Privacy Policy

8Signals is the data controller for the personal data described here. Privacy questions, data requests and complaints can be sent through the contact form, or from Account → Privacy once signed in. A registered postal address and named contact will be published before commercial launch.

• Account data — email address, display name, authentication identifiers and sign-in timestamps.
• Profile and preferences — interests, markets, watchlists, alert and notification settings, onboarding answers.
• Plan data — your plan, entitlements and, once billing opens, subscription and payment records. Card details never reach our systems.
• Support data — messages you send us and any internal notes made while resolving them.
• Technical data — server logs, IP address and device/browser information, kept for security, abuse prevention and reliability.

• Contract — creating and running your account, delivering the features on your plan, handling billing and support.
• Legitimate interests — keeping the platform secure, preventing abuse, and improving the service in aggregate. We balance this against your rights and keep the data minimal.
• Consent — non-essential cookies, optional analytics and marketing email. You can withdraw consent at any time without affecting the service you already receive.
• Legal obligation — accounting, tax and fraud-prevention records once billing is live.

Your watchlists, alerts, support messages and profile are readable only by your own account. Access is enforced at the database level with row-level security, not merely in the interface. Administrators can see account-level records needed for support and billing; sensitive administrative actions are written to an audit log with the before and after state. There is no facility for staff to sign in as you, and no member of staff can read your password.

8Signals uses infrastructure providers for hosting, database, authentication and email delivery, and — when billing opens — a payment processor. Each is bound by a data processing agreement and may only act on our instructions. Where a processor operates outside the UK or EEA, transfers rely on adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. A current list of processors is available on request.

• Account, profile and preference data: while your account exists.
• After deletion: removed or irreversibly anonymised within 30 days, except records we must keep.
• Billing and tax records once billing is live: six years, as required by UK law.
• Security and server logs: up to 12 months.
• Ingested public source material and published research: retained permanently. It is not personal data about you.

You have the right to access, correct, erase, restrict and object to processing of your personal data, to data portability, and to withdraw consent at any time. You can export your data and delete your account yourself from Account → Privacy.

Requests made to us are answered within one month. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.

8Signals scores and ranks public events, not people. No automated decision is made about you that produces legal or similarly significant effects, and we do not build behavioural profiles for advertising.

The service is not intended for anyone under 18. We do not knowingly collect data from children; if we learn that we have, the account and its data are deleted.

Data is encrypted in transit, access is scoped per user and enforced in the database, administrative actions are audited, and credentials for external data providers are held server-side only and never exposed to the browser. If a breach is likely to risk your rights, we notify the ICO within 72 hours and tell affected users without undue delay.

Cookies and browser storage are covered separately in the Cookie Policy, where you can also change your choices at any time.

We will update this page when our processing changes and revise the date at the top. Material changes affecting your rights are notified by email or in the application before they take effect.