1. Who we are
SignalARC is a small business owned and operated by Joshua Onofrio, based in Kelowna, British Columbia, Canada. We provide AI readiness assessments, content syndication lead generation services, and related tools to business owners in Canada and the United States.
In this policy, "we," "us," and "SignalARC" refer to the business. "You" refers to the person visiting signalarc.io or using any of our services.
2. What information we collect
2.1 Information you give us directly
- Contact & account info — your name, email address, company name, and work email when you fill out a form, book an assessment, create a client account, or email us.
- Payment information — processed securely by Stripe. We do not see or store your full card number, CVC, or expiry. We receive only a payment confirmation and the last four digits for reconciliation.
- Business context — answers you provide in the AI Readiness Quiz or pre-call questionnaire (your industry, team size, workflows, biggest time drains, etc.).
- Call recordings and transcripts — if you purchase an AI Assessment, the client-paced audit call (typically 8–12 minutes) is recorded and transcribed with your explicit consent at the start of the call, solely to generate your custom report. You may decline recording and the call will not be transcribed.
- Communications — any email, form submission, chat message, or other correspondence you send us.
2.2 Information collected automatically
- Usage data — pages visited, time on page, referrer, browser type, approximate geographic region (derived from IP), and device type.
- Cookies — see Section 5.
2.3 Information from third parties
- Stripe — payment confirmation data.
- Email provider — bounce, delivery, and engagement data if you're on our email list.
- Referrals — if you were referred by another SignalARC client, we may record that connection to credit the referrer.
3. How we use your information
We use personal information only for the purposes it was collected for:
- To deliver our services — scheduling calls, generating reports, delivering leads, running assessments, processing payments.
- To communicate with you — confirmations, delivery emails, critical account notices, and (if you opted in) occasional newsletters. You can unsubscribe from marketing email any time.
- To improve our services — anonymized and aggregated usage data helps us understand what's working. Individual data is not used to retrain or train AI models.
- To meet legal obligations — tax, accounting, dispute resolution, and compliance with Canadian and applicable US law.
We do not sell your personal information. We do not use your call transcripts, questionnaire answers, or report contents to train third-party AI models.
4. Who we share information with
We share personal information only with vendors who help us deliver the service, under written data-processing terms. Specifically:
- Stripe (payments) — stripe.com/privacy
- Supabase (database / authentication) — supabase.com/privacy
- Netlify (hosting) — netlify.com/privacy
- Anthropic (AI processing for report generation — Claude) — anthropic.com/privacy
- Email provider (transactional and marketing email delivery)
- Calendar / scheduling tool (booking the assessment call)
- Voice-AI provider (only if you opt into a voice-AI audit instead of a live call — Retell or similar; disclosed to you in advance)
We disclose personal information to authorities only when legally required (subpoena, court order, or statutory obligation).
If SignalARC is acquired, merged, or dissolved, your information may transfer to the successor entity subject to the same privacy protections.
5. Cookies & similar technologies
We use a minimal set of cookies:
- Essential cookies — for example, keeping you signed into the client portal. These are required for the service to work.
- Analytics cookies — aggregated page-view data. We use the privacy-lighter options where available and do not use cookies to build advertising profiles.
You can disable cookies in your browser settings. Some features may not work without essential cookies.
6. How long we keep your data
- Client records — kept for seven years after your last interaction, for tax and accounting compliance.
- Call recordings and transcripts — deleted 90 days after your assessment is delivered, unless you ask us to keep them longer.
- Marketing email list — kept until you unsubscribe, then deleted within 30 days.
- Quiz responses and questionnaire answers — kept for 12 months, then deleted.
- Payment records — retained for seven years (tax compliance).
7. Your rights
Regardless of where you live, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correct — ask us to fix anything that's wrong or out of date.
- Delete — ask us to erase your personal information (subject to legal retention requirements).
- Port — receive your data in a portable machine-readable format.
- Withdraw consent — opt out of marketing communications or the collection of optional data.
- Object — to how we process your personal information.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. International data transfers
SignalARC is based in Canada. We use service providers in Canada, the United States, and occasionally the European Union. By using our services, you consent to your personal information being processed in those jurisdictions. All our vendors are contractually required to maintain privacy protections equivalent to or stricter than PIPEDA.
9. Security
We protect your information with industry-standard measures: HTTPS encryption for all data in transit, row-level security on our database, limited access controls for team members, and a policy of not storing payment card details ourselves (Stripe handles that).
No system is perfectly secure. If a breach affects your personal information, we will notify you and the Privacy Commissioner within the timelines required by law.
10. Children's privacy
SignalARC services are for adult business owners. We do not knowingly collect personal information from anyone under the age of 16. If we learn that we've inadvertently collected information from a minor, we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced via email to active clients and posted at the top of this page with a new "Last updated" date. Continued use of the service after a change means you accept the revised policy.
12. Contact us
Questions, requests, or complaints about this policy:
Joshua Onofrio, SignalARC
Kelowna, British Columbia, Canada
[email protected]
This policy is provided for transparency and general information. It is not legal advice. Your use of SignalARC is also governed by our Terms of Service.