Privacy Policy

1. Introduction

Mackie AI Enterprises Limited ("we," "us," or "our") operates the ServiceSignal website. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our website and the choices you have associated with that data.

2. Information We Collect

We collect information you provide directly to us, such as when you:

• Complete an assessment through our Reality Check platform
• Subscribe to our waitlist
• Contact us via the contact form
• Create an account (future implementation)

Assessment data includes:

• Organization name
• Email address
• MSSP/SOC provider name
• Your role (Buyer, vCISO, MSSP)
• Assessment responses and scores

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving the ServiceSignal platform
• Generating assessment reports personalized to your organization
• Communicating with you about our service
• Analyzing usage patterns to improve our platform
• Complying with legal obligations
• Detecting and preventing fraud or abuse

4. Legal Basis for Processing (GDPR)

Under GDPR, we rely on the following legal bases for processing your personal data:

• Legitimate Interest: Assessment results and analytics
• Performance of Contract: Providing the assessment and report
• Consent: Marketing communications and analytics (where applicable)
• Legal Obligation: Compliance and fraud prevention

5. Data Storage and Security

Your data is stored securely using Supabase PostgreSQL with industry-standard encryption. We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Assessment reports are stored indefinitely unless you request deletion. We do not share your assessment data with third parties without your consent, except as required by law.

6. Your Data Rights (GDPR & UK Data Protection)

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt out of certain processing activities

To exercise any of these rights, contact us at [email protected] with your request.

7. International Data Transfers

Supabase is located in EU/US data centers. If you are in the EEA, your data may be transferred outside the EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

8. Retention Policy

We retain assessment data for as long as you have an account with us. If your account is inactive for 24 months, we may delete your data. You can request deletion at any time. Contact information (name, email) from contact forms are retained for 12 months for customer service purposes.

9. Third-Party Services

We use the following third-party services, which may process your data:

• Supabase: Database and authentication (Privacy policy available at supabase.com)
• Resend: Email delivery service (Privacy policy available at resend.com)
• Vercel: Web hosting and deployment (Privacy policy available at vercel.com)

10. Cookies and Tracking

See our Cookies Policy for information about how we use cookies and tracking technologies.

11. Data Protection Officer & ICO

We are registered with the UK Information Commissioner's Office (ICO):

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date on this page. Your continued use of the website after such modifications will constitute your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: