Privacy Notice

Version 2 November 2026 — review draft v2

1. Controller

Signalab is provided by Visio Creative Oy, Finnish Business ID 3191284-6, registered in the Finnish Trade Register. Geographic and complaints address: Keskuskatu 12, 60100 Seinäjoki, Finland. Phone +358 44 077 7153 (standard local/mobile network charges apply); email hello@signalab.app. Visio Creative Oy is the controller. Privacy enquiries: hello@signalab.app. Reading this notice is not blanket consent.

2. Data and purposes

We process account names and email addresses, password hashes, verification/reset tokens and sessions; subscription and billing references; delivery, licence and acceptance evidence; and support/withdrawal/refund or partnership requests. They support the requested service, authentication, contract performance, accounting, legal claims and security. Card details are handled by Stripe and are not stored in our database.

3. Legal grounds and separate choices

Necessary account/service data are processed for contract steps or performance, applicable legal obligations and documented legitimate security/claims interests. Where optional processing requires consent, it is requested separately and can be withdrawn. A request to begin digital supply and a consumer-law acknowledgement are recorded separately from data-protection consent.

4. Acceptance evidence and minimisation

We retain the user/contract reference, policy versions and content hashes, purpose, language, server timestamp, explicit decisions and idempotency reference. We do not add raw IP addresses or user-agent strings to this acceptance record. Limited abuse-prevention keys are pseudonymised. Rights history is retained even when a refunded payment ends future use.

5. Service chain and processing locations

Hostingpalvelu / Planeetta Internet Oy provides the website, DNS and SMTP email, plus server and security logs. The provider states that its web-hosting servers are in Helsinki. Render hosts the backend, SQLite database, private media and application email queue; this service is in Frankfurt. Cloudflare participates in Render’s API edge chain. Stripe provides payments, subscriptions, Tax and the customer portal and acts as an independent controller where applicable. This does not mean all support, logging or subprocessing stays within the EU.

6. Retention and application deletion

Closed unsuccessful Artist and Creator applications are deleted from the application database six calendar months after closure. Records connected to an agreement or a specific legal retention need are handled separately. Retained application-message bodies in the application are also cleared; mailbox and backup copies follow a separate deletion process. Application deletion alone does not erase email already sent. After a backup restore, deletion records are reapplied before reopening the service. Other data are kept only to the extent necessary for contractual, security, accounting and evidence purposes. Ordinary subscription expiry does not itself erase licence evidence. Contact hello@signalab.app for category-specific details.

7. Your rights and contact

Subject to applicable limits, you can request access, correction, erasure, restriction, objection and portability, and withdraw any processing consent. You can complain to the competent data-protection authority, including the Finnish Data Protection Ombudsman. Ask hello@signalab.app about processors, transfer safeguards or retention. Essential account technologies are used; optional analytics or advertising processing require their own applicable basis and controls.

8. Company and contact details

9. Complaints and consumer disputes

Send complaints first to Visio Creative Oy at the address above or hello@signalab.app. If a consumer dispute remains unresolved, first contact Finnish Consumer Advisory Services: https://www.kkv.fi/kuluttaja-asiat/kuluttajaneuvonta/. You may then refer the dispute to the Finnish Consumer Disputes Board (Kuluttajariitalautakunta): https://www.kuluttajariita.fi/.

10. Administrative tools

GitHub is used for source code and release preparation, Google Drive for specifically transferred administrative/review material, and Codex/OpenAI for assisted maintenance. They are not automatic export destinations for the customer register. Personal data are transferred only for a necessary, specifically defined administrative purpose under the applicable service agreement.

11. International transfers

Processing may extend outside the EU/EEA. Render’s and Stripe’s published transfer addenda describe Data Privacy Framework and EU Standard Contractual Clauses (SCC) safeguards where applicable. The applicable basis depends on the recipient, service agreement and transfer; accepting terms is not itself a transfer safeguard. Ask hello@signalab.app for information on applicable processors, locations and safeguards.

12. Logs and optional tracking

Server and security logs may include an IP address and technical request data. No active GA4, GTM, Meta Pixel, Hotjar or Clarity tracking was found in this reviewed implementation. Account-specific use of any Hostingpalvelu AWstats server statistics remains to be verified before the final publication text. Acknowledging this notice does not imply consent to optional analytics or advertising processing.

Seller and contact details

Visio Creative Oy · Finnish Business ID 3191284-6 · Finnish Trade Register

Geographic and complaints address: Keskuskatu 12, 60100 Seinäjoki, Finland

044 077 7153 (standard local/mobile network charges) · hello@signalab.app

If your complaint remains unresolved, first contact Finnish Consumer Advisory Services. You may then refer a consumer dispute to the Finnish Consumer Disputes Board.