Privacy Policy

1. Introduction

Vumoz LLC ("we," "us," or "our") operates Organic Signal, a growth operations platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

We are committed to protecting your privacy and handling your data with transparency and care.

2. Information We Collect

We collect several types of information:

Account Information

• Name, email address, and contact information
• Company name and business details
• Account credentials (securely hashed)
• Billing and payment information

Usage Information

• Campaign and workspace data you create
• Content drafts and strategic plans
• SEO data and backlink information
• Application usage patterns and feature interaction

Technical Information

• IP address and browser information
• Device identifiers
• Log data and error reports
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Platform services
• Process your transactions and manage billing
• Improve and optimize platform performance
• Send service updates and important notifications
• Provide customer support
• Detect and prevent fraud and security issues
• Comply with legal obligations
• Analyze usage patterns to enhance features

4. Information Sharing

We do not sell your personal information. We may share information with:

Service Providers

Third-party vendors who assist in operations (hosting, payment processing, email delivery, analytics). These providers are contractually obligated to protect your data.

AI Service Providers

Content and strategy data may be processed by AI providers (DeepSeek, OpenAI, Google Gemini) to deliver platform functionality. We use enterprise agreements with privacy protections where available.

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and monitoring
• Access controls and authentication requirements
• Secure password hashing (bcrypt)
• Integration credential encryption
• Rate limiting and DDoS protection

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account termination, we retain data for 30 days to allow data export, then delete or anonymize it unless legally required to retain longer. Backup copies may persist for up to 90 days.

7. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Opt-out of marketing communications
• Object to certain data processing activities

To exercise these rights, contact us at privacy@signaganic.com

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Preferences and settings
• Analytics and performance monitoring
• Security and fraud prevention

You can control cookies through your browser settings, though some features may not function properly without them.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we or our service providers operate. We ensure appropriate safeguards are in place for international transfers.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from children. If we learn we have collected such information, we will delete it promptly.

11. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. California Privacy Rights

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information.

13. GDPR Compliance

For users in the European Economic Area, we process data under lawful bases including:

• Performance of contract (service delivery)
• Legitimate interests (platform improvement, security)
• Consent (marketing communications)
• Legal compliance

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through the Platform. Continued use after changes constitutes acceptance.

15. Contact Us

For questions about this Privacy Policy or our data practices: