Privacy Policy

Version 2026-10-08 · Last updated October 8, 2026

This policy explains what SignalCanvas ("we", "us") collects, why, who else sees it, and the choices you have. SignalCanvas is a signal-flow documentation tool, available as a web app at app.signalcanvas.net and, for now, as legacy desktop apps for Mac and Windows.

1. What we collect

If you use the web app without signing in (guest mode)

• Your projects and settings are stored in your browser's local storage on your device. We do not receive them.
• Like any website, the services that host and deliver our pages (see section 4) may see your IP address and browser details when your browser requests a page or file.
• The web app loads fonts from Google Fonts, so Google receives your IP address and browser details on each visit.

If you sign in with Google

• Google tells us your verified email address and your name. We create a SignalCanvas account from them, along with an organization workspace named after you.
• We do not receive your Google password, and we do not store the sign-in token Google gives us.
• Your browser keeps a sign-in session token in its local storage so you stay signed in. You can remove it by signing out or clearing site data.

Google Drive

• If you choose to save to Google Drive, the app asks for the drive.file permission. That lets SignalCanvas see and change only the files it creates or that you explicitly open with it. It cannot browse the rest of your Drive.
• The app talks to Google Drive directly from your browser, and your project files are saved in your Drive. The Drive access token stays in your browser's memory and is not sent to our servers.

Bug reports and feedback

If you send a bug report or feedback, we receive what you submit: your message, its category, the app version, the page you were on, the name of the project you had open, and any screenshot you attach. A screenshot can contain whatever is on your screen, so check it before sending.

Desktop apps (legacy beta)

The Mac and Windows apps register each installation and check in about once a day. This sends an installation ID, the app version, your operating system and chip type, simple usage counts (such as how many devices and connections a project has), and, if you are signed in, your email and name. If you join through our Discord, we also receive your Discord ID and username. The web app does not send this information.

2. How we use it

• To run SignalCanvas: sign you in, save your projects to your Drive, and keep your account working.
• To fix problems and improve the product, including responding to your feedback.
• To manage the desktop beta (who has access, and whether a version is still supported).

We do not sell your personal information, and we do not use it for advertising. We do not run analytics or tracking tools in the web app.

3. Google API Services

SignalCanvas's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the sign-in and Drive-saving features you ask for.

4. Who else handles your data

• Google for sign-in, Google Drive, and fonts.
• Vercel hosts the web app and this website.
• Railway hosts our backend and database, where accounts and feedback are stored.
• Discord runs our community, and is used for the desktop beta sign-in.
• Content delivery networks (unpkg, cdnjs, and jsDelivr) serve scripts and icons used on this website, and can see your IP address when you visit it.

We may also disclose information if the law requires it. If we ever add paid plans or other services, we will update this policy first.

5. How long we keep it

We do not currently delete accounts, feedback, or beta records automatically. We keep them until you ask us to delete them (see section 6). Data stored in your browser stays there until you clear it. Files in your Google Drive are yours and stay there until you delete them.

6. Your choices

• Use it without an account. Guest mode sends us nothing beyond what any website sees.
• Revoke Drive access at any time in your Google Account permissions.
• Ask to see, correct, or delete your data by contacting us. We will delete your account and the records linked to it, including feedback and beta records, on request.
• Clear local data by clearing site data for app.signalcanvas.net in your browser.

7. Security

Connections to our sites and API use HTTPS. No system is perfectly secure, and the web app is still in early access, so keep backups of important projects.

8. Children

SignalCanvas is a professional tool and is not directed at children under 13. We do not knowingly collect their information.

9. Changes to this policy

When we change this policy in a meaningful way, we will update the version and date above and, where appropriate, let signed-in users know.

10. Contact

Questions or requests: signalcanvas-support@googlegroups.com, or message us in our Discord.