Terms of Service — Business Services Agreement
Last updated: 9 November 2026
1. Parties, acceptance and documents
1.1 This Business Services Agreement (Agreement) is between Signet Technologies Limited, registered in England and Wales under company number 17452808, with its registered office at Linley House, Dickinson Street, Manchester, M1 4LF, United Kingdom (Signet), and the business identified in the accepted order, checkout or account registration (Customer). Legal notices may be sent to tom@signetapp.ai.
1.2 The Customer accepts this Agreement by signing or electronically accepting an Order or expressly accepting these terms through an authorised registration process. The person accepting represents that they have authority to bind the Customer. The Agreement is for business use only, not consumer use. Merely reading the public website does not create a paid subscription. The accepted version and Order form the contract; Signet will make a copy available. Authorised Users must be at least 18 and legally able to act for the Customer. Creating an account does not give a person authority to bind an unrelated organisation or expose its data.
1.3 An Order is an accepted order form, checkout record or other written subscription agreement identifying the Customer, service, pricing basis and subscription term. Services means the Signet platform and related services specified in an Order. Documentation means the applicable published or supplied functional documentation, not indicative marketing or uncommitted roadmap statements. Authorised Users are people the Customer permits to use its workspace within the purchased scope. Customer Data means data and content supplied or made accessible by or for the Customer, together with customer-specific outputs derived from it. Customer Personal Data is personal data within Customer Data processed on the Customer's behalf. Third-Party Services are systems independently provided by others, including connected advertising, CRM, scheduling, payment and meeting platforms.
1.4 The following schedules form part of this Agreement: Schedule 1 — Data Processing; Schedule 2 — Processing Details and Security; Schedule 3 — Supplier Register; and Schedule 4 — Retention and Anonymous Service Intelligence. The Privacy Policy is a transparency notice, not a substitute for Schedule 1. Mandatory law and applicable mandatory transfer clauses prevail; then Schedule 1 for personal-data matters; then an Order's expressly identified negotiated departures; then the other terms of this Agreement. An Order cannot silently reduce required personal-data protections. Purchase-order boilerplate does not amend the Agreement.
1.5 Additional definitions. Customer Sites means websites, applications, landing pages or other properties the Customer lawfully connects or configures for the Services. User Content includes prompts, briefs, files, messages, recordings and other content supplied by or for the Customer; private User Content remains Customer Data. AI Outputs means generated text, images, analysis or other results; customer-specific outputs remain subject to Customer Data, confidentiality and personal-data protections, rather than being excluded merely because they were generated. Usage Data means necessary information about operation, performance and use of the Services; it can include personal data and is not automatically Anonymous Service Intelligence. Signet Marks means Signet’s trade names, logos, service marks and other branding. The Effective Date is the date the Agreement is accepted under clause 1.2 or a later start date expressly agreed in the Order.
2. The Services and their scope
2.1 Signet provides business intelligence and workflow software that can ingest permitted sources, reconcile records, associate advertising and customer journeys, analyse call or meeting evidence, calculate metrics and support enabled actions. Particular features depend on the Order, actual availability, permissions, source capabilities and configuration. A future integration, network model, export facility or other roadmap item is not a present contractual commitment unless expressly included in an Order.
2.2 Subject to this Agreement and payment of applicable fees, Signet grants the Customer a non-exclusive, non-transferable right during the subscription term to access and use the Services and Documentation for its permitted business purposes. Agency or multi-client use is permitted only within the authorised workspace structure and Order; the Customer must have authority from each underlying client. No right to access another customer's data is granted.
2.3 Signet will provide the Services with reasonable care and skill and materially in accordance with the agreed functional scope. Signet may improve or modify the Services. It will not materially reduce paid core functionality during a committed term without reasonable advance notice and an appropriate remedy under clauses 13 and 17, as applicable if it cannot provide a materially equivalent service. Emergency security, legal or provider-driven restrictions may require earlier action.
2.4 Unless an Order provides a service level, no specific uptime percentage, support response time, recovery time or recovery-point objective is promised. Signet will take reasonable steps to maintain availability and communicate material service issues. Beta or evaluation features are identified as such, may change, and must not be relied on for production-critical decisions unless expressly agreed. Nothing in this clause removes a non-excludable obligation or Schedule 1 duty.
2.5 Support and updates. Support scope, service hours and any implementation or professional-services deliverable are as stated in the Order or applicable Documentation. Ordinary maintenance and platform updates within the subscribed service are included unless an additional service is expressly ordered. The Customer must maintain supported client-side components and authorised tracking configuration after reasonable notice of required updates. A third-party system, network or browser remains the Customer’s responsibility to the extent within its control. This does not reduce Signet’s responsibility for its own service or permit a charge for an unaccepted additional feature.
3. Accounts, users and instructions
3.1 The Customer is responsible for designating appropriate administrators, maintaining accurate account details, managing user access and informing Signet promptly of suspected compromise. Users must safeguard credentials and comply with the access and usage rules. The Customer is responsible for instructions and actions of its Authorised Users within their permitted authority, but not for a security failure for which Signet is responsible under this Agreement.
3.2 Workspace settings, enabled workflows, authenticated user actions and written instructions from authorised contacts can constitute Customer instructions within the agreed scope. Signet may verify authority before carrying out sensitive, destructive or unusual instructions. A permission granted to a provider integration is not itself a direction to execute every possible action.
3.3 Signet may restrict access reasonably necessary to prevent unauthorised access, abuse or imminent harm. It will use proportionate measures, give notice where safe and practicable and restore access when the cause is resolved. Credentials must not be shared outside the authorised user or service-account arrangements.
3.4 Accurate details and authority. The Customer must keep account, billing and administrator details current and must not impersonate another person, misstate its authority or claim access to an account it does not control. Where an agency acts for a client, it must keep that client’s assets, instructions and permitted users appropriately separated and notify Signet if its authority ends. The Customer is responsible for its equipment and user administration, but a generic account-responsibility clause does not excuse Signet’s own security breach.
4. Connected services and actions
4.1 The Customer authorises Signet to access and process selected accounts and assets only to provide the configured Services and lawful instructions. The Customer must have the rights to connect them, comply with their applicable terms and maintain necessary accounts, permissions and subscriptions. The provider may change or withdraw API access, data availability or functionality. Signet is responsible for its own integration implementation, but does not control the provider's independent service.
4.2 Connecting Meta may involve ads_read, ads_management and business_management permissions and selected Ad Accounts and Pixels/
4.3 Before enabling an action that affects an advertising account, external CRM, payment-related record or other connected system, the Customer must assess the scope and supplied controls. Signet will execute within that authorised scope and record relevant activity. External platform fees and advertising spend are payable to the provider unless the Order expressly states otherwise. This Agreement does not authorise Signet to initiate a payout or charge a customer's end client merely because financial data is connected.
4.4 Disconnecting an integration does not delete historical Customer Data or terminate the Signet subscription. It stops the relevant ongoing access or synchronisation. Provider authorisations covering other still-enabled assets may remain in place. The Customer can separately request credential revocation, deletion or account closure. Specific legal or provider deletion requirements prevail over ordinary retention. A provider's revocation procedure may also need to be completed directly with that provider.
4.5 Third-party terms do not enlarge Signet's licence to Customer Data. Where a provider restricts storage, combination, anonymisation, machine learning or onward use, Signet will honour the applicable restriction and may refuse an incompatible instruction. Customer approval cannot authorise a provider-contract breach or unlawful processing. Unavailable or restricted provider data does not become a measured zero.
4.6 External links and providers. A link or optional integration does not make Signet the provider, seller or guarantor of the third party’s service and is not an endorsement of its content. Separate third-party subscriptions, terms and charges may apply. The Customer decides whether to enable the integration after reviewing the relevant information. Signet remains responsible for performing its own agreed integration functions and for data it processes under Schedule 1; this clause does not disclaim those duties.
5. Customer responsibilities and acceptable use
5.1 The Customer must have lawful authority for its collection, recording, connection, use and disclosure of data, and provide required privacy information and choices. This includes call-recording and monitoring notices or consent, tracking and cookie choices, advertising-platform requirements and any worker consultation or monitoring obligations. The Customer must assess the law applicable to all participants and relevant US states; a recording law that applies at one endpoint may not resolve the entire call. Signet remains responsible for its own legal duties.
5.2 The Customer must not use the Services for unlawful surveillance, harassment, discrimination, fraud, unsolicited communications contrary to law, credential misuse, prohibited scraping, malware, unlawful data brokerage, or infringement of another person's rights. It must not evade tenant, security, consent or entitlement controls, reverse engineer except to the extent law prohibits restriction, or intentionally impair the service. Reasonable testing requires prior written authorisation and a safe scope.
5.3 The standard service is not designed or agreed for protected health information requiring a HIPAA business associate agreement, children's services, biometric identification, or systematic processing of special-category, criminal-offence or similarly sensitive regulated data. Those uses require a separate written agreement, necessary legal conditions and suitable controls before processing. The Customer must minimise incidental sensitive information, avoid payment-card security codes or full card details in content, and notify Signet of an unsuitable submission so a lawful response can be agreed.
5.4 The Customer must not rely on Signet alone to make legally or similarly significant decisions about people, including employment, credit, insurance or healthcare decisions, without the legally required safeguards. It must not represent AI outputs or probabilistic attribution as verified facts where the source or result does not support that claim. It must keep an appropriate independent record of information needed to fulfil its own legal obligations.
5.5 Integrity and authorised automation. The Customer must not fabricate clicks, leads, conversions, attendance or revenue records to mislead another person, manipulate attribution, or avoid an agreed charge. Synthetic test data must be clearly distinguished from live data. It must not overload the Services, introduce malicious code, remove proprietary notices, probe security without written authorisation, or extract another customer’s data. Documented APIs, approved integrations and lawful export or access mechanisms may be used within their documented scope; ordinary authorised automation is not prohibited simply because it is automated.
5.6 Commercial misuse. The Customer must not resell or make the Services available to an unauthorised third party, use access obtained through misrepresentation for competitive extraction of proprietary functionality, or hold Signet out as a co-seller, agent or warrantor of the Customer’s products. Permitted agency work, approved service accounts, independent development, lawful interoperability and rights that cannot legally be restricted are not prohibited. Public criticism or a truthful customer review is not a breach merely because it is unfavourable.
5.7 Applicable trade restrictions. Each party must comply with export controls and sanctions applicable to its own activities and must not knowingly use or provide the Services to evade them. The Customer must supply reasonably necessary eligibility information on request. Signet may restrict affected access where legally required, subject to lawful notice and protection of retained data. This clause does not require either party to breach mandatory law applicable to it.
6. Data, intellectual property and confidentiality
6.1 As between the parties, the Customer retains its rights in Customer Data. It grants Signet and its permitted subprocessors a limited licence to host, copy, transmit, process and display Customer Data as needed to provide the Services, perform lawful instructions and comply with this Agreement. The separate limited rights concerning Anonymous Service Intelligence are in clause 8 and Schedule 4. No transfer of personal-data ownership or blanket licence to exploit identifiable customer content is intended.
6.2 Signet and its licensors retain rights in the Services, software, Documentation, generic techniques, pre-existing materials and lawful Anonymous Service Intelligence. The Customer retains rights in its inputs and other Customer Data. To the extent Signet holds rights in customer-specific reports, AI Outputs or generated creative delivered through the Services, it grants the Customer a worldwide, non-exclusive, royalty-free right to use, reproduce and adapt them for its permitted business purposes, subject to underlying rights and lawful third-party/
6.3 Each party must protect the other's non-public business, technical and customer information using reasonable safeguards, disclose it only to people with a need to know who are bound by appropriate confidentiality duties, and use it only for the Agreement's permitted purposes. This does not cover information demonstrably public without breach, independently developed, lawfully received without restriction or previously lawfully known. Required legal disclosures are limited to what is required, with prior notice where lawful and reasonable cooperation. Trade secrets remain protected while they retain that status; other confidentiality duties survive for five years after termination. Personal-data and restricted-provider duties survive for as long as the relevant data is held.
6.4 Feedback and publicity. The Customer grants Signet a worldwide, royalty-free, non-exclusive, transferable and sublicensable right to use voluntarily supplied product suggestions and feedback to improve or develop its products, without compensation. This right survives termination, but does not include identifiable Customer Data, confidential datasets or third-party content embedded in feedback. Signet may identify the Customer or display its name, logo or testimonial publicly only with appropriate written permission; the permission must identify any material conditions and withdrawal arrangements. Ordinary agreement to these terms is not permission to publish private prompts, recordings, performance figures, an individual’s likeness or a customer endorsement.
6.5 Signet Marks. No licence to Signet Marks is granted except for use expressly authorised by Signet or permitted by law. The Customer must not register or use a confusingly similar domain, business name, social handle or mark to impersonate Signet or suggest an unauthorised affiliation. An authorised use must follow reasonably supplied brand guidelines. If a Customer has obtained a registration in breach of this clause, it must reasonably cooperate in correcting or transferring that registration to the extent required by law or an agreed resolution; no unrelated legitimate mark is assigned by this clause.
6.6 Private and expressly public content. Supplying User Content, including an AI prompt, does not make it public or non-confidential and does not grant a perpetual licence to publish it. The processing licence in clause 6.1 and Schedule 1 applies. Where a feature expressly permits public sharing, publication requires a specific instruction describing the intended audience and content; Signet may host and distribute that content only to implement that instruction. Such an instruction does not grant unrelated advertising, model-training, likeness or onward-sale rights. The Customer must hold the rights needed for material it asks to publish. Signet may restrict unlawful or unsafe content proportionately under clause 14 and applicable law, with appropriate notice or review where permitted.
6.7 Usage Data. Signet may use necessary operational Usage Data for security, support, reliability, abuse prevention, billing verification and proportionate improvement of the contracted Services under its disclosed purposes and applicable legal role. Usage Data that identifies a person or contains Customer Data remains subject to the Privacy Policy, Schedule 1 and applicable retention limits. Calling data telemetry does not remove those protections. Cross-customer disclosure or licensing requires the Anonymous Service Intelligence conditions or a separate lawful arrangement.
7. AI functions, evidence and results
7.1 Signet may use contracted model or transcription providers to supply enabled analysis, assistance or generation functions. Processing remains subject to Schedule 1, supplier restrictions and the Customer's instructions. Signet does not authorise independent supplier training on Customer Personal Data under the standard service. Actual provider contracts and settings must support the agreed arrangement; the Agreement does not assert that all providers have identical retention, logging or training terms.
7.2 Signet does not train its own general-purpose AI models on identifiable Customer Data under this Agreement. Customer-specific evaluation or processing to deliver the contracted service is distinct from cross-customer model training. Lawful development using Anonymous Service Intelligence is permitted only under clause 8 and Schedule 4. A materially different personal-data training programme requires a separate express agreement and all necessary legal conditions before it starts.
7.3 Attribution, attendance analysis, predictions, classifications and AI outputs depend on available source evidence and configured methods. They can contain errors, omissions or uncertainty. Signet may withhold an unsupported metric, identify a result as provisional or refuse an unsafe action. These evidence limits do not excuse a demonstrated software defect, failure to perform agreed functions with reasonable care and skill, or breach of a legal obligation.
7.4 Unless expressly agreed, outputs are not legal, tax, accounting, investment or employment advice, an audited financial statement, a guarantee of advertising performance, or an instruction to pay commission. The Customer is responsible for reviewing consequential decisions and its own business policies. Signet will provide reasonable access to available result explanations and correction routes within the agreed product scope, without promising that every historical event can be recovered or every number independently certified.
8. Anonymous Service Intelligence and network-model rights
8.1 Subject to Schedule 1, applicable law and source-provider conditions, the Customer authorises Signet to create eligible Anonymous Service Intelligence during lawful processing of Customer Data. This limited instruction supports aggregated service evaluation, benchmarking, product improvement and development of statistical or predictive network models. It is not consent from individuals, does not remove the Customer's transparency and lawful-basis duties, and does not make otherwise prohibited processing lawful.
8.2 Anonymous Service Intelligence must satisfy the strict criteria in Schedule 4 before cross-customer use. It must not enable identification of a person or disclose a customer's identity, attributable confidential commercial performance, proprietary content or trade secrets. Signet may use, combine, retain, develop and commercialise qualifying Anonymous Service Intelligence and resulting non-identifying models as part of its products and research, without a fixed contractual retention limit, subject to continued satisfaction of those criteria and any source restrictions. These rights survive termination for information lawfully created before the relevant processing ended.
8.3 This licence excludes identifiable or merely pseudonymous consumer or employee profiles, raw recordings and transcripts as such, reversible hashes and embeddings containing personal information, and data or derivations restricted by source-provider terms. Meta Platform Data and other restricted integration data are excluded from cross-customer learning unless the specific use is independently confirmed as permitted. Signet will not combine Customer Personal Data across customers for cross-context behavioural advertising or use one customer's identifiable lead list to serve another.
8.4 Signet may not retain an identifiable archive solely to preserve the opportunity to create network models later. Before anonymising data for a separate Signet purpose, it must establish the proper legal role, lawful basis, permitted instructions, notices and source rights. Where that cannot be achieved, the data is excluded. A privacy-policy change alone cannot retrospectively authorise the new purpose.
8.5 The Customer can contact Signet to amend future anonymisation instructions to the extent legally available; the parties will document any resulting effect on optional benchmarking functions. This does not require reconstruction or deletion of genuinely anonymous information that can no longer be linked to the Customer or an individual, unless applicable law or source terms require otherwise. A valid personal-data deletion request remains effective for identifiable source data and any derived data or model that still contains personal data. Signet must not defeat a pending deletion instruction by repurposing the requested records first.
8.6 Eligible commercial products. Subject to the same conditions, Signet may publish aggregated benchmarks and license qualifying Anonymous Service Intelligence, statistical products and non-identifying models to customers and commercial partners for consideration. As between the parties, Signet owns its lawful compilations, techniques and models, but not the Customer’s underlying records or creative merely because they contributed to a lawful anonymous product. Recipient terms must prohibit reidentification and inappropriate onward disclosure. This clause does not create a right to sell personal information, reveal confidential customer-level performance or disregard a provider restriction.
9. Subscriptions and renewal
9.1 The Order specifies the subscription term, billing frequency, price and any usage component. Unless the Order states otherwise, a monthly subscription renews for successive one-month periods and an annual prepaid subscription for successive one-year periods. The Customer may cancel renewal at any time before the renewal date using the available account mechanism or by notifying tom@signetapp.ai. Cancellation takes effect at the end of the current paid period, not immediately. Legally required renewal notices and cancellation mechanisms apply in addition to these terms.
9.2 Trial duration, conversion to a paid plan and any requirement for payment details must be disclosed at acceptance. A free trial will not create an undisclosed paid commitment. Any annual discount or early-customer price protection applies only to the extent and period specified in the Order; there is no perpetual founding-price promise by implication.
9.3 The Customer may request plan changes or added services. They take effect on the agreed date and price. No unaccepted feature or usage service is automatically added solely because the platform can support it.
9.4 Trial and evaluation data. A trial or promotion exists only if expressly offered; its stated duration, included functions, any conversion and applicable charges govern. Evaluation access can end on the disclosed terms, but confidentiality and applicable data-protection duties continue. Trial Customer Data follows clause 12 unless an expressly accepted, lawful trial-specific offboarding period applies. Cancellation does not cause an undisclosed immediate loss of data or override statutory return/
10. Fees, pricing measurements and payment
10.1 Fees are those expressly accepted in the Order or checkout, including the version of Signet's published price schedule that the Order incorporates (Price Schedule). Unless the Order states otherwise, the platform subscription fee is the fee for the band of the Price Schedule (bands being numbered from the lowest) whose limits cover both pricing measurements, each counted for a calendar billing month: (a) Eligible Revenue, meaning net business revenue the Customer actually collected in the month, as verified from the payment processors connected to the Services and independent of how Signet attributes revenue to advertising or other acquisition activity, with refunds, disputes and reversals counted in the month they actually occur, revenue across more than one connected processor counted once, and other currencies converted on the basis stated in the Price Schedule, but excluding evidenced client advertising budgets passed through to advertising platforms, taxes collected for authorities, loans, capital, transfers between accounts, and duplicate, void, test and other non-revenue movements; and (b) Active People and Companies, meaning the number of distinct people and distinct companies, after duplicates are merged, that had qualifying business activity with the Customer in the month or were included in a workflow the Customer authorised and activated, but not dormant imported records, unchanged synchronised records, duplicates, synthetic records or audiences used only for preview. A band's limits are inclusive. Where the two measurements require different bands, the higher band applies. Above the highest published band on either measurement, fees are as agreed in the Order. Every band includes the same core Services, without a per-seat fee, a limit on the number of Authorised Users or a feature tier. Neither measurement is ad-attributed revenue, accounting revenue, profit or Signet's assurance of those amounts. No undefined or unpublished meter can justify a new charge.
10.2 Unless expressly agreed otherwise, platform subscription fees are billed in advance. The Customer's first band is the band recorded in the Order. A monthly subscription changes band only on the basis of two consecutive Verified Months. A Verified Month is a closed calendar billing month for which both pricing measurements have been reconciled from the evidence described in clause 10.1; a month with unknown, incomplete or unreconciled evidence is not a Verified Month, cannot support a move to a higher band and is never treated as zero. If the bands required in both Verified Months are higher than the current band, the subscription moves up to the lower of those two bands; if both are lower than the current band, it moves down to the higher of those two bands; otherwise the current band continues. For example, a subscription in band 1 whose two Verified Months require bands 4 and 2 moves to band 2, and a subscription in band 5 whose two Verified Months require bands 2 and 4 moves to band 4. Signet will give the Customer at least 30 days' notice under clause 21.1 before a band change takes effect, identifying the measurements relied on. The change applies prospectively from its stated effective date and is never backdated, and a single month does not change the band. If evidence for either Verified Month is corrected before the effective date, Signet will reassess the change and, where the result differs, withdraw the notice or give a corrected notice with a fresh notice period before any higher fee applies. On request, Signet will make available the measurements and supporting evidence relied on and will correct a verified error; a disputed charge is handled under clauses 10.5 and 10.8.
10.3 Signet Credits are separate from the platform subscription fee and from both pricing measurements. They cover genuinely variable-cost processing, such as AI analysis, transcription, enrichment and verification, and apply only if their rates, any included allowance, measurement, spending limits and any purchase, overage or auto-recharge election have been accepted by the Customer. No allowance, rate, overage or automatic recharge applies unless so accepted, and Signet will not charge Credits beyond a spending limit the Customer has set. The Agreement does not impose the former per-call price, a seat fee, an advertising-spend fee or a source limit by implication. Any unlimited-access description remains subject to reasonable security and misuse controls, not undisclosed paid tier limits.
10.4 Signet may change renewal prices on at least 30 days' prior notice, or longer where required. If that notice would arrive too late for the Customer reasonably to cancel the next renewal, the increase is postponed to a later renewal. The Order may provide greater protection. Taxes are additional unless stated inclusive; Signet is responsible for taxes on its own income. The parties will cooperate on legally required tax documentation and withholding.
10.5 The Customer authorises its selected payment method for the accepted recurring and elected usage charges. Invoices are due as specified in the Order, or within 30 days if no due date is specified. The Customer must raise a genuine billing dispute promptly, describing the basis, and pay undisputed sums. The Customer should notify billing disputes within 30 days of the invoice. Delay does not remove statutory rights or permit an incorrect charge to become correct by silence.
10.6 Signet may suspend affected paid functions for material overdue undisputed amounts after reasonable notice and an opportunity to resolve them. It will not withhold legally required personal-data assistance solely to obtain payment. Fees are non-refundable except where law requires, this Agreement provides a refund, or Signet agrees otherwise. No term excludes recovery for a proven breach beyond the limitations lawfully agreed in clause 19.
