Privacy Policy

Current storefront, SignalHarness analytics, Polar card and subscription, x402 Agent Pay, entitlement, delivery, support, refund, fraud, logging, and retention facts. Direct-wallet crypto outside x402 remains inactive. Owner-adopted revision 2026-09-02. Effective date: 2026-09-02.

OWNER-ADOPTED PUBLIC POLICY — not attorney-reviewed; no professional approval is claimed.

1. Data when you browse the website

Our pages set no cookies. The site stores your theme preference ("sh-theme") and a random analytics visitor identifier in localStorage, plus a random analytics session identifier and entry marker in sessionStorage. SignalHarness analytics receives page path and query, page title, referrer, language, viewport width, visit duration, basic engagement, and checkout handoff events including the selected offering, price, currency, and status. These records help us understand site use and checkout reliability; they are not sold or used for advertising or automated decisions. The infrastructure that serves the site also processes standard technical data to operate and secure the service.

2. Data when you contact support

If you email support@signalharness.ai we receive your email address, whatever you include in the message, and your order reference if you provide it. We use it solely to help you, keep it as support history so follow-ups have context, and delete it on request (section 9). Support mail is processed by our mail provider (Proton Mail) under its own policies. Support will never ask for passwords, API keys, wallet secrets, or payment credentials.

3. Data when you buy (planned — checkout is not yet active)

Polar, as Merchant of Record, processes card and bank details, billing information, applicable taxes, receipts, recurring card charges, disputes, and card refunds. SignalHarness receives only operational order and subscription records needed for entitlement, delivery, support, refunds, tax, fraud, security, and legal obligations. x402 Agent Pay records public-chain payment identifiers and the minimum durable order, receipt, entitlement, delivery, and prepaid Vault-term state; it never requests or stores seed phrases, private keys, wallet backups, PINs, QR payloads, card numbers, or payment credentials. Records are retained only as long as needed, then deleted, anonymized, or minimized.

4. Analytics, cookies, and tracking

SignalHarness uses its own analytics service to measure page views, engagement, and observable checkout handoff outcomes. It uses random browser and session identifiers stored by the site, but sets no cookies. It does not replace or control Polar, Google, or other independently configured measurement, and SignalHarness analytics data is not sold, used for advertising, or used for automated decision-making. Browser tracking does not claim a purchase completed because the current Polar checkout does not return that result to this site.

5. AI agents

AI agents read the same public pages and /agent/ JSON feeds as everyone else. For identified AI crawler requests that do not execute JavaScript, SignalHarness records the requested path, user-agent, referrer, IP address, response status, and timestamp so crawler access and errors can be measured. We do not use that request record to verify an operator's identity, age, or internal authorization policy. SignalHarness does not collect an agent owner's age and performs no age-verification processing.

6. Fraud, abuse, and legal compliance

The payment provider screens transactions for fraud under its own policies (it is the merchant of record). We may use order records and support history to investigate abuse, enforce the license, or comply with law, and may disclose data when legally required. We have never received a government data request as of the draft revision date.

7. Service providers (processors)

Current providers that process data to run this service include Netlify (hosting, edge execution, and logs), Porkbun (DNS), the SignalHarness analytics service hosted at bright-web-lens.lovable.app (browser and crawler measurement), Proton Mail (support mailbox), and Polar (checkout, payments, orders, subscriptions, receipts, refunds, applicable taxes, and customer access). Each processes data for its stated service role. We do not sell personal information, and we do not share personal information with anyone for advertising.

8. International processing

The providers above may process data in the United States and other countries. Where required by applicable law, transfers rely on the providers' own lawful transfer mechanisms.

9. Your rights and requests

Email support@signalharness.ai to ask what we hold about you (typically analytics identifiers and events, support correspondence, and order records), to correct it, or to have it deleted. We answer within the published support response targets (see the support page). Deletion requests are honored except where law or a legitimate need (for example refund/tax records) requires retention — we will tell you which and why. Where consumer or data-protection law grants you additional rights, those rights apply as written in that law. No privacy portal or automated deletion system exists; requests are handled through the support mailbox.

10. Security and its limits

The site is static with a strict content-security policy limited to its own assets and the approved SignalHarness analytics origin; payment credentials never touch it. The crawler reporter reads its ingestion credential only from protected server-side runtime configuration and never exposes it in site HTML or browser code. No internet service can promise perfect security — if we learn of a breach affecting your data we will notify you as applicable law requires.

11. Children

This catalog is a business tool for agent-mediated commerce, is not directed at children, and we do not knowingly collect personal information from children under 13. (The Terms attribute transactions to the party legally responsible for the purchasing resource rather than using a minimum-age clause; that does not change this policy — the website still does not target children or knowingly collect their data.) If you believe a child provided us personal information, email support@signalharness.ai and we will delete it.

12. Changes to this policy

Versioned like the Terms of Service: material changes are posted here with a new version number and date before they apply. Version 1.1.0-sh01 adds the SignalHarness browser analytics and AI crawler measurement disclosures effective 2026-09-02.

13. Contact

support@signalharness.ai for privacy questions and requests. The operator is Signal Harness AI Inc., a Florida corporation operating the SignalHarness.ai brand; postal/legal notices go to the notice address stated in the Terms, section 1.