Privacy policy

Who we are

Signboard is run by Hrutu Rajaram Swar, an individual in India. For anything in this policy, write to hrutuss1@gmail.com. That address is also the place to send a complaint about how we handle your data.

What we store if you sign in

• Your email address and name, from the sign-in method you choose (Google, GitHub or email)
• Your profile: name, city, portfolio link and message language, if you fill them in
• Your leads: the Google place ID of each business, its status (new, contacted, replied, won or skipped), when you contacted it, how many follow-ups you sent, and whether you starred it
• Your saved searches: a label, the business type, the area you typed or a location rounded to about 1 km, and which results you have already seen
• Your plan, renewal date and Razorpay subscription ID, and monthly counters for searches, AI messages and reports
• A record that you contacted a business (place ID and time). We use it to stop showing a business once three signed-in freelancers have contacted it in 30 days

Without an account, your leads and profile stay in this browser’s local storage and never reach our servers. Signing in copies them to your account so they follow you across devices.

When you search and check websites

The area you type (or your location, rounded to about 1 km if you tap Use my location) and the business type are sent to Google Places to get results. Business details come from Google Maps. We keep only the place ID of businesses you save. Names, phone numbers and the rest are fetched again when needed and held in a cache for a few hours.

When you check a website, our server opens that business’s website address and reads the page. The address is also sent to Google PageSpeed Insights if you run a speed test or create a report.

To limit abuse, we use your IP address to rate-limit searches, especially for guests. These limits are kept in server memory, not in the database. Our server logs for search costs do not include IP addresses or the area you typed.

AI-written messages

On Pro, the “write with AI” button sends a short request to Google’s Gemini API. It contains our own findings about the business (its type, whether it has a website, what the website check found), your name and city from your profile, and the message language. It does not contain the business’s name, address, phone number or anything copied from Google Maps. The business name is filled in on your device after the message comes back.

Shareable reports

A report is a public page that anyone with the link can open. It holds our check of one business’s website, and your name and portfolio link if you have added them to your profile. It asks search engines not to index it and stops showing after 30 days. Do not create a report if you do not want that information visible to whoever you send the link to.

Payments

Pro is paid through Razorpay. You enter your UPI or card details on Razorpay’s checkout, and we never see or store them. Razorpay tells us whether a payment went through and when the subscription renews.

Anonymous usage counts

Signboard also counts a few anonymous things, to learn whether it helps freelancers find clients:

• Which pages you open: the home page, the app and this page
• That you pressed Find leads, and the type of business you picked (like Dentists)
• How many results came back, how many had no website, and whether it cost a Google search
• That you changed a filter, checked a website, or opened, copied or edited a message (yes or no, never the words)
• That you tapped WhatsApp or Call, with the message language and whether the lead was hot, warm or cold
• When you change a lead's status, like from Not contacted to Contacted, and when you switch theme

Only counts, yes-or-no answers and choices from fixed lists are sent, with a random ID so repeat visits can be counted. We don’t link it to your name or email.

What we never collect

• Business names, addresses, phone numbers, ratings or website links
• The area you typed, because typed text can contain anything
• Your messages, in any language
• Your name, your city or your portfolio link

That applies to usage counts. Your account data is described above.

Cookies and storage

Analytics uses no cookies. The random ID is kept in your browser’s local storage, next to your saved leads and settings. The only cookie Signboard sets is the sign-in cookie, if you sign in.

Who else handles your data

• Supabase stores accounts, leads, saved searches, reports and feedback.
• PostHog, an analytics service, stores the anonymous counts. They are sent through Signboard’s own address.
• Google provides business search (Places), website speed tests (PageSpeed Insights) and AI messages (Gemini). Google’s own privacy policy applies to what it receives.
• Razorpay processes Pro payments.
• Google and GitHub, if you use them to sign in, tell us your name and email.
• Our hosting provider serves the site and sees ordinary request data such as IP addresses.

These services may process data on servers outside India. We do not sell your data and we do not show ads. We share it only with the services above, or if the law requires it.

Feedback you send

If you use the feedback form, we store your message, the kind you picked, and your email if you add one. If you’re signed in, it’s linked to your account. We use it to fix problems and to reply, nothing else.

How long we keep it

• Account, profile, leads and saved searches: until you ask us to delete your account.
• Reports: they stop showing after 30 days.
• Feedback: until we no longer need it to fix the problem or reply.
• Business details from Google: a few hours in a cache.

Your choices

You can ask us to show you what we hold about you, correct it, or delete your account and everything linked to it. Email hrutuss1@gmail.com from the address on your account. We will reply within 30 days. You can also withdraw consent for anonymous usage counts at any time with the switch below. This follows India’s Digital Personal Data Protection Act, 2023.

Signboard is for people aged 18 and over. We do not knowingly collect data from children.

Turn off analytics

Switch this off and nothing is sent from this browser from that moment on. If your browser sends Do Not Track or Global Privacy Control, nothing is sent at all.

Changes to this policy

If we change what we collect or why, we will update this page and its date. For a change that affects your account data in a meaningful way, we will also tell signed-in users by email.