Private beta notice · 20 July 2026. This operational policy should be reviewed by qualified counsel before paid public launch.
What SGNL collects
SGNL Desk processes account identity and sign-in security data, workspace and station configuration, uploaded media metadata, operational logs, Stripe customer/subscription references and support communications.
Payments
Stripe hosts checkout and billing management. Payment-card details are entered into Stripe and are not stored by SGNL. SGNL retains only the customer, subscription, plan and status information needed to provision access, display billing state and respond to account changes. Current checkout is in test mode and takes no real payment.
Login and billing identities
SGNL Desk verifies sign-in through short-lived email codes and stores the resulting authentication session in SGNL infrastructure. Stripe separately holds the billing contact used for receipts and invoices. SGNL displays both to the primary owner but does not treat a Stripe email change as authority to change account access.
Listener analytics
Audience reporting is privacy-minimised. SGNL records session timing, transferred bytes, broad device/source and country information. Listener identity is represented by a one-way keyed hash; SGNL does not retain raw listener IP addresses or full user-agent strings in the analytics ledger.
Why the data is used
- To authenticate operators and enforce workspace permissions.
- To run stations, deliver streams, meter plan capacity and investigate reliability incidents.
- To provision subscriptions, send essential account notices and prevent billing abuse.
- To protect SGNL and its users from abuse and unauthorised access.
Providers and international processing
SGNL uses specialist providers including Stripe, Cloudflare, Hetzner and object-storage services. Data may be processed outside Australia where those services operate. Providers receive only the information needed to perform their role.
Retention and control
After a paid period ends, the workspace is recoverable and exportable for 30 days before primary media and operational station data are purged. Deleted customer media may remain in encrypted disaster-recovery snapshots for up to 90 days. Detailed listener analytics use a 180-day window; licensing/playout records follow the station's selected one-to-seven-year setting. Minimal billing, security and fraud-prevention evidence may be retained where legally required.
Export
Workspace owners can prepare a portable export of station configuration, original-media download links, metadata, playlists, schedules, reports and privacy-safe analytics. Secure export links expire after 24 hours. Secrets, credentials, MCP tokens and payment-card data are never included.
Contact
For privacy requests, email support@sgnldesk.co.
SGNL does not sell personal information. Essential security, billing and service messages cannot be disabled while an account exists.