Privacy Policy
Last updated: 16 April 2026
This Privacy Policy explains what data Signal Quadrant ("we", "us", "our") collects when you use our MCP intelligence service, website, and related products (the "Service"), how we use it, and your rights.
1. What We Collect
Free tier MCP queries:
| Data collected | Purpose | Contains PII? |
|---|---|---|
| Sector queried (e.g., "healthtech") | Query analytics, product improvement | No |
| Stage queried (e.g., "seed") | Query analytics | No |
| Amount provided (e.g., "0.5 Cr") | Funding percentile computation | No |
| Burn rate provided | Burn benchmarking | No |
| Team size provided | Team benchmarking | No |
| Tool called (e.g., "sector_benchmark") | Product usage analytics | No |
| Timestamp | Rate limiting, analytics | No |
| Hashed IP address (SHA-256, truncated) | Rate limiting (20/day enforcement) | No — not reversible to original IP |
What we do NOT collect in the free tier:
- Your name, email address, or any personal identifiers
- The name of any company you are evaluating
- Your conversation with the LLM (we only see the tool call, not the surrounding chat)
- Your raw IP address (we store only a one-way hash)
- Cookies, browser fingerprints, or device identifiers
Website (signalquadrant.com): Our website is a static HTML page. We do not use cookies, tracking pixels, analytics scripts, or third-party trackers. Cloudflare may collect standard web traffic analytics (IP addresses, page views) as part of their infrastructure; this is governed by Cloudflare's Privacy Policy.
2. How We Use Your Data
- Rate limiting: Hashed IP is used to enforce the 20 queries/day free tier limit. It is not used for identification.
- Product analytics: We aggregate query metadata (which sectors, stages, and tools are most used) to improve the Service. This data is analyzed only in aggregate — we never examine individual queries.
- Market intelligence: Aggregated, anonymized query patterns (e.g., "HealthTech queries increased 30% this month") may inform our research. No individual query is ever attributed or identifiable.
3. What We Do NOT Do
- We do not sell, share, or disclose your query data to any third party
- We do not serve advertisements
- We do not build individual user profiles
- We do not use your data to train machine learning models
- We do not send marketing emails (we don't collect your email in the free tier)
4. Data Storage and Security
Query logs are stored in Cloudflare D1, a serverless database operated by Cloudflare, Inc. Data is stored in the APAC region (Singapore). Cloudflare provides encryption at rest and in transit.
We retain query logs for 12 months, after which they are automatically purged. Hashed IP data cannot be reversed to identify you.
5. Paid Tier (Future)
When the paid tier launches, it will require account creation via WorkOS AuthKit. At that point, we will collect:
- Email address (for authentication and billing)
- Usage data tied to your account (for billing and usage limits)
This Privacy Policy will be updated before the paid tier launches. We will notify users of material changes.
6. Your Rights Under DPDP Act 2023
If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023:
- Right to access: You may request a copy of any personal data we hold about you.
- Right to correction: You may request correction of inaccurate data.
- Right to erasure: You may request deletion of your data.
- Right to grievance redressal: You may contact us with any data protection concerns.
In practice, the free tier collects no personal data that can identify you. If you believe we hold data about you, contact us and we will investigate.
7. International Users
The Service is primarily designed for the Indian startup ecosystem. If you access the Service from outside India, your query data will be processed in the APAC region (Singapore) under the same protections described here. We do not specifically target users in the EU; however, if GDPR applies to you, the same rights of access, correction, and erasure are available.
8. Children
The Service is not intended for use by anyone under 18. We do not knowingly collect data from minors.
9. Changes to This Policy
We may update this Privacy Policy when the paid tier launches or when our data practices change. The "Last updated" date at the top will reflect any changes.
10. Contact
Data protection questions: privacy@signalquadrant.com
General inquiries: hello@signalquadrant.com