Privacy notice

Data you provide

PoolSignal stores account details such as your email and display name; pool details such as volume, surface, sanitizer, time zone, and testing preference; water readings, recommendation snapshots, treatment confirmations, corrections, optional recommendation feedback, and assistant conversations you choose to send.

PoolSignal does not ask for an exact street address. Time zone and pool details are enough for the current product.

Data created while you use PoolSignal

We create timestamps, immutable recommendation and safety-policy records, bounded AI usage and cost metadata, and privacy-minimized product events. Product events record an opaque link, surface, event type, and time—not your email, note, chat text, or exact address. Server rate limits store one-way digests rather than raw email or IP values.

How data is used

• Provide your pool profile, history, deterministic chemistry guidance, and treatment record.
• Ground assistant responses in pool information you are allowed to access.
• Protect accounts, enforce usage limits, investigate failures, and maintain safety records.
• Improve PoolSignal using first-party page and performance measurements on public pages only. Query strings, authenticated app routes, auth routes, and retailer redirects are excluded. Raw feedback notes, chat content, email, and exact addresses are prohibited from analytics.

Service providers and product links

PoolSignal relies on hosting, database/authentication, and AI infrastructure providers to operate the service. When the assistant is enabled, relevant pool context and your message are sent to the configured AI provider through the server; hidden credentials are never included. Product links open manufacturer or retailer destinations, which apply their own privacy terms.

Your controls

From Privacy and account settings, you can correct your pool profile, download the current versioned JSON export, or permanently delete your account. Deletion removes user-namespaced files and owned pool history before the authentication identity is removed. Some privacy-minimized operational records may not identify you and may remain in aggregate form.

Retention and security

Account data is kept while your account is active or as needed to operate and protect the beta. PoolSignal uses row-level authorization, least-privilege database grants, server-only administrative credentials, validated redirects, and rate limits. No online service can promise absolute security.

Changes

This notice may change as the beta adds providers or features. The effective date above will be updated when the notice changes materially.