PIMAVA Signal Privacy Policy

Who operates PIMAVA Signal

PIMAVA operates PIMAVA Signal. PIMAVA Signal is an independent software product that helps businesses identify meaningful changes in customer complaint patterns. This policy describes how PIMAVA Signal handles information when you visit or use the service.

Information we handle

Depending on how you use PIMAVA Signal, we may handle:

• account information, including your email address, authentication identifiers and account security information;
• business information, such as the business name, membership and configuration settings you provide;
• alert preferences, including a mobile number and consent record if SMS is configured and you choose to enable it;
• service activity and security records, including audit events, provider status and technical error information; and
• subscription identifiers and status if billing is configured.

Google Business Profile and reviews

Google Business Profile access is currently not configured. If it is enabled, PIMAVA Signal will access a Google Business Profile only after an authorised user starts and approves the Google connection. The user must choose a profile they are entitled to manage.

When connected, the service may retrieve the selected location, review text, rating, review date, review identifier and limited reviewer information supplied by Google. It uses this information only to import reviews, classify complaint themes, calculate historical baselines, detect signals and show supporting evidence. PIMAVA Signal does not use Google data for advertising.

AI processing and Signal data

Gemini processing is currently not configured. If enabled, review text may be sent to Google's Gemini service to identify complaint categories, severity and supporting phrases. AI classification does not make the final signal decision. PIMAVA Signal applies deterministic rules to the stored classifications and records the baseline, rule evaluation, signal event and evidence used.

Authentication, cookies and sessions

Supabase provides account authentication. PIMAVA Signal uses necessary cookies and similar session technology to keep you signed in, protect authenticated areas and maintain security. The service does not currently add advertising cookies, third-party analytics or cross-site tracking.

Why we process information

We process information to provide and secure accounts, create and operate a business workspace, import and analyse authorised review data, detect and explain signals, deliver configured alerts, manage subscriptions, prevent misuse, diagnose faults and maintain an audit trail. We aim to collect only what is reasonably needed for these purposes.

Service providers

The service relies on providers that process data on our behalf:

• Supabase for database hosting and authentication;
• Vercel for application hosting and delivery;
• Google Business Profile, only when connected and enabled;
• Google Gemini, only when classification is enabled;
• Twilio, only when SMS is enabled; and
• Stripe, only when subscription billing is enabled.

The optional Google, Gemini, Twilio and Stripe integrations are not currently enabled in production. Their own terms and privacy practices apply when they are used.

Storage, international processing and security

PIMAVA Signal and its service providers may process or store information in Australia or other countries where they operate. We do not promise that all information remains in one country. We use access controls, encrypted connections, restricted server credentials, business-level permissions and audit records designed to protect information. No internet service can guarantee absolute security.

Retention and deletion

We retain account and business information while it is needed to provide the service, meet security and operational needs, resolve disputes or comply with applicable obligations. Review evidence and audit records may be retained to explain past signal decisions. A documented production retention schedule is still being developed. Deletion requests may be subject to technical, security and lawful retention requirements.

Your requests

You may ask to access or correct information associated with your account, or request account and business-data deletion. Contact PIMAVA by replying to the onboarding or support communication through which you received access. The owner must confirm a permanent public support address before broader release.

Third-party services and children

Links and connected services operate under their own policies. PIMAVA Signal is a business service and is not intended for children under 18. We do not knowingly invite children to create accounts.

Changes to this policy

We may update this policy as the service changes. We will publish the revised policy here and update the date above. Material changes may also be communicated through the service or the established support channel.