10.7 Payment verification and recovery. Signet and its payment processor may verify the nominated payment method and process accepted charges under the Order. The Customer must maintain valid billing details and promptly correct a material inaccuracy. Signet may seek lawful interest and reasonable, documented costs of collecting an overdue undisputed amount, but not duplicate recovery or an undisclosed penalty. Any separately chargeable archive-restoration or bespoke migration service requires an accepted quote; it is not a condition of fulfilling a mandatory data right. Bank, card-network, currency-conversion or similar third-party fees are payable by the responsible party under those arrangements, except to the extent caused by Signet’s wrongful charge.
10.8 Charge disputes and metering checks. The parties will cooperate in good faith on a disputed charge. A chargeback does not extinguish a valid underlying debt, but does not automatically forfeit a lawful refund or prevent a cardholder using a statutory or network remedy. Signet may provide relevant transaction evidence to the payment provider and will not promise that every chargeback can be reversed. It may review necessary account and usage records to verify the accepted billing basis, investigate misuse or resolve a dispute, subject to confidentiality and data minimisation. Such review does not create an unagreed tier limit, retrospective rebanding or an additional licence to Customer Data.
10.9 Annual prepaid subscriptions, quotes and earlier Orders. Where the Order provides for annual prepayment of the platform subscription, the annual fee is the monthly fee for the accepted band multiplied by 12, less 10%, payable in advance for the twelve-month term. The accepted band and annual fee stay fixed for that term: clause 10.2 does not move an annual subscription up or down during the term, and no mid-term surcharge, charge for exceeding a band's limits or refund for lower measurements arises from them. Signet will reassess the band for renewal and give notice of any change to the renewal band or fee in accordance with clause 10.4. A monthly-equivalent figure shown for an annual subscription is for comparison only and does not create monthly instalments. Prices and calculators on Signet's website are indicative; they are not an invoice, an Order or a binding measurement of the Customer's business. Price protection granted in an accepted Order, including protection of an earlier price schedule for a stated period, applies as that Order states and only for that period. An Order accepted under an earlier price schedule continues on its own terms until changed under this Agreement.
11. Data protection and security
11.1 Each party must comply with the data protection, privacy, recording, electronic-marketing and other laws applicable to its activities. Schedule 1 governs Customer Personal Data. Signet's handling of its own business-contact and account information is described in its Privacy Policy. Neither party gains a lawful basis for unrelated processing merely because the other accepted these terms.
11.2 Signet will maintain security appropriate to the nature and risk of the processing, including the measures in Schedule 2 and applicable statutory requirements. The Customer must configure available controls appropriately. An incident is not automatically evidence of a contractual breach, but Signet remains accountable for compliance with its obligations. Signet does not warrant absolute security or a certification, accreditation or independent audit not expressly identified as held.
11.3 The Customer must notify Signet promptly of relevant rights requests, unlawful instructions or incidents affecting Customer Data. Signet may refuse or pause a processing instruction it reasonably considers unlawful, identifying the issue and working with the Customer on a lawful alternative. It will not use that power to evade ordinary contractual duties.
12. Retention and offboarding
12.1 Customer Data is retained during the Services according to lawful Customer instructions, the documented retention schedule and source-specific limits. Continuing historical analysis can justify multi-year retention of necessary records during a genuine ongoing service. It does not justify retaining every identifiable input without a defined purpose. The Customer may request a different lawful retention instruction; implementation and any material service impact are agreed in writing.
12.2 After the paid subscription ends, the Customer instructs Signet to provide a 180-day limited offboarding and recovery service, unless it requests earlier return or deletion or a shorter period is legally required. This is a continuation of limited processing services, not continuing access to all paid functions. Processing is confined to safeguarding stored data, assisting return, restoring access if renewed, and completing lawful instructions. Ordinary new-source collection and chargeable analysis cease unless separately agreed. No additional archive fee is charged for this standard 180-day period unless expressly accepted in the Order.
12.3 The Customer may choose return or deletion at any time during that period. Signet will provide data-return assistance in a reasonably available, secure and usable format, consistent with applicable legal requirements. There is no representation that a self-service export button or every requested proprietary format exists. Necessary statutory assistance is not made conditional on an additional charge; extensive bespoke migration work may be separately quoted. The Customer should request a return before the period ends, but lawful rights are not forfeited by a missed commercial deadline.
12.4 If no continuing archive service or return instruction is agreed, the Customer instructs Signet to delete Customer Personal Data when the 180-day processing service ends, subject to legally required storage and the backup provisions in Schedule 4. Signet will communicate the expected return/
12.5 A longer archive or recovery service requires a separate affirmative written agreement specifying its purpose, data categories, duration, access restrictions, fees if any, and review point. It must be reasonably necessary for that genuine purpose and capable of ending; silence does not create an indefinite archive. Customer Data retained for offboarding, archive, legal hold or backup is not an identifiable network-training pool.
12.6 Lawful Anonymous Service Intelligence and Signet's separately justified controller records are governed by Schedule 4. Signet will not claim that every customer record is its own legal-compliance record. Mandatory rights, provider deletion obligations and Schedule 1 prevail over a broader commercial retention instruction.
13. Service changes and end of support
Signet may replace a third-party provider or discontinue a non-core optional feature on reasonable notice, subject to Schedule 1 where relevant. If a third-party restriction materially prevents a paid core function, the parties will consider a reasonable alternative. If Signet cannot restore a materially equivalent service within a reasonable period, the Customer may terminate the affected paid service and receive a pro-rata refund of prepaid unused platform fees. No remedy requires Signet to breach a provider's terms or applicable law.
14. Suspension and termination for cause
14.1 Either party may terminate an affected Order for a material breach not remedied within 30 days after written notice describing it, or sooner if the breach is incapable of remedy and termination is reasonable. Either party may terminate for insolvency to the extent applicable law permits. A non-payment suspension follows clause 10.6.
14.2 Signet may immediately restrict the minimum affected processing or access where reasonably necessary because of unlawful activity, a serious security risk, a valid legal requirement or provider withdrawal. It will explain and review the restriction where lawful and safe. Suspension is not an automatic deletion instruction or a new right to use Customer Data.
