Privacy Policy

Effective date: January 1, 2026 | Last updated: April 12, 2026

This Privacy Policy describes how Passive Edge AI LLC ("we," "us," or "our") collects, uses, and shares information about you when you use our website at signals.benchra.net and our services.

1. Information We Collect

We collect information you provide directly to us, such as your name and email address when you subscribe, contact us, or purchase a service. We also collect information automatically, including your IP address, browser type, referring URL, and pages visited.

2. How We Use Your Information

We use the information we collect to provide and improve our services, process transactions, send you service-related communications (including our weekly signal digest), and comply with legal obligations. We do not sell your personal information.

3. Payment Processing

We use Stripe to process payments. Your payment information is transmitted directly to Stripe and is subject to Stripe's privacy policy at stripe.com/privacy. We do not store your full credit card information on our servers.

4. Third-Party Services

We use the following third-party services that may process your data:

Stripe -- payment processing. Subject to Stripe's Privacy Policy.

Brevo -- transactional and marketing email delivery (welcome emails, weekly digests, unsubscribe handling). Subject to Brevo's Privacy Policy.

Cloudflare -- DNS, CDN, and DDoS protection. Cloudflare may process your IP address and request metadata. Subject to Cloudflare's Privacy Policy.

5. Cookies and Tracking

We do not use advertising or third-party tracking cookies. Our website may set a session cookie to remember your preferences. Cloudflare may set a security cookie (__cf_bm) to distinguish humans from bots. You can disable cookies in your browser settings, though some site functionality may be affected.

6. Data Retention

We retain your personal information according to the following schedule:

Email subscriber data -- retained until you unsubscribe or request deletion.

Transaction records -- retained for 7 years as required by US tax law.

Server logs (IP addresses) -- retained for 30 days, then automatically deleted.

Customer reviews -- retained until you request removal.

When data is no longer needed, it is securely deleted from our systems and backups within 30 days.

7. Your Rights (GDPR)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation:

Right of Access -- request a copy of all personal data we hold about you.

Right to Rectification -- correct any inaccurate or incomplete personal data.

Right to Erasure -- request deletion of your personal data ("right to be forgotten").

Right to Data Portability -- receive your data in a structured, machine-readable format.

Right to Restriction -- request that we limit how we process your data.

Right to Object -- object to processing of your data for direct marketing or other purposes.

To exercise any of these rights, email support@signals.benchra.net. We will respond within 30 days.

8. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the CCPA:

Right to Know -- you may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete -- you may request deletion of personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out of Sale -- we do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.

Right to Non-Discrimination -- we will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, email support@signals.benchra.net with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

9. Delete My Data

You can request complete deletion of all your personal data at any time. We offer two methods:

Automated: Use the unsubscribe link in any of our emails, then click "Delete my data" on the confirmation page, or send a POST request to /api/delete-my-data with your email and token.

Manual: Email support@signals.benchra.net with the subject "Delete My Data" and we will process your request within 30 days.

10. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify affected users by email within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact