Privacy notice
1. Who we are
Signalkeen is a research service run by Oak Mountain Digital LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA. Privacy requests go to privacy@signalkeen.com. [TBD: whether a data-protection officer or an EU/UK representative is required and, if so, who.]
2. What the service does
Signalkeen reads public web pages, public DNS records and public job-board listings published by companies and public bodies, and produces signals about those organisations: a public URL, a verbatim quote of at most 300 characters, the date it was read, and a confidence level. The service is firm-level. It does not identify, store or look for a natural person. The output is delivered to customers as a file.
3. Personal data we do not collect
No name, job title, email address, telephone number or profile URL of any natural person is collected, extracted, inferred, logged, labelled or exported in the course of producing signals. No content from LinkedIn is read. A sentence that contains an email address, a telephone number, a LinkedIn link, or a person’s name next to a job title is withheld from any processing by a language model and cannot become a signal.
4. Personal data that may be held incidentally
To allow a signal to be re-verified later, we keep a saved copy of each public page we read, in full. Where a page itself publishes personal data (for example a page listing an organisation’s staff), the saved copy contains that data. We do not read it out, extract it, index it, or use it for any purpose. Saved pages are deleted after 90 days. Evidence copies attached to a signal are deleted one year after the signal stops being open. [TBD: the lawful basis relied on for this incidental holding; whether a legitimate-interests assessment is required and, if so, its conclusion.]
5. Requests to stop
An organisation may ask us to stop reading its website by email to the crawler’s contact address, or by a robots.txt rule addressed to SignalkeenBot. A request by email is acted on within five working days: all requests to the domain and its subdomains stop, saved pages are deleted, nothing further about the organisation is passed on, and we reply to confirm. The request is recorded as a domain, a date and a reason in words; the sender’s name and address are not recorded in the service. [TBD: how long the email itself is retained in the mailbox, and by whom.] The full wording is on our crawler’s page.
6. Processing by language-model providers
One step of the service sends short sentences taken from an organisation’s own public pages to a language-model provider to be classified. The provider must be hosted in the United States or the European Union. No sentence that has tripped the personal-data check in section 3 is sent. The provider returns labels, not text. We do not train any model. [TBD: the current provider and its role; whether a data-processing agreement is in place; international transfer mechanism, if any.]
7. Other processors and recipients
[TBD: hosting provider for this website once deployed; the Census Bureau Data API (used for population figures of US public bodies; no personal data is sent); any email provider for the contact mailbox; customers who receive exports (firm-level data only).]
8. Visitors to this website
This website sets no cookies, runs no analytics, and loads no script from any third party. If you switch the colour theme, your choice is stored in your browser’s local storage under one key and is not sent anywhere. [TBD: server access logs kept by the hosting provider once deployed, and their retention.]
9. Customers and prospective customers
[TBD: what we collect when a prospective customer writes to us (name, work email, message), why, how long we keep it, and the lawful basis. No sales address or form exists yet.]
10. Your rights
[TBD: the rights that apply under the laws that bind us, how to exercise them, the response time, and the supervisory authority to complain to.]
11. Changes
[TBD: how changes to this notice are published and versioned. No version has been adopted.]