Trust center
Privacy notice
A plain-language view of what PoolSignal stores, why it is needed, and how you can control it.
Effective August 21, 2026
Data you provide
PoolSignal stores account details such as your email and display name; pool details such as volume, surface, sanitizer, time zone, and testing preference; water readings, recommendation snapshots, treatment confirmations, corrections, optional recommendation feedback, and assistant conversations you choose to send.
PoolSignal does not ask for an exact street address. Time zone and pool details are enough for the current product.
Data created while you use PoolSignal
We create timestamps, immutable recommendation and safety-policy records, bounded AI usage and cost metadata, and privacy-minimized product events. Product events record an opaque link, surface, event type, and time. When you open a product link while signed in, we also associate that click with your PoolSignal account for internal engagement reporting. The event does not contain your email, name, pool details, note, chat text, or exact address. Server rate limits store one-way digests rather than raw email or IP values.
How data is used
- Provide your pool profile, history, deterministic chemistry guidance, and treatment record.
- Ground assistant responses in pool information you are allowed to access.
- Protect accounts, enforce usage limits, investigate failures, and maintain safety records.
- Improve PoolSignal using first-party page, performance, and bounded interaction measurements across public pages and the signed-in app. Dynamic record identifiers are replaced with general route labels. Query strings, authentication callbacks, retailer redirect paths, and account content are excluded. Raw water readings, pool details, feedback notes, assistant messages, search terms, email, and exact addresses are prohibited from analytics.
Advertising measurement
If you choose “Allow measurement,” PoolSignal uses Meta Pixel on public marketing and account-entry pages and may send a matching server event when a new account is created. Meta may receive page visits, available Meta click and browser identifiers, IP address, browser user agent, and one-way hashed versions of the signup email and internal account identifier for advertising measurement and attribution. We also measure successful sign-ins and clicks that open reviewed product links. Product-link events include only a general product category and page area—not a product or redirect identifier.
PoolSignal does not load Meta Pixel inside the signed-in app, on private pool records, treatment pages, the assistant, or the admin dashboard. We do not send Meta your name, water readings, pool profile, treatment details, or assistant messages. Your choice is saved in this browser and can be changed below. You can also review advertising choices through the Digital Advertising Alliance.
Meta measurement is disabled on this browser.
Service providers and product links
PoolSignal relies on hosting, database/authentication, AI infrastructure, analytics, and advertising-measurement providers to operate and understand the service. When the assistant is enabled, relevant pool context and your message are sent to the configured AI provider through the server; hidden credentials are never included. Product links open manufacturer or retailer destinations, which apply their own privacy terms.
Your controls
From Privacy and account settings, you can correct your pool profile, download the current versioned JSON export, or permanently delete your account. Deletion removes user-namespaced files and owned pool history before the authentication identity is removed. It also removes the account association from product-click events, while the anonymous event may remain for aggregate reporting. Some other privacy-minimized operational records may not identify you and may remain in aggregate form.
Retention and security
Account data is kept while your account is active or as needed to operate and protect the beta. PoolSignal uses row-level authorization, least-privilege database grants, server-only administrative credentials, validated redirects, and rate limits. No online service can promise absolute security.
Changes
This notice may change as the beta adds providers or features. The effective date above will be updated when the notice changes materially.