14.3 On termination, ordinary access rights end subject to offboarding; accrued charges remain payable; and provisions intended to survive continue, including confidentiality, accrued rights, lawful intellectual-property licences, limitations, dispute provisions and personal-data obligations for retained information. If the Customer terminates for Signet's uncured material breach, or Signet terminates a paid service for its own convenience without equivalent replacement, Signet refunds prepaid platform fees for the unused period. A Customer breach does not waive mandatory legal remedies or data rights.
14.4 Proportionate investigation and restoration. Following a suspension, Signet will investigate within a reasonable period, identify a remediable issue where lawful and safe, and restore the affected service when the grounds no longer apply, or explain the applicable termination route. Unaffected access should continue where reasonably feasible. The Customer remains responsible for lawful accrued charges, but investigation does not permit indefinite suspension without explanation or a new right to exploit retained data.
15. Customer content and third-party claims
15.1 The Customer warrants that it has the rights and lawful authority needed for its Customer Data and instructions, and will not knowingly provide unlawful data or misleading permission. It is not required to warrant the accuracy of third-party source information beyond what it can reasonably verify.
15.2 Subject to clause 19, the Customer will defend and indemnify Signet against a third party's claim arising from Customer Data or instructions that infringe that third party's rights, unlawful recording or tracking by the Customer, or the Customer's material breach of clause 5, to the extent the claim was caused by that breach and not by Signet's own breach, negligence or unauthorised use. This covers reasonable defence costs and amounts finally awarded or approved in settlement; it is not a blanket reimbursement of every business loss or regulatory penalty.
15.3 Intellectual-property complaints. A rights holder or authorised agent may send a substantiated complaint to tom@signetapp.ai identifying the protected work or right, the specific material and location complained of, contact details, the basis of authority and a good-faith explanation of the alleged infringement. A copyright notice should include a signature and any accuracy/
15.4 Challenge and statutory process. An affected customer may explain a mistake or provide a lawful counter-notice using the same contact channel. Where a statutory takedown/
16. Signet intellectual-property claims
16.1 Subject to clause 19, Signet will defend and indemnify the Customer against a third party's claim that the unmodified Services, as supplied and used as permitted, infringe that party's UK or US copyright or trade mark, covering reasonable defence costs and amounts finally awarded or approved in settlement. This does not extend to Customer Data, content specified by the Customer, unsupported combinations, use after an available remedy, or third-party materials not selected or supplied by Signet. AI outputs are subject to clause 6.2 and are not separately indemnified unless an Order says so.
16.2 Signet may obtain a right to continue the affected function, replace or modify it without materially reducing equivalent functionality, or terminate that function with a pro-rata refund of unused prepaid platform fees. These remedies do not exclude liability that cannot lawfully be excluded.
16.3 A party seeking either indemnity must give prompt notice, reasonable cooperation at the defending party's cost and control of the defence to that party. Delay reduces the indemnity only to the extent it materially prejudices the defence. No settlement may admit the protected party's fault, impose non-monetary obligations or fail to release it without its reasonable consent. The protected party may participate through its own adviser at its own cost.
17. Warranty remedies and limitations of assurance
If the Services materially fail to satisfy clause 2.3, the Customer should notify Signet with reasonable detail. Signet will use reasonable efforts to correct the failure. If a material failure is not corrected within the contractual cure period, the Customer may use clause 14 and any other remedy available subject to clause 19. Source gaps, provider changes and ordinary statistical uncertainty are not promises of perfect results, but they do not permit Signet to misdescribe actual capability or ignore an agreed defect.
Except for express obligations and terms that cannot lawfully be excluded, neither party gives implied warranties or conditions concerning the Services. No forecast guarantees revenue, return on advertising spend, a particular attendance outcome or commercial success. This allocation does not override reasonable care and skill, fraud protections or mandatory data protection rights.
18. Business continuity and force majeure
Neither party is liable for delay caused by circumstances outside its reasonable control that it could not reasonably prevent or mitigate. The affected party must notify the other, mitigate and resume performance. A preventable security failure is not automatically force majeure. Payment for services already supplied and duties to safeguard retained data continue. If a material interruption continues for more than 30 days, either party may terminate the affected service, with a pro-rata refund of prepaid unused platform fees where it has not been supplied. This does not reduce Schedule 1 obligations.
19. Liability allocation
19.1 Nothing excludes or limits liability for death or personal injury caused by negligence; fraud or fraudulent misrepresentation; or any liability that cannot lawfully be limited. The Customer's obligation to pay properly due fees is not reduced by a damages cap. Statutory rights of data subjects and regulators are unaffected.
19.2 Subject to clause 19.1, neither party is liable to the other for indirect or consequential loss, or loss of anticipated savings, goodwill or opportunity that is not a direct and reasonably foreseeable consequence of the breach. This does not exclude reasonable direct costs of restoring affected Customer Data or responding to a breach where recoverable under this Agreement, subject to the applicable cap and mitigation. Neither party may recover twice for the same loss.
19.3 Subject to clauses 19.1 and 19.4, each party's aggregate liability arising from an Order in a contract year is capped at the greater of £1,000 and the fees paid or payable for the affected Services in the 12 months preceding the first event giving rise to the claim. A contract year means each successive 12-month period beginning on the Order start date or its anniversary. Related events are treated as one event at the first occurrence. If the Order has existed for less than 12 months, the fees for its first committed 12 months, or the shorter committed term, are used; for a monthly rolling service, the current monthly platform fee is annualised for this purpose.
19.4 For breach of confidentiality, breach of Schedule 1, or the indemnities in clauses 15 and 16, the cap is twice the amount calculated under clause 19.3. This higher cap is an overall cap for those claims, not an additional amount stacked on the ordinary cap. These caps allocate liability between the parties only and do not restrict mandatory remedies or responsibility to individuals or authorities.
19.5 Each party must take reasonable steps to mitigate loss. The exclusions and caps apply regardless of the legal theory of the claim, but only to the extent lawful and reasonable under the applicable law. An unenforceable limitation is severed or adjusted only to the extent the court lawfully permits; no clause purports to exclude a mandatory obligation by describing all outputs as “as is”.
