels are not sent. The rule is only saved after you review it.

We do not make automated decisions that produce legal effects or significantly affect you.

5. Who we share data with

We use service providers that process data on our behalf, only to the extent necessary, in the following categories:

• hosting of the site and the database;
• account authentication;
• sending email and notifications;
• artificial intelligence models, as described in the previous section.

The messaging services you connect yourself, such as Telegram, Slack, Microsoft Teams or an automation, receive the alerts you ask us to send.

We may also disclose data to authorities when the law requires it.

6. Transfers outside the European Economic Area

Some of the providers mentioned are based outside the European Economic Area, in particular in the United States. In those cases, the transfer of data relies on adequacy decisions of the European Commission or on standard contractual clauses approved by the Commission.

7. How long we keep data

• Account, configuration, access requests and alert history: for as long as the account exists. They are deleted when you ask for the account to be deleted.
• Codes generated from problem reports: two days.
• Technical access logs: for short periods, set by the hosting providers.

8. Cookies and local storage

We only use what is needed for the site to work: a cookie that stores the chosen language, session cookies for people who sign in and the browser's local storage for preferences, such as the dashboard of people without an account or the last open tab.

We do not use advertising cookies or audience analytics tools.

9. Your rights

You have the right to access your data, to correct it, to ask for it to be deleted, to ask for processing to be restricted, to object to processing and to receive your data in a format you can take to another service. To exercise any of these rights, write to geral@signalokay.com from the account's email address. We reply within one month at most.

If you believe your data is not being handled correctly, you may lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados, at www.cnpd.pt.

10. Deleting your account

To delete your account, write to geral@signalokay.com from the account's email address. We delete the account, groups, rules, channels and alert history within 30 days at most.

11. Security

Connections to the site are encrypted and each account can only access its own data. No system is completely secure, but we apply appropriate technical and organisational measures to protect the data.

12. Minors

SignalOkay is not aimed at people under 16 and we do not knowingly collect data from minors of that age.

13. Changes to this policy

We may update this policy. The date of the last update is at the top of the page. When a change is relevant, we notify existing accounts by email or through a notice on the site.