Privacy Policy

Effective date: 1 September 2026

Signal Studio ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information, in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) ("PDPL") and oversight by the UAE Data Office.

Legal Basis for Processing

We process your personal data on the basis of your consent, the performance of our contract with you (providing the service and billing), our legitimate business interests (such as preventing fraud and abuse), and compliance with legal obligations.

Information We Collect

We collect information you provide directly: company name, email address, and payment information. We also collect usage data such as banners generated and sessions created.

How We Use Your Information

We use your information to provide and improve our services, process payments, send service-related emails, and respond to your requests.

Data Storage

Your data is stored securely using Supabase (EU region). Payment information is processed by Armitage Labs OÜ (trading as Creem), our Merchant of Record, and is never stored on our servers. Creem handles card details, billing, invoicing and applicable VAT/sales tax. See Creem's Terms of Service and Privacy Policy at creem.io for details.

Cross-Border Data Transfer

As permitted under the PDPL, some of your data is stored or processed outside the UAE (for example, Supabase in the EU and Creem for payments). We only transfer data to jurisdictions and providers that offer an adequate level of protection or under appropriate contractual safeguards.

Brand Assets

Logos, brand books, and product images you upload are stored securely and used solely to generate your banners. We do not share your assets with third parties.

Your Rights

Under the PDPL you have the right to access your personal data, request its correction or deletion, restrict or object to processing, withdraw consent, and request that your data be transferred. To exercise these rights, or to complain about how we handle your data, contact us at hello@signal-studio.app. You may also lodge a complaint with the UAE Data Office.

Data Retention & Deletion

We keep your data only as long as needed to provide the service and meet legal obligations. You may request deletion of your account and all associated data at any time by contacting us at hello@signal-studio.app. Data is deleted within 7 days of account cancellation, except where we must retain limited records (e.g. invoices) to comply with UAE law.

Contact

For privacy questions, contact us at hello@signal-studio.app