Beta: sign up now and get 3 months of Pro free. No card needed. Join the beta →
Sign in Start free
// Legal

Privacy Policy

Last updated: November 14, 2026

SignMap (“SignMap”, “we”, “us”) is operated by Khitruk Media, New Westminster, British Columbia, Canada. This policy explains what information we collect when you use signmap.app, the SignMap app, Wayfinding Studio, Window Film Studio and the SignMap connector for Claude (together, the “Service”), how we use it, and the choices you have. Questions: hello@signmap.app.

What we collect

  • Account information. Your email address, a password (stored only as a secure hash by our authentication provider), your organization name, the names and email addresses of team members you invite, and two-factor authentication settings if you turn them on.
  • Project content. Everything you or your team put into projects: floor plans, sign types, sign data and messages, artwork, photos, comments, tasks, files, branding and logos, schedules, and window film and wayfinding data. This content may include information about your clients and their buildings.
  • Review and status links. When someone uses a client review or public status link you share, we record their decisions and comments, and any name they enter.
  • Technical information. IP address, browser and device type, and request logs, kept by our hosting and database providers to run and secure the Service. Our sign-in form uses Cloudflare Turnstile to block bots.
  • Website analytics. We count visits to our website pages with Cloudflare Web Analytics, which does not use cookies and does not track you across sites.

We don't use advertising cookies and we don't sell personal information. The app stores your sign-in session and some preferences in your browser's local storage so you stay signed in.

How we use it

  • To provide the Service: store and sync your projects, generate artwork, proofs and files, and let your team and clients collaborate.
  • To keep accounts secure, prevent abuse and fix problems.
  • To send service emails: sign-up confirmation, password resets, invitations and important changes to the Service.
  • To answer you when you contact us.
  • To understand, in aggregate, how the website and Service are used so we can improve them.

Service providers

We use a small number of providers to run the Service. They process information on our behalf and only as needed to provide their service:

  • Supabase: database, authentication and file storage for your account and projects.
  • Cloudflare: website and app hosting, security (Turnstile), email routing for hello@signmap.app, and cookieless web analytics.
  • Our email delivery provider: sends sign-up, password and invitation emails.
  • Content delivery networks (such as cdnjs, jsDelivr and unpkg) and Google Fonts: deliver the app's code libraries and fonts, and see your IP address when your browser loads them.
  • Payment provider (when paid plans start): processes payments. We don't store full card numbers.

These providers may store data outside Canada, including in the United States, where it may be accessible to authorities under local law.

The Claude connector

If you connect SignMap to Claude, Claude (by Anthropic) can read the projects you can access, using your own sign-in, and send us change proposals that you approve or reject in SignMap. What you ask Claude and the project data it reads are handled by Anthropic under your agreement with them. You can disconnect at any time in Claude's settings.

Who can see your projects

Your projects are private to your account and the people you add. Anyone with a review or status link you share can see what that link shows, until you turn the link off. We access your content only to provide support you ask for, to keep the Service secure, or if the law requires it.

How long we keep it

We keep your account and projects while your account is active. If you delete a project or your account, it's removed from the live Service, and from backups within 30 days. Logs kept by our providers are deleted on their schedules, typically within 90 days.

Your choices and rights

You can view and update your information in the app, export any project as a file, and ask us to access, correct, export or delete your personal information by writing to hello@signmap.app. Depending on where you live (for example under Canada's PIPEDA or the EU/UK GDPR), you may have further rights, including to object to or restrict some processing and to complain to your data protection authority. We'll respond within 30 days.

If your organization added you to SignMap, your organization controls its projects; we may refer requests about them to your organization.

Security

Data is encrypted in transit, access to projects is enforced by row-level security in our database, and you can turn on two-factor authentication. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as required by law.

Children

SignMap is a business tool and isn't meant for children under 16.

Changes

We'll post any changes on this page and update the date above. If a change is significant, we'll also tell you by email or in the app.

Contact

Khitruk Media, New Westminster, British Columbia, Canada · hello@signmap.app