Privacy Policy

Effective date: June 14, 2026 · JackpotDistributions LLC

1. Who We Are

JackpotDistributions LLC ("we," "us," "our") operates SignalCard™ at signalcard.app. For privacy inquiries, contact us at info@signalcard.app.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional at signup)
• Password (stored as a bcrypt hash — we never store your plaintext password)
• Subscription status and PayPal payer ID (provided by PayPal on successful payment)
• Notification phone number (if you choose to enable SMS alerts)

2.2 Business Card Content

When you build a SignalCard, we store the business information you provide (business name, industry, phone, email, website, and any other details you enter). This information is used to generate your AI copy and images and to display your published card.

2.3 Card Visitor Analytics

When visitors view your published card, we collect analytics events including:

• Event type (view, share click, email click, offer claim)
• Approximate time of event
• Referrer URL (where the visitor came from)
• Country (derived from IP address — IP is not stored permanently)
• Browser/device type (from user agent string)

2.4 Payment Information

We do not collect or store your credit card or bank details. All payment processing is handled by PayPal. We receive a PayPal payer ID and subscription ID to associate your account with an active subscription.

2.5 Automatically Collected Information

When you use the Service, we may automatically collect standard server logs including your IP address, browser type, pages visited, and timestamps. These are used for security, debugging, and uptime monitoring only.

3. How We Use Your Information

We do not use your information for advertising profiling, behavioral tracking, or any purpose not listed above.

4. AI Content Generation

The business information you provide is sent to OpenAI's API (GPT-4o) to generate your card copy and image prompts. Images are generated via OpenAI's image generation API. By using the Forge feature, you consent to your business information being processed by OpenAI subject to OpenAI's Privacy Policy. We do not use your data to train AI models.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• PayPal — for subscription payment processing
• OpenAI — for AI content generation (business info only)
• Legal requirements — if required by law, subpoena, or court order
• Business transfer — if SignalCard™ is acquired or merged, with advance notice to you

6. Cookies and Local Storage

We use the following browser storage:

• sc_token — an httpOnly authentication cookie (30-day session, required for account access)
• fx preference — localStorage key storing your visual effects preference (on/off) for card viewing

We do not use third-party advertising cookies or tracking pixels. We do not use Google Analytics, Meta Pixel, or similar third-party analytics tools.

7. Data Retention

• Account data is retained for the duration of your subscription and 30 days after cancellation or termination
• Card analytics are retained while your account is active and deleted with your account
• Password reset tokens expire after 1 hour
• Server logs are retained for up to 90 days for security purposes

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a machine-readable format
• Opt-out of SMS — disable notifications at any time in your dashboard settings

To exercise any of these rights, email us at info@signalcard.app. We will respond within 30 days.

9. Data Security

We implement the following security measures:

• Passwords hashed with bcrypt (cost factor 12)
• Authentication via httpOnly, Secure JWT cookies (not accessible to JavaScript)
• All data transmitted over HTTPS/TLS
• Database stored on our own servers — not third-party cloud databases
• Password reset tokens are single-use and expire after 1 hour

No system is completely secure. In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery.

10. Children's Privacy

SignalCard™ is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us at info@signalcard.app and we will delete the account.

11. Third-Party Links

Your published SignalCard may contain links to third-party websites (your business website, social profiles, etc.). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act. We do not sell personal information as defined by the CCPA. To submit a verifiable consumer request, email info@signalcard.app with "CCPA Request" in the subject line.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and notify you by email at least 14 days before material changes take effect. Continued use of the Service after that date constitutes your acceptance of the updated Policy.

14. Contact Us

For any privacy questions, data requests, or concerns:

info@signalcard.app
JackpotDistributions LLC