Imperial Signals

Privacy Policy

Last updated: October 28, 2026

Plain-English policy. Have a lawyer review before public launch.

Who we are

Imperial Signals is a service operated by Imperial Pipeline Ltd ("we", "us"), a company registered in England and Wales, trading as Imperial Signals. We are the data controller for the personal data described in this policy.

What we store

  • Your account: email, name, password hash (via Supabase Auth).
  • Your profile: what you sell, your ICP, keywords, verticals, capabilities. You typed these; we didn't buy them.
  • Your watchlist & notes: the companies you chose to track and the short notes you added.
  • Drafts: AI-generated emails, posts and RFP responses saved to your library.

What we don't store

We do not sync your CRM, deal pipeline, or third-party contact databases. We do not store confidential business data about anyone else.

Public signal data

Signals are pulled from public sources (Companies House, SEC EDGAR, Google News, Gov.UK, SAM.gov, Find a Tender, Contracts Finder, etc.). We cache them per-company, not per-user.

AI processing

Text you enter (profile fields, notes) and public signal text may be sent to OpenRouter, which routes it to the model provider we have selected, to generate summaries and drafts. We don't use your data to train models.

Legal basis

We process your account, profile, watchlist and draft data to perform our contract with you. We rely on legitimate interests for security, fraud prevention and product improvement, on consent for optional marketing email, and on legal obligation where law requires it.

Who we share data with

  • Service providers: hosting (Vercel and Railway), database and authentication (Supabase), email delivery (Resend), and AI processing (OpenRouter and the model provider it routes to).
  • Stripe, our payment processor, for card payments, subscription management, invoicing and sales tax calculation. Stripe receives your name, email address, billing address and card details; we never see or store your card number.
  • Professional advisers (legal, accounting) where needed.
  • Authorities where we are required to by law.

We never sell your personal data. Some providers process data outside the UK/EEA; where they do, transfers are covered by adequacy decisions or Standard Contractual Clauses.

Retention

We keep your account data while your account is active. Delete your account and we remove your profile, watchlist, notes and drafts. Limited billing and tax records are retained by us, and by Stripe as our processor, for as long as UK law requires. Anything we no longer need is deleted or anonymised.

Cookies & analytics

Essential session cookies only, used for login. No third-party ad tracking.

Your rights

Under UK GDPR you can request access, rectification, erasure, restriction, portability, object to processing, and withdraw consent at any time. Export or delete your data yourself from Account → Data & Privacy, or email us and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Data is encrypted in transit (HTTPS) and at rest. Row-level security scopes every table so only you can read your own rows, and access is limited to staff who need it.

Contact

Imperial Pipeline Ltd, support@imperialsignals.com