SpeedSignal

Privacy Policy

Last updated: September 2026

1. What we collect

When you create an account we collect your email address and a hashed password. When you run a performance test we store the target URL, test configuration, results returned by our testing infrastructure, and AI-generated recommendations. We also log standard server data: IP addresses, browser/user-agent strings, and timestamps. When you sign up we record how you found us — the page you first landed on, the site that referred you, and any campaign tags in the link — so we can tell which channels work.

2. How we use your data

We use your data solely to provide and improve SpeedSignal. Specifically: to authenticate you, to run tests on your behalf, to generate AI recommendations using your test results, to send transactional emails (email verification, password reset, billing receipts), and to detect abuse.

We do not sell your data. We do not use your test data to train AI models. We do not send marketing email without your opt-in.

3. Third-party services

We rely on the following sub-processors to deliver the service:

  • A third-party synthetic testing provider — synthetic testing infrastructure. Test URLs and configurations are sent to a third-party provider to execute real-browser tests.
  • AWS Bedrock (Anthropic Claude) — AI recommendations. Anonymised performance metrics are sent to generate recommendations. We do not send personally identifiable information to Bedrock.
  • Stripe — payment processing. We never store raw card details; all payment data is handled by Stripe.
  • Resend — transactional email delivery.
  • Google Analytics — website usage analytics. Receives the pages you view, your approximate location, and device and browser details. Google Analytics 4 does not log or store IP addresses.
  • Cloudflare Web Analytics — privacy-first, cookieless page-view analytics.

4. Data retention

Test results are retained according to your plan's data retention window (7 days for Free, up to 365 days for Business). Account data is retained for 30 days after account deletion, then permanently deleted.

5. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account and associated data at any time by contacting us or using the account deletion option in your profile settings. We will respond within 30 days.

6. Cookies and tracking

We set a session cookie that is required for authentication and security. To understand how the site is used, we also use Google Analytics, which sets its own analytics cookies (such as _ga), and Cloudflare Web Analytics, which uses no cookies. A real-user performance-monitoring script from our testing provider measures how quickly our pages load.

We do not use third-party advertising trackers or fingerprinting. Analytics scripts are not loaded on password-reset or email-verification pages. You can block analytics cookies in your browser settings or with a content blocker without affecting the service.

7. Security

Passwords are stored using bcrypt with a minimum cost factor of 12. All data is transmitted over TLS. Access to production infrastructure is restricted to authorised personnel.

8. Contact

Questions about this policy: support@speedsignal.io