1. Who We Are
This website and the "Supply Signal" course and community (the "Services") are operated by Supply Signals, a sole proprietorship based in the United States ("we," "us," or "our").
- Operator legal name: SupplySignals
- Contact email: team@supplysignals.io
If you have questions about this policy or your privacy rights, contact us using the details above.
2. Scope
This policy explains how we collect, use, disclose, and protect personal information for all visitors to our Services in the United States. Several U.S. states grant their residents specific privacy rights; Section 9 explains those rights and how to exercise them. Where a state law gives you a right described in Section 9, that right applies to you as a resident of that state.
3. Personal Information We Collect
We collect the following categories of personal information. The specific information depends on how you interact with us.
| Category |
Examples we may collect |
Why we collect it |
| Identifiers | Name, email address, IP address, device identifiers | Account creation, course/community access, support, marketing |
| Customer records / commercial info | Records of purchases, products bought, transaction history | Fulfilling and supporting your order |
| Payment information | Billing details processed through Stripe (we do not store full card numbers) | Processing payment |
| Internet/network activity | Pages viewed, links clicked, time on site, referring URLs, cookie data | Analytics, improving the site, advertising |
| Geolocation (approximate) | General location derived from IP address | Analytics, fraud prevention |
| Inferences | Audience/interest segments derived from your activity | Advertising and marketing |
We do not intentionally collect "sensitive" personal information (such as government IDs, precise geolocation, racial or ethnic origin, health information, or financial account login credentials). Several state laws require opt-in consent before processing sensitive data; if we ever need to collect it, we will request your consent first. Card data is handled by Stripe and is not stored on our systems.
4. How We Collect Personal Information
- Directly from you — when you enter your email, complete checkout, contact support, or join the Discord community.
- Automatically — through cookies, pixels, and similar technologies when you use the site (see Section 8).
- From service providers — such as Stripe (payment confirmation), our email provider, and analytics/advertising platforms.
5. How We Use Personal Information
We use personal information to:
- Provide, deliver, and support the course and community;
- Process payments and prevent fraud;
- Send transactional messages (login details, receipts, account notices);
- Send marketing emails (you can unsubscribe at any time);
- Measure and improve the performance of our website and offers;
- Serve and measure advertising on platforms such as Google and Meta;
- Comply with legal obligations and enforce our Terms.
We retain personal information only as long as needed for these purposes or as required by law (see Section 11).
6. How We Disclose Personal Information
We disclose personal information to the following categories of recipients, who act as our service providers, processors, or third parties:
- Stripe — payment processing.
- [Your email service provider] — email delivery and marketing.
- Discord — to provide community access (governed by Discord's own privacy policy).
- Google — website analytics and advertising (e.g., Google Analytics, Google Ads).
- Meta (Facebook/Instagram) — advertising and measurement (e.g., Meta Pixel).
- Legal and safety recipients — courts, regulators, or law enforcement where required, and parties to a business transfer.
We do not disclose more information than necessary for each recipient's function.
7. "Sale," "Sharing," and Targeted Advertising
U.S. state privacy laws define "sale," "sharing," and "targeted advertising" broadly. Because we use advertising and analytics technologies from Google and Meta, our use of these tools may constitute the "sale" or "sharing" of personal information, and the use of personal information for "targeted advertising," under these laws.
- Categories involved: identifiers, internet/network activity, geolocation (approximate), and inferences.
- Recipients: Google and Meta (for advertising and measurement).
- We do not knowingly sell or share, or use for targeted advertising, the personal information of consumers we know to be under 16 years of age without the consent required by law.
You have the right to opt out of this activity at any time. See Section 9.
8. Cookies and Tracking Technologies
We use cookies and similar technologies (including the Meta Pixel and Google tags) to operate the site, analyze traffic, and deliver advertising. You can control cookies through your browser settings and through our cookie/opt-out controls.
Universal opt-out / Global Privacy Control (GPC): We honor recognized universal opt-out mechanisms, including the GPC browser signal. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale/sharing of personal information and targeted advertising for that browser. Several states (including California, Colorado, and Connecticut) require us to honor these signals.
Do Not Track: Some browsers offer a "Do Not Track" setting. There is no common industry standard for responding to it; we respond to recognized universal opt-out signals such as GPC as described above.
9. Your U.S. State Privacy Rights
Depending on your state of residence and the law that applies, you may have some or all of the following rights. We provide these rights to residents of states whose laws grant them.
- Right to know / access — request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Right to delete — request that we delete personal information we collected, subject to legal exceptions.
- Right to correct — request that we correct inaccurate personal information.
- Right to data portability — request a copy of your personal information in a portable format.
- Right to opt out — opt out of the sale or sharing of your personal information, its use for targeted advertising, and certain profiling that produces legal or similarly significant effects.
- Right to limit sensitive personal information — we do not use sensitive personal information for purposes that trigger this right.
- Right to non-discrimination — we will not deny you services, charge a different price, or provide a different level of service because you exercised your rights.
How to opt out of sale/sharing and targeted advertising
You may (1) use the "[Do Not Sell or Share My Personal Information]" control on our website; (2) enable the Global Privacy Control in a supported browser or extension; and/or (3) email us at team@supplysignals.io with the subject "Opt Out."
How to exercise your other rights
Submit a request by emailing team@supplysignals.io. We will verify your identity (for example, by confirming the email address associated with your account) before responding. You may use an authorized agent with proof of authorization. We will respond within 45 days (extendable by an additional 45 days with notice), as the applicable law allows.
Appeals
If we decline your request, you may appeal by replying to our decision or emailing team@supplysignals.io with the subject "Privacy Appeal." We will respond within the period required by your state's law (generally 45–60 days). If your appeal is denied, your state law may allow you to contact your state Attorney General.
State-specific notes
- California (CCPA/CPRA): California residents have the rights above, including the right to opt out of the sale/sharing of personal information and to know the categories of personal information we have sold or shared. We honor GPC.
- Virginia, Colorado, Connecticut, and similar states: Residents have the rights to access, correct, delete, obtain a copy, opt out of sale/targeted advertising/profiling, and appeal a denied request.
- Nevada: Nevada residents may submit a verified request that we not sell certain covered information by emailing us.
10. Email Marketing
If we send marketing emails, every email includes an unsubscribe link. You can opt out of marketing at any time; we may still send you transactional messages necessary to deliver products you purchased.
11. Data Retention
We keep personal information for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Payment records may be retained as required by tax and accounting rules.
12. Data Security
We use reasonable administrative and technical safeguards to protect personal information. Payment card data is processed by Stripe, a PCI-DSS compliant processor, and is not stored on our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. Children's Privacy
The Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share, or use for targeted advertising, the personal information of consumers under 16. If you believe a minor has provided us personal information, contact us and we will delete it.
14. Third-Party Links and Services
Our site may link to third-party websites and services (including Discord). We are not responsible for their privacy practices. Review their policies directly.
15. Changes to This Policy
We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.
16. Contact Us
Supply Signals
Email: team@supplysignals.io