Privacy Policy

Last updated: April 2026

1. What we collect

When you create an account we collect your email address and a hashed password. When you run a performance test we store the target URL, test configuration, results returned by our testing infrastructure, and AI-generated recommendations. We also log standard server data: IP addresses, browser/user-agent strings, and timestamps.

2. How we use your data

We use your data solely to provide and improve SpeedSignal. Specifically: to authenticate you, to run tests on your behalf, to generate AI recommendations using your test results, to send transactional emails (email verification, password reset, billing receipts), and to detect abuse.

We do not sell your data. We do not use your test data to train AI models. We do not send marketing email without your opt-in.

3. Third-party services

We rely on the following sub-processors to deliver the service:

  • Blue Triangle — synthetic testing infrastructure. Test URLs and configurations are sent to Blue Triangle to execute real-browser tests.
  • AWS Bedrock (Anthropic Claude) — AI recommendations. Anonymised performance metrics are sent to generate recommendations. We do not send personally identifiable information to Bedrock.
  • Stripe — payment processing. We never store raw card details; all payment data is handled by Stripe.
  • Resend — transactional email delivery.

4. Data retention

Test results are retained according to your plan's data retention window (7 days for Free, up to 365 days for Business). Account data is retained for 30 days after account deletion, then permanently deleted.

5. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account and associated data at any time by contacting us or using the account deletion option in your profile settings. We will respond within 30 days.

6. Cookies and tracking

We use a single session cookie required for authentication. We do not use third-party advertising trackers or fingerprinting. We do not use Google Analytics or similar tools.

7. Security

Passwords are stored using bcrypt with a minimum cost factor of 12. All data is transmitted over TLS. Access to production infrastructure is restricted to authorised personnel.

8. Contact

Questions about this policy: support@speedsignal.io