Privacy
Policy.
Who we are
This privacy policy applies to Signal AI Agency (“Signal,” “we,” “our,” or “us”), a Brooklyn-based local SEO and AI search practice owned and operated by Joshua Supitskiy. The site this policy governs is www.signalai.agency.
What we collect
Signal collects only what is needed to run a small client services practice. The categories are:
- Information you give us — name, email, business name and type, website URL, neighborhood, and anything else you submit through forms (the free AI check form, the newsletter signup, or a Google Calendar booking).
- Email correspondence — when you email us at josh@signalai.agency, we keep that thread.
- Analytics & usage data — pages viewed, referring source, device type, approximate location, and similar non-identifying browsing signals collected through Google Analytics 4.
- Server logs — standard hosting logs (IP address, user agent, timestamps) retained by our hosting provider, Vercel, for security and reliability.
We do not collect payment card information on this site. Invoicing is handled through third-party processors (such as Stripe) under their own privacy terms.
How we use it
- To respond to inquiries, deliver the free audit, and follow up on a discovery call.
- To deliver and improve client work for businesses that engage Signal.
- To send the newsletter to people who signed up for it.
- To understand which content and pages are useful, so we can publish more of what people read and less of what they don’t.
- To meet basic legal, tax, and accounting obligations.
We do not sell, rent, or trade personal information. We do not use your information to train AI models.
Cookies & analytics
Signal uses Google Analytics 4 to understand traffic. GA4 sets cookies in your browser that help measure sessions, pages per session, and broad referral sources. You can opt out at the browser level (most browsers allow cookie blocking) or at the Google level via the Google Analytics opt-out add-on. When you use the free AI check form, GA4 also records that the form was opened and sent, how far through its steps you got, whether you clicked through to book a call, and which answer you picked to “What’s your current situation?”, but not your name, email address, business name, or website.
The newsletter signup form on the homepage and the Journal is loaded from Beehiiv, and the form and the services it loads can set cookies of their own; the Newsletter section below explains what they do.
Signal does not use third-party advertising trackers, retargeting pixels, Meta pixels, or session replay tools. There is no advertising on this site.
Scheduling & third-party tools
If you book a discovery call, your booking is processed by Google Calendar’s appointment scheduling under Google’s privacy policy. The audit intake form is handled by our own form handler on Vercel, and your answers are delivered to us by email through Resend, an email-sending service, so we can prepare your audit; we may also send you a short confirmation, through Resend, that your request arrived (see Resend’s privacy policy). To keep automated spam out, the form runs Cloudflare Turnstile, a bot check: when you fill in the form, Cloudflare processes technical signals from your browser and your IP address to tell people from bots, under Cloudflare’s Turnstile privacy addendum. It never sees your answers. Email to josh@signalai.agency is hosted by Namecheap’s Private Email service (see Namecheap’s privacy policy) and forwarded to a Gmail inbox run by Google, which is also where AI check notifications arrive. Hosting and analytics are processed by Vercel and Google respectively. The newsletter is hosted and sent by Beehiiv (see below). Each of these vendors also has its own privacy terms.
Newsletter
If you sign up for Signal’s weekly newsletter, we collect your email address and use it to send you the newsletter. We do not sell, rent, or trade it. You can also opt in by ticking the box on the free AI check form; your email address is then passed to Beehiiv to add you to the list.
The list is hosted, and each issue is sent, by Beehiiv (beehiiv Inc.) as our service provider; this policy covers that. Beehiiv’s own privacy policy covers what Beehiiv does on its own account, such as security and bot checks. Along with your address, Beehiiv records where you signed up and how you got there (the referring page and any campaign tags in the link), and, like most email platforms, whether each issue is opened and which links in it are clicked. We look at those numbers to learn which issues and stories are useful.
The signup form on the homepage and the Journal loads from Beehiiv as soon as those pages open, before you type anything. To keep bots out, Beehiiv’s form runs bot checks from HUMAN Security and Cloudflare, which look at technical signals from your browser and device and at your IP address, and it loads Beehiiv’s Google Tag Manager and Cloudflare’s cookie-free page analytics. These can store their own cookies or similar data inside the form. Beehiiv’s privacy policy covers that processing. Beehiiv’s form script can also set small cookies on this site: one that remembers how you arrived (kept for 30 days) and, once you subscribe, one that stops the form asking again (kept for a year). The newsletter’s website, newsletter.signalai.agency, also runs on Beehiiv, and the same split applies.
The newsletter has a referral program: each subscriber gets a personal share link, and Beehiiv records who signs up through it so referrals can be counted. If a referral reward ever needs a mailing address, you will be asked for it first.
Every issue has an unsubscribe link at the bottom; use it and the emails stop. Your address is kept while you are subscribed and, after you unsubscribe, until you ask us to delete it: unsubscribing stops the emails but does not by itself delete the address. To have it deleted, email josh@signalai.agency with the subject line “Privacy Request” and we will delete it from the list.
Data retention
Inquiry and audit-form submissions are kept for as long as the inquiry is active and for a reasonable period afterward in case you return. Client records are kept for the duration of an engagement plus the period required for legal, tax, and accounting purposes (generally seven years in the United States). Your newsletter address is kept while you are subscribed and, after you unsubscribe, until you ask us to delete it, as described above. Analytics data is retained per GA4’s standard retention settings.
Your rights
If you are a resident of New York, California, the European Union, the United Kingdom, or another jurisdiction with consumer-data rights, you can request that we:
- Confirm whether we hold information about you.
- Provide a copy of that information.
- Correct anything that is wrong.
- Delete information that we are not legally required to keep.
- Stop sending you email.
To exercise any of these, email josh@signalai.agency with the subject line “Privacy Request.” We will respond within 30 days.
Children
This site is intended for businesses and is not directed to children under 16. The newsletter is for adults; Beehiiv, which runs it, says in its privacy policy that no one under 18 may sign up. We do not knowingly collect information from children.
Security
Signal takes reasonable, industry-standard steps to protect the information we hold — including encrypted email and scoped vendor access. No internet transmission is ever 100% secure. If you have a security concern, please email josh@signalai.agency.
Changes to this policy
If this policy materially changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify clients with active engagements directly.
Contact
Questions about this policy or your information? Email josh@signalai.agency. Mail can be sent to Signal AI LLC, Brooklyn, NY.