Privacy Policy
Performance Signal respects your privacy. This policy explains, in plain language, what we collect, how we use it, how we protect it, and the choices available to you when using the Performance Signal website, dashboard, ChatGPT application, and related services.
Who we are
Performance Signal (ABN 68 349 278 281) is an Australian business. We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth).
For privacy enquiries, contact privacy@performancesignal.ai.
What we collect
When you create an account or use Performance Signal, we may collect your email address, authentication identifiers, login information, account status information, subscription information, support communications, and service usage information.
With your explicit authorisation, we request access to your Strava activity history through Strava's official login. This may include activity names, dates, distances, elevation, pace, speed, heart rate, cadence, activity stream data, and other activity information made available through the Strava API.
We never see or store your Strava password, and we never post, edit, or delete anything in your Strava account.
How your data is used
Your information is used to provide Performance Signal, authenticate your account, connect and synchronise Strava, answer the questions you ask, generate activity insights, manage subscriptions and account access, respond to support requests, improve reliability and security, investigate misuse or fraud, and comply with legal obligations.
Your activity data is never sold, never shared with advertisers, and never used by Performance Signal to train artificial intelligence models.
AI processing
Performance Signal uses artificial intelligence technologies, including OpenAI services, to generate responses, summaries, analysis, and insights requested by you.
When you ask questions about your activity history through ChatGPT, relevant activity information may be transmitted to and processed by OpenAI in order to generate a response.
Performance Signal does not provide Strava activity data to OpenAI or other AI providers for the purpose of training foundation models.
Processing performed by ChatGPT and OpenAI is also subject to OpenAI's own privacy policies and terms of use.
Users are responsible for reviewing and configuring any privacy, memory, or data-sharing preferences available within third-party platforms they choose to use, including ChatGPT.
What we don't do
Performance Signal does not sell personal information, sell Strava activity data, use Strava activity data for advertising, use Strava activity data to train artificial intelligence models, provide user activity data to OpenAI for training foundation models, share activity history with other users, or access your Strava password.
Third-party services
Performance Signal uses trusted third-party providers to operate the service, including Auth0 for authentication, Supabase for database services, Railway for application hosting, Cloudflare for networking and DNS services, OpenAI for AI processing, Strava for activity data access, and Stripe for payment processing when subscriptions are enabled.
These providers may store or process information in Australia, the United States, Europe, and other jurisdictions in which they operate.
International processing and disclosure
In order to operate Performance Signal, personal information may be disclosed to or processed by service providers located in Australia and overseas.
By using Performance Signal, you acknowledge that information may be transferred to these jurisdictions and may be subject to different privacy laws than those that apply in Australia.
We take reasonable steps to engage reputable service providers and to protect personal information when it is transferred internationally.
Staying in control
You can revoke Performance Signal's access at any time from your Strava account settings. Once revoked, we stop receiving new Strava data.
Historical activity information already stored within Performance Signal may remain available until it is deleted in accordance with this Privacy Policy.
You may request deletion of your Performance Signal account by contacting privacy@performancesignal.ai.
Data retention and deletion
We retain information only for as long as reasonably necessary to provide the service and meet legal, operational, security, fraud-prevention, accounting, taxation, and business requirements.
When a verified account deletion request is received, account access may be restricted or disabled immediately, connected integrations may be disconnected, and the account may enter a pending deletion state while deletion is processed.
Personal information is generally deleted within a reasonable period following completion of the deletion process.
Certain information may be retained where reasonably necessary for legal obligations, accounting and taxation requirements, fraud prevention, security investigations, dispute resolution, backup restoration, operational recovery, or regulatory compliance.
Subscription, billing, and financial records may be retained for longer periods where required by applicable taxation, accounting, or financial reporting laws.
Security
We use reasonable and industry-standard security measures to protect personal information.
These measures include encrypted communications, authenticated access controls, restricted administrative access, and monitoring and security controls designed to protect service integrity.
While no system can guarantee absolute security, we take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
Data breaches
If we become aware of an eligible data breach involving personal information, we will take steps required under applicable law, including investigating the incident and notifying affected individuals and regulators where required.
Payments
When subscriptions are available, payments will be processed by Stripe or another authorised payment provider.
Performance Signal does not store complete credit card numbers or full payment card details.
Payment information is handled in accordance with the privacy and security practices of the relevant payment provider.
Your rights
Subject to applicable law, you may request access to personal information we hold about you, correction of inaccurate or incomplete information, deletion of personal information, information about how your personal information is processed, and withdrawal of certain consents where applicable.
Requests can be made by contacting privacy@performancesignal.ai.
Cookies and sessions
Performance Signal may use cookies, session technologies, and similar mechanisms to maintain login sessions, support security measures, improve website functionality, analyse service performance, and provide a reliable user experience.
Most browsers allow you to control cookie settings, although disabling cookies may affect functionality.
Children
Performance Signal is not intended for children.
Users under 18 years of age should only use the service with the involvement or permission of a parent or guardian.
Privacy complaints
If you believe we have mishandled your personal information, please contact us at privacy@performancesignal.ai.
We aim to investigate and respond to privacy complaints within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or another applicable privacy regulator.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or business practices.
Updated versions will be published on the Performance Signal website and take effect when published unless otherwise stated.
Contact
Questions about privacy? Reach us at privacy@performancesignal.ai.