Privacy Notice

1. Who we are

Signscape (trading as Signscape (signcodesmadeeasy.com)) is the data controller for the personal data described here. That means we decide how and why your data is processed. Contact us about privacy at support@signcodesmadeeasy.com.

2. Data we collect and why

• Account data — name, email address and login credentials (hashed) or Google sign-in identifier. Used to create and secure your account and authenticate you. Legal basis: performance of our contract with you.
• Subscription and entitlement data — plan, status, renewal date, billing-state history and the payment provider's customer reference. Used to give you access to paid features and to support billing queries. Legal basis: contract performance.
• Project and lookup data — addresses, ZIP codes, city/state, sign types and wizard inputs you enter, plus saved and pinned lookups. Used to produce your compliance results and exports. Legal basis: contract performance.
• Support messages — the content of emails or requests you send us. Used to answer you. Legal basis: contract performance and legitimate interests.
• Usage and telemetry — pages viewed, features used, error and crash reports. Used to keep the service working and improve it. Legal basis: legitimate interests.
• Device and technical data — IP address, browser and device identifiers, session logs. Used for security, fraud prevention and abuse detection. Legal basis: legitimate interests and legal obligation.
• Marketing preferences — if you opt in, your email for product updates. Legal basis: consent, withdrawable at any time.

3. Who we share data with

• Service providers / subprocessors — hosting, database, authentication, email delivery, error monitoring and analytics providers who process data on our instructions.
• Merchant of Record — Paddle, for sale of our subscriptions, subscription management, payments, tax compliance and invoicing. Paddle handles your payment details directly; we never receive full card numbers.
• Professional advisers — legal, accounting and audit advisers where necessary.
• Authorities — where we are required to disclose data by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account, subscription and project data for as long as your account is active. After closure we delete or anonymise it within 90 days, except records we must keep longer for tax, accounting, fraud-prevention or legal purposes (typically up to 7 years). Technical logs are retained for a short rolling period, normally under 12 months.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable form, and withdraw consent. To exercise any right, email support@signcodesmadeeasy.com. We respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored data, row-level access controls on our database, least-privilege access for staff, and verified webhook signatures for billing events.

8. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember your recent and pinned lookups. Our payment provider sets cookies needed to complete checkout. Where we use analytics cookies, they are limited to understanding aggregate feature usage. You can clear or block cookies in your browser settings; strictly necessary cookies are required for sign-in to work.

9. Changes

We will post updates to this notice on this page and update the date above. Material changes will be notified in the app or by email.