Privacy Policy
JSIGNAL ("the Service", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use the Service.
1. Information We Collect
1.1 Information you provide
- Email address (required for account creation)
- Password (stored as a one-way hash, not in plain text)
- Display name (optional)
- Investment attributes (investor type, experience, risk tolerance, portfolio size, sector interests) — optional, for personalization
- Country, timezone, currency preference
- Watchlist (companies you choose to monitor)
- Notification settings (email, Slack webhook URL)
1.2 Automatically collected information
- Last login timestamp
- Browser language preference (cookie)
- Server access logs (IP, user agent, timestamp — retained 30 days for security)
2. How We Use Information
- To provide and maintain the Service
- To send disclosure alerts via email/Slack based on your watchlist
- To personalize AI summaries using your investment attributes (when set)
- To improve Service quality (anonymized usage statistics)
- To prevent abuse and ensure security
3. Third-Party Services
The Service uses the following third-party services to operate:
| Service | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude API) | AI summarization, risk extraction, translation | Disclosure text excerpts, company context (no personal data) |
| EDINET (Financial Services Agency) | Public disclosure data source | None (data fetched, no user data sent) |
| EDINET DB | Company financial data enrichment | None (public data fetched) |
| SMTP server (Xserver) | Email notification delivery | Your email address, notification content |
| Slack (if configured) | Slack notification delivery | Your Slack Webhook URL, notification content |
4. Cookies
We use cookies for:
- Session cookies — to keep you logged in
- Language preference (signal_lang) — to remember your selected UI language
- CSRF tokens — to prevent cross-site request forgery
We do not use third-party advertising or tracking cookies.
5. Data Storage & Security
- Data is stored on Xserver (Japan) infrastructure
- Passwords are hashed with bcrypt
- All web traffic is encrypted via HTTPS (TLS)
- Admin access is restricted to authorized personnel
6. Your Rights
- Access: View your data via Profile page
- Modify: Update your data via Profile page
- Delete: Account deletion available on request; contact us
- Export: CSV export of your watchlist (Pro plan)
- Withdraw consent: Disable notifications anytime from Alert Settings
7. Disclosure Disclaimer
The Service collects and displays publicly disclosed corporate information from EDINET. We do not collect or display non-public information.
8. Policy Changes
We may update this Privacy Policy from time to time. Significant changes will be notified via email or in-service announcement.
9. Contact
For privacy-related inquiries, please contact: contact@logic-magic.net