Privacy Policy

Last updated 28 October 2026

Signal is a social media analytics and reporting service operated by KP NINE (SMC-PRIVATE) LIMITED, trading as The Sports Collective (“we”, “us”). It lets businesses, agencies and creators connect the social media accounts they own or are authorised to manage, and see their performance in one place. This policy explains what we collect, why, who can see it and how to remove it.

Information we collect

• Account details: your name and email address, and either a password (stored only as a one-way hash) or your Google account identifier if you sign in with Google. Your workspace, your role in it and the dates you last signed in.
• Connected social account data: when you authorise a connection, we read from the platform’s official API: the account’s name, handle and picture, follower or subscriber counts, post and video details, and performance figures such as views, likes, comments, shares, watch time, reach and, where the platform provides them, audience breakdowns. We read this data; we do not post, comment, message or change anything on your accounts.
• Access tokens: the credentials a platform gives us so we can refresh your data. They are stored encrypted and used only to fetch your data.
• Access requests: if you ask us for access, the name, email address, company, platforms and message you send, which we use only to reply to you.
• Security and usage records: your IP address and times of access, and a log of administrative actions (such as connecting an account or changing a role).
• Cookies: one essential session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

We do not currently take payments inside Signal. If paid plans are introduced, payments will be handled by a payment provider and we will not store card numbers.

How we use it

To provide the service: collect your metrics on a schedule, show dashboards, build reports and exports, keep your workspace secure, and support you. We do not sell your data, we do not use it for advertising, and we do not use connected-account data to build profiles of individuals.

Data from YouTube, Google, Meta and TikTok

• YouTube and Google: Signal uses YouTube API Services. By connecting a YouTube channel you also agree to be bound by YouTube’s Terms of Service, and Google’s use of data is described in the Google Privacy Policy. Signal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Signal’s access at any time in your Google account permissions.
• Facebook and Instagram (Meta): data received from Meta Platforms is used only to show you analytics for the Pages and professional accounts you authorise. You can remove Signal in Facebook under Settings, Business Integrations, and in Instagram under Settings, Apps and Websites.
• TikTok: data received from TikTok is used only to show you analytics for the account you authorise. You can remove Signal in TikTok under Settings, Security and permissions, Manage app permissions.

Who can see your data

• People in your workspace, according to the role their administrator gave them. Each customer’s workspace is kept separate from every other customer’s, and the database itself enforces that separation.
• Anyone you give a report link to. Shared report links show only what that report contains and can be revoked.
• Our service providers, who host and run the service (our application host and database host) and act on our instructions.
• Authorities, only where the law requires it.

How long we keep it

We keep your data while your workspace is active, so that your history stays complete. When you disconnect an account, we stop collecting new data for it. When you ask us to delete data, or your workspace is closed, we delete it within 30 days (see how to request deletion). Copies in routine backups are overwritten on the normal backup cycle. We may keep limited security records for as long as needed to protect the service or meet legal duties.

Security

Connections to Signal use HTTPS. Access tokens are encrypted when stored. Sessions are random and can be revoked. Access inside a workspace is limited by role, and every workspace’s data is isolated at the database level. No system is perfectly secure, and we will tell affected customers promptly if we find that their data has been exposed.

Your choices and rights

You can ask us to give you a copy of your data, correct it, or delete it, and you can disconnect any social account at any time from Signal or from the platform itself. Depending on where you live, you may have further rights under local law; write to us and we will respond within a reasonable time.

Children

Signal is for businesses and adults. It is not directed at anyone under 18 and we do not knowingly collect their account details.

Where data is processed

Our hosting providers may process data in countries other than your own. We use providers that protect data to a comparable standard.

Changes to this policy

We will update this page when what we do changes, and change the date above. For material changes we will tell workspace owners.

Contact

Contact: info@thesportscollective.org