Legal
Privacy Policy
Effective 2026-09-15.
What we collect
If you request a demo, we collect what you type into the form: your name, company, work email, phone number if you give one, what you buy at auction, and roughly how many lots a year. We also keep a salted hash of the IP address the request came from (never the raw address) for rate limiting.
If you sign in to the product, we send a one-time sign-in code to the email address you give us, and we keep that email on your account.
Like any web service, we keep ordinary usage logs generated by running the site and the product: request timestamps, IP addresses, user agents, and which pages or API routes were hit. These are operational logs, not a profile we build on you.
Why we collect it
- To reply to a demo request and, if you become a customer, to run your account.
- To send sign-in codes and account-related email.
- To keep the form and the API from being abused (the rate limit above).
- To operate, secure and debug the service.
We do not use this information to build advertising profiles, and we do not sell it.
Who processes it
A short list, because a short list is the honest one:
- Cloudflare — hosts the site, the application and the database (Workers, D1, KV).
- Resend — delivers sign-in codes and demo-request notification email on our behalf.
- Stripe — processes billing and subscription payments for paying customers.
None of these processors are permitted to use your data for their own purposes. We do not use any other subprocessor today.
Retention
Demo-request details are kept while we are in touch about a demo, and for a reasonable period after in case you come back. Account data is kept for as long as your organization has an account, plus a limited period after cancellation for support and legal reasons. Usage logs are kept for a limited operational window, not indefinitely. Ask us and we will tell you the current number for any of these.
No sale of data
We do not sell your personal information, and we do not share what your organization buys or watches on AuctionSignal with any other customer. See the crawler page for the separate, public rules on what we collect from auction listing sites.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, subject to what we are required to keep for legal or accounting reasons. Signed-in customers can also export their own data from inside the product.
Contact
Questions about this policy, or a request about your data: email billing@auctionsignal.app. Publishers asking about the crawler or an opt-out should write to bot@auctionsignal.app instead.