Privacy Policy

Last updated: February 2026

1. Introduction

Sign Stack ("we," "our," or "us") operates the SignCode web application and website. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

2. Information We Collect

We collect information you provide directly when creating an account:

• Name and email address
• Organization name (if provided)
• Account credentials (passwords are hashed and never stored in plain text)

We also collect limited usage data to maintain and improve the service:

• Session metadata (login timestamps, device type)
• Project data you create within the application (sign codes, floor plans, schedules)

3. How We Use Your Data

Your data is used exclusively to:

• Provide, maintain, and improve the SignCode service
• Process your account registration and authentication
• Send essential service notifications (not marketing emails)
• Generate aggregated, anonymized usage statistics

4. Data Sharing

We do not sell, rent, or share your personal information with third parties. We do not use advertising trackers. Project data you create within SignCode remains yours and is never accessed for purposes other than service delivery.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption (TLS in transit, AES-256 at rest). We use Firebase (Google Cloud infrastructure) for authentication and data storage, which maintains SOC 2, ISO 27001, and GDPR compliance certifications.

6. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent at any time

To exercise these rights, contact us at hello@sign-stack.com.

7. Cookies

We use essential cookies only — for session authentication and theme preferences. We do not use marketing, analytics, or third-party tracking cookies.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data and project data will be permanently removed within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, contact us at hello@sign-stack.com.