20. Changes to the Agreement
Signet may propose revised terms on at least 30 days' notice. Material changes ordinarily apply at the next renewal, allowing the Customer to cancel before acceptance, or earlier by express agreement. A change required by law or a necessary security or provider requirement may apply earlier with as much notice as practicable; if it materially reduces contracted service, the Customer has the remedy in clause 13. A website posting does not retrospectively authorise new personal-data purposes or waive accrued rights. Schedule 1 changes cannot reduce statutory protections.
21. Notices and general provisions
21.1 Notices. Formal notices to Signet go to tom@signetapp.ai and may also be sent to its registered office; notices to the Customer go to its designated administrator or Order contact. Email notice is effective on receipt, excluding a known delivery failure; a notice received outside normal business hours in the recipient’s location is treated as received on the next business day for contractual deadlines, unless law requires otherwise. Routine product notices may appear in the Services, but a website posting alone is not sufficient where direct notice is required. Court documents must be served in accordance with applicable procedure; this clause does not invent valid international service rules.
21.2 Assignment and general provisions. Neither party may assign this Agreement without the other’s reasonable consent, except to an affiliate or as part of a genuine merger, reorganisation or sale of substantially all relevant business assets, provided the successor assumes the obligations and safeguards and there is no unlawful data transfer. Signet remains responsible for its subcontractors as provided in Schedule 1. The Agreement creates no partnership, franchise, agency, employment or fiduciary relationship. Failure to enforce a term is not a waiver. If a term is invalid, the remainder continues so far as legally possible. No third party has enforcement rights under the Contracts (Rights of Third Parties) Act 1999 except where expressly conferred or mandatory law or transfer clauses provide them. The Agreement is the complete agreement about its subject, without excluding fraud or misrepresentation liability that cannot lawfully be excluded.
21.3 Electronic agreement and authorised changes. Orders and agreed amendments may be executed electronically and in counterparts. Each party may retain an electronic copy as evidence of the agreed terms. An agent or reseller cannot amend Signet’s obligations or make a binding additional warranty unless Signet has expressly authorised it. An amendment outside the agreed change mechanism must be recorded in writing by authorised representatives; a waiver applies only to its stated instance. Headings aid navigation and do not override substantive wording.
21.4 Remedies and costs. Rights and remedies are cumulative to the extent law permits, without double recovery. Either party may ask a competent court for urgent protective or injunctive relief where damages may be inadequate, but no automatic entitlement or waiver of the court’s discretion is created. Litigation or dispute costs are awarded or agreed under the applicable procedure; this Agreement does not impose automatic prevailing-party fees or convert a privacy complaint into a chargeable dispute.
22. Governing law and disputes
This Agreement and non-contractual obligations arising from it are governed by the laws of England and Wales. Subject to mandatory law, the courts of England and Wales have exclusive jurisdiction. Before proceedings, an authorised representative of each party will attempt in good faith to resolve the dispute for up to 30 days after notice. This does not prevent urgent protective relief, preservation of a limitation period, regulatory complaints or individuals exercising mandatory rights. US customers remain subject to applicable mandatory US obligations for their activities; this choice-of-law clause does not disapply those obligations. No compulsory arbitration or contractual class-action waiver is imposed by this Agreement.
Schedule 1 — Data Processing
D1. Scope, roles and instructions
D1.1 This Schedule applies to Customer Personal Data processed by Signet for the Customer. “Applicable Data Protection Law” means the UK GDPR and Data Protection Act 2018 as amended, relevant PECR provisions, the EU GDPR where applicable, and applicable US federal and state privacy and data-security laws, including the CCPA as amended where it applies. Controller, processor, personal data, processing and personal data breach have their statutory meanings. US business, service provider, contractor, sale and sharing have their applicable statutory meanings.
D1.2 The Customer is controller or, where it lawfully acts for another controller, processor; Signet is processor or subprocessor. The Customer must obtain authority for subprocessing and communicate material upstream requirements before processing. Signet does not become controller of all connected data merely because it chooses technical implementation details. Signet's separate controller purposes are limited to those genuinely applicable and disclosed in the Privacy Policy; no contractual label legalises a change of purpose.
D1.3 The subject, purposes, duration, data types and data subjects are in Schedule 2. The Agreement, Order, lawful workspace configuration and subsequent authenticated written directions are documented instructions. Signet processes only on those instructions, including for international transfers, unless applicable law requires otherwise. Where legally permitted, it informs the Customer before such required processing. Signet immediately informs the Customer if, in its opinion, an instruction infringes applicable data protection law, and may pause that processing while the parties resolve it.
D1.4 The Customer determines lawful purposes and bases, provides required notices and choices and verifies the rights to supply the data. Signet provides reasonable information and assistance about its processing. This allocation does not excuse either party's independent obligations. A Customer instruction cannot override individual rights, mandatory law or source restrictions.
D2. Confidentiality and security
Signet ensures that people authorised to process Customer Personal Data are bound by confidentiality duties and receive appropriate instructions. It restricts access to what is necessary for their functions and maintains appropriate technical and organisational measures under applicable law, including the Schedule 2 measures. It will not materially reduce the overall level of protection during the term. Risk-based changes are permitted if the overall protection remains appropriate.
D3. Subprocessors
D3.1 The Customer gives general written authorisation for the applicable subprocessors identified in Schedule 3 and a subsequently supplied current register. Signet must supply sufficient information about identity, function, location and relevant safeguards before a new subprocessor processes the Customer's data. An integration independently engaged by the Customer is not made a Signet subprocessor by this clause.
D3.2 Signet will notify the Customer at least 30 days before adding or replacing a subprocessor that will process Customer Personal Data, where practicable. A Customer may object on reasonable data-protection grounds before the change. The parties will seek a reasonable solution, including an alternative configuration. If none is available, the Customer may end the affected service without penalty and receive a pro-rata refund of unused prepaid platform fees. If an urgent security or continuity replacement is necessary, Signet gives as much notice as practicable and preserves the objection and remedy rights; urgency is not a blanket waiver of lawful authorisation.
D3.3 Signet imposes written obligations materially equivalent to the relevant protections in this Schedule, conducts appropriate diligence, and remains responsible to the Customer for its subprocessors' performance of those obligations. Supplier use outside the notified purpose or for independent training is not authorised by a generic subprocessor listing.
