Privacy Policy

1. Introduction

Isignali Technologies (Pvt) Ltd ("Isignali", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Isignali platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password (stored as a bcrypt hash), and selected account role (Advertiser, Agency, or Regulator).
• Organisation details: company name, industry, contact information, and billing address.
• Ad clip content: audio files you upload for fingerprint registration, along with associated metadata such as campaign name, client name, and duration.
• Communications: messages you send to our support team or through the dispute resolution system.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, timestamps, and session duration.
• Device information: browser type, operating system, IP address, and device identifiers.
• Cookies and similar technologies: session cookies for authentication and analytics cookies for platform improvement. See our Cookie Policy for details.

2.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name, email address, and Google account identifier from Google. We do not receive your Google password. The information received is governed by Google's Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Isignali Service, including processing audio fingerprints and generating proof-of-play records.
• Authenticate your identity and manage your account and session.
• Send transactional emails including email verification, password reset, and detection notifications.
• Respond to your support requests and facilitate dispute resolution.
• Analyse usage patterns to improve the platform's performance, accuracy, and features.
• Comply with legal obligations, including responding to lawful requests from regulatory authorities.
• Detect and prevent fraud, abuse, and security incidents.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: third-party vendors who assist us in operating the platform (e.g., cloud hosting, email delivery), bound by confidentiality obligations.
• Within your organisation: if you are part of an agency account, your profile information may be visible to other administrators within that organisation.
• Regulatory bodies: if you are a Regulator user, you may access aggregated, anonymised detection data for stations within your jurisdiction.
• Legal requirements: if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Isignali, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to the acquirer honouring this Privacy Policy.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Proof-of-play detection records are retained for a minimum of 24 months to support dispute resolution and regulatory compliance. Uploaded audio clips are retained until you delete them or close your account. We may retain certain information for longer periods where required by law or for legitimate business purposes such as fraud prevention.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, HttpOnly session cookies, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data and encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorised access.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to legal retention obligations.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing of your personal information for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

9. International Transfers

Your information may be stored and processed in countries outside Zimbabwe, including where our cloud infrastructure providers operate. We ensure that any such transfers are subject to appropriate safeguards in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at [email protected] or write to Isignali Technologies (Pvt) Ltd, Harare, Zimbabwe.