Privacy Policy

SignalFlare ("SignalFlare", "we", "our", or "us") operates the website located at https://www.signalflare.dev and the SignalFlare spend-monitoring platform for Cloudflare accounts (collectively, the "Service"). This Privacy Policy explains what we collect, why, and what happens to it. SignalFlare is not affiliated with Cloudflare, Inc.

1. Information We Collect

Information you provide directly

• Account information: When you register, our authentication provider passes us your name, email address, and organization details. We store these to operate your account.
• Cloudflare API tokens: To monitor your usage, you provide a read-only Cloudflare API token (Account Analytics: Read scope). We encrypt tokens with AES-256-GCM at rest, decrypt them only in memory to poll the Cloudflare API, and never write them to logs. See Section 5.
• Payment information: Billing details for paid plans are handled by our payment processor and are not stored by SignalFlare.
• Communications: If you contact us via email or support channels, we retain those communications.

Information we collect by operating the Service

• Usage metrics we poll: The Service periodically reads usage analytics from your Cloudflare account (for example request counts, storage operations, and the spend we estimate from them) for the services you monitor. We store this history so budgets, projections, and month-over-month trends work; Cloudflare itself only retains around 31 days of analytics.
• Alert history: A record of the alerts we sent you, when, over which channel, and the threshold that fired.
• Log data: Server logs may include your IP address, browser type, referring URL, and timestamps. Logs never contain API tokens.
• Cookies: We use cookies to maintain sessions and understand how the site is used. See Section 6.

2. How We Use Your Information

We use the information we collect to:

• Poll your Cloudflare usage and evaluate it against the budgets you configure
• Deliver alerts over the channels you connect (email, Slack, Discord, webhooks)
• Show usage history, trends, and spend projections in your dashboard
• Process subscriptions and send related information such as invoices and receipts
• Send administrative communications such as security notices and support replies
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations

3. Sharing of Information

We never sell your personal information or your usage data. We share information only in these circumstances:

• Service providers: Third parties that perform services on our behalf, such as payment processing, authentication, infrastructure, and email delivery. They are contractually bound to use your data only to provide those services to us.
• Alert channels you connect: When you connect Slack, Discord, or a webhook endpoint, we send alert content (budget names, spend estimates, thresholds) to that destination, because that is the point.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In a merger, acquisition, or sale of assets, information may transfer as a business asset.
• With your consent: Any other sharing happens only with your explicit consent.

4. Data Retention and Deletion

We retain your information for as long as your account is active. When you delete your account (from the dashboard or by emailing hello@signalflare.dev), we delete your stored Cloudflare API tokens and your usage history. Some records, such as invoices, may be retained where the law requires it. We also recommend revoking the API token in your Cloudflare dashboard when you leave; belt and suspenders.

5. Security

API tokens are the most sensitive thing we hold, so they get specific treatment: encrypted with AES-256-GCM at rest, decrypted only in memory at poll time, never logged, and scoped read-only in the first place so a compromise could read usage numbers but change nothing. More generally we use encryption in transit (TLS 1.2+), encryption at rest, and access controls. No method of transmission over the Internet is 100% secure, and we do not promise otherwise.

6. Cookies

We use the following types of cookies:

• Essential cookies: Required for the Service to function (authentication, session management).
• Analytics cookies: Help us understand how visitors use the site. We use privacy-friendly analytics and do not share this data with advertising networks.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using parts of the Service.

7. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information
• Object to or restrict processing of your personal information
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact us at hello@signalflare.dev.

8. International Transfers

SignalFlare is based in Canada (6D - 7398 Yonge St, Thornhill, ON L4J 8J2). If you are located outside Canada, your information may be transferred to and processed in Canada, and by our infrastructure providers in the regions they operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from them. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

SignalFlare
6D - 7398 Yonge St
Thornhill, ON L4J 8J2
Canada
hello@signalflare.dev