Privacy policy
Last updated: 9 October 2026
Signal Wren is provided by E-Digital Group, Inc., a Florida corporation, 2236 SE 100th Lane #3206, Webster, FL 33597 (“we”, “us”). We are the controller of the personal information described in this policy, except where section 3 says we act on a customer’s behalf.
Signal Wren is a service for businesses. It’s not for personal or household use, and you must be at least 18 to use it.
For any question, or to use any of the rights below, email support@signalwren.com.
1. What we collect
Your account
- Name and email address, which you give us when you get started, sign in or accept an invitation.
- Organisation details: the organisation’s name, its members and their roles (owner, admin or viewer), and the email addresses of people invited to it.
- Sign-in sessions: when you sign in we store a session record with your IP address and your browser’s user agent, so we can keep you signed in and spot misuse. A session lasts 7 days unless you sign out first.
- If you sign in with Google: your name, email address and profile picture from your Google account. We never receive your Google password.
The sites you monitor
- Site details you enter: each site’s address, name and the key pages you want checked.
- Check results: what our checks find on those sites’ public pages, such as status codes, redirects, robots.txt and sitemap contents, structured data, and which tags and pixels load. This is information anyone visiting the site could see.
- History: past results and the changes between them, kept for 30 days on the Free plan and 395 days (about 13 months) on Pro and Agency, then deleted automatically.
Accounts you connect (paid plans)
When an owner or admin connects a Google account, Google asks them to allow read-only access to:
| Google service | What Signal Wren reads | Why |
|---|---|---|
| Google Analytics | The properties and web streams the account can see, and for the property chosen for a site, daily totals of sessions, key events and visits referred by AI assistants | To spot drops and changes in tracked traffic |
| Search Console | The properties the account can see, and for the one chosen, clicks, impressions and average position, with the queries and pages that changed most | To spot drops in search visibility |
| Tag Manager | The containers the account can see, and for the one chosen, the published version and the tags in it | To show which publish a broken tag came from |
We also receive the connected Google account’s email address, so the app can show which account is connected.
Results from a connected account are visible to every member of the organisation it’s connected to, whatever their role.
We store a refresh token that lets the Service read this data while the account stays connected. It’s encrypted with AES-256-GCM before it’s stored. When you disconnect, we revoke the token with Google and delete it. You can also remove Signal Wren’s access at any time from your Google Account’s security settings.
The figures we read are stored as check results and deleted on the same schedule as other history.
Billing (paid plans)
Payments are handled by Stripe. Your card details go to Stripe, not to us. We store your Stripe customer ID and your subscription’s plan, status, number of sites billed and renewal date.
The public site
signalwren.com doesn’t use analytics, advertising tags or tracking cookies, and neither site loads fonts, scripts or other files from anyone else’s servers: everything is served from our own domains.
2. Why we use it, and our legal basis
Where UK or EU data protection law applies, we rely on these legal bases:
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the Service: accounts, organisations, running checks, showing results, sending sign-in links, invitations and alerts | Account, site, check and connected-account data | Performing our contract with you or your organisation |
| Sending an invitation someone asked us to send | The invitee’s email address and the organisation’s name | Our and the inviting organisation’s legitimate interest in letting teams invite colleagues |
| Keeping the Service secure and preventing abuse, for example limiting repeated sign-in attempts | Session records, IP addresses | Legitimate interest in protecting the Service and its users |
| Billing and keeping financial records | Billing data, invoices | Performing our contract, and our legal obligations |
| Answering you when you contact us | Your messages and contact details | Legitimate interest in supporting customers |
We don’t sell personal information, don’t use it for advertising, and don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
3. Data we process for our customers
Information about the sites you monitor, and data from accounts you connect, is processed on your organisation’s instructions to provide the Service. For that data, your organisation is the controller and we act as its processor.
4. Google user data
Signal Wren’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- we use Google data only to provide the monitoring features you can see in the app;
- we don’t transfer it to anyone else, except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets after obtaining your explicit consent;
- we don’t use it for advertising, and we don’t sell it;
- we don’t use it to train or improve AI or machine-learning models; and
- no person reads it, except with your explicit consent for specific data, where it’s necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.
5. Who we share it with
We use these service providers, who process data on our behalf and only as we instruct:
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Hosting, the database and its backups, sending email, and the browser that runs page checks |
| Stripe, Inc. | Payments and invoices (paid plans) |
| Google LLC | Sign-in with Google and the Google connection, when you choose to use them |
Members of your organisation can see its sites, results and members. Owners and admins can also see invitations.
We may disclose information if the law requires it, or where necessary to protect the rights and safety of our users or the public. If we’re involved in a merger, acquisition or sale of assets, personal information may transfer as part of it; Google user data transfers only with your explicit consent, as described in section 4.
6. International transfers
We’re based in the United States, and our providers store and process data in the United States and other countries. When we transfer personal information from the UK or the European Economic Area, we rely on the EU–US Data Privacy Framework and its UK Extension where a provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum in our providers’ data processing terms.
7. How long we keep it
- Check history: 30 days (Free) or 395 days (Pro and Agency), as above. Deleting a site removes it and its history from the live database straight away.
- Google refresh tokens: until you disconnect, or until the organisation is deleted.
- Sign-in links expire after 5 minutes, invitations after 48 hours and sessions after 7 days.
- Account and organisation data: while the account is open. When you ask us to delete it, we remove it from the live database within 30 days.
- Backups: deleted data can remain in database backups for up to 30 days, after which backups that contain it expire.
- Exceptions: we keep invoices and other records for as long as tax and accounting law requires.
8. Your choices and rights
In the app, you can:
- see and correct your name and organisation details;
- delete a site and its history (owners and admins);
- disconnect Google at any time (owners and admins), which revokes our access.
By emailing support@signalwren.com, you can ask us to give you a copy of your personal information, or to delete your account or organisation. Deleting an organisation isn’t available in the app yet, so we do it on request.
If you’re in the UK or EEA, you also have the right to:
- access the personal information we hold about you;
- have it corrected if it’s wrong;
- have it erased;
- restrict how we use it;
- object to processing based on legitimate interests;
- receive it in a portable format (data portability); and
- withdraw consent, where we rely on consent, without affecting earlier processing.
We’ll respond within one month. If you’re unhappy with how we handle your information, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live or work in the EEA. We’d appreciate the chance to resolve it first.
People elsewhere, including in US states with privacy laws, may have similar rights, and we’ll honour requests where the law applies.
9. Cookies
We use only cookies that are strictly necessary for the Service to work:
| Cookie | Purpose | Lasts |
|---|---|---|
| Session cookie (app.signalwren.com) | Keeps you signed in | 7 days, or until you sign out |
| Connection cookie (app.signalwren.com) | Ties a Google connection to the person who started it | 10 minutes |
signalwren.com sets no cookies. Neither site uses local storage, analytics or advertising tools. If that changes, we’ll update this policy and ask for consent where the law requires.
10. Security
Data is encrypted in transit (HTTPS), and Google tokens are also encrypted at rest. Access to production systems is limited to the people who run the Service. No system is perfectly secure; if a breach affects your personal information, we’ll notify you and the authorities as the law requires.
11. Changes
If we change this policy, we’ll update the date at the top. For significant changes, we’ll also email account owners and show a notice in the app before they take effect.
12. Contact
E-Digital Group, Inc. 2236 SE 100th Lane #3206, Webster, FL 33597 support@signalwren.com