D4. Rights and regulatory assistance
Taking account of the processing and information available, Signet assists the Customer through appropriate measures with requests for access, correction, deletion, restriction, portability, objection, opt-outs and applicable automated-decision safeguards. It promptly forwards a direct request concerning Customer-controlled data unless prohibited, and does not substantively respond contrary to the Customer's lawful instructions unless law requires it. Signet remains responsible for its own controller responses.
Signet reasonably assists the Customer with security duties, breach notification, data protection impact or risk assessments and required prior regulator consultation. It provides relevant factual information within its possession and does not misrepresent it. Reasonable charges for substantial bespoke assistance must be agreed in advance; charges do not delay a legally required action and are not payable for remediation of Signet's own breach.
D5. Personal data breaches
Signet notifies the Customer without undue delay after becoming aware of a Personal Data Breach affecting Customer Personal Data. Notification will describe, as available, the nature of the breach, affected data and people, likely consequences, contact point and measures taken or proposed. Information may be supplied in phases where a complete account is not yet available; the initial notice must not be delayed for a final investigation.
Signet investigates, contains and remedies within its responsibility, preserves appropriate evidence, cooperates with the Customer and provides material updates. The Customer normally decides notifications to its data subjects or regulators, without preventing Signet from meeting its own legal duties. A notification is not by itself an admission of liability. Contractual notice must be early enough to permit the parties to meet applicable statutory deadlines; this Schedule does not substitute a fixed 72-hour processor notice period for “without undue delay”.
D6. International transfers
D6.1 Signet makes a restricted transfer only under a valid mechanism applicable to that transfer, with required assessments and supplementary safeguards. A general authorisation to use US infrastructure is not a substitute for an adequacy basis, a properly completed transfer agreement or other valid legal mechanism. The parties must identify the exporter, importer, destination, role and data before relying on a mechanism.
D6.2 For UK-restricted transfers without an applicable adequacy basis, the relevant exporter and importer must put in place the ICO's then-applicable International Data Transfer Agreement or the approved UK Addendum to the relevant EU Standard Contractual Clauses. For EU-restricted transfers, the relevant parties use the appropriate module of the European Commission's applicable Standard Contractual Clauses or another lawful mechanism. Module Two ordinarily addresses controller-to-processor transfers and Module Three processor-to-processor transfers; selection must reflect the actual relationship. Mandatory clauses take precedence over conflicting commercial terms.
D6.3 Before the affected transfer starts, the relevant instrument must be binding and its party details, processing description, security measures, subprocessor information and other required tables or annexes completed. A supplier's applicable executed transfer addendum may fulfil this requirement if it covers the actual parties and processing. This Schedule does not represent that an incomplete reference to standard clauses completes them or that Signet holds a data-privacy-framework certification. Onward transfers remain subject to the same law and appropriate restrictions. Evidence of the mechanism and required assessment is made available with legitimate confidential details redacted.
D7. Return, deletion and continued limited services
At the Customer's choice, Signet deletes or returns Customer Personal Data when the provision of processing services ends and deletes copies unless applicable law requires storage. The 180-day offboarding service and any separately agreed archive are limited processing services on documented instructions under clause 12, not exceptions to this duty. The Customer can direct an earlier lawful return or deletion. Remaining legally required records are isolated and used only for their permitted purpose. Backup treatment and the treatment of genuinely anonymous information are governed by Schedule 4; neither defeats a valid deletion instruction. Signet provides reasonable confirmation of completion and identifies any lawful residual retention.
D8. Information, audits and compliance concerns
Signet makes available information reasonably necessary to demonstrate compliance with this Schedule and allows and contributes to audits, including inspections, by the Customer or its mandated independent auditor. The parties coordinate scope, timing, confidentiality and security to avoid unnecessary disruption and exposure of other customers' information. Existing reports may satisfy a particular request where sufficient, but are not an absolute substitute for a legally necessary audit. A reasonable annual limit on routine audits does not restrict regulator-mandated audits or additional proportionate audits following a material incident or credible compliance concern. Ordinary audit costs are borne by the Customer, except reasonable remedial audit costs attributable to Signet's material breach. The Customer may take reasonable steps to stop and remedy unauthorised use; Signet must notify the Customer if it can no longer meet its obligations.
D9. US service-provider and processor terms
Where applicable US law treats Signet as service provider, contractor or processor, the Customer discloses Customer Personal Data only for the specific purposes in Schedule 2. Signet will: (a) not sell or share it as those terms are legally defined; (b) not retain, use or disclose it outside the direct business relationship or for unrelated purposes, except as expressly permitted by law; (c) not combine it with information from another customer or its own consumer interactions except as expressly permitted; (d) provide the same required level of protection and comply with applicable obligations; (e) notify the Customer if compliance is no longer possible; and (f) permit reasonable steps to verify, stop and remediate unauthorised use.
Signet certifies that it understands and will comply with applicable contractor restrictions. It assists with valid consumer requests, assessments and audits and imposes equivalent appropriate duties on subprocessors. Any permitted internal service improvement must remain within the statutory exception and does not authorise identifiable profiles or targeted advertising for another customer. Cross-context behavioural advertising is not supplied under a service-provider label. Signet uses deidentified data only with legally required safeguards, public commitment to maintaining deidentified form, no reidentification except lawful testing of deidentification, and required recipient restrictions. Additional applicable state-law terms apply to the extent mandatory.
D10. Priority and survival
This Schedule survives while Signet or its subprocessors retain Customer Personal Data. It does not diminish rights of individuals or regulators, make an unlawful instruction valid, or authorise training outside clause 8. If a conflict arises, the interpretation providing mandatory protection prevails. The parties will cooperate on necessary lawful amendments without treating an outstanding amendment as permission to continue an unlawful transfer or use.
Schedule 2 — Processing Details and Security
P1. Processing particulars
| Item | Agreed description |
|---|---|
| Subject matter | Provision of the subscribed Signet revenue-intelligence, evidence, analysis and enabled workflow services for the Customer. |
| Nature and specific purposes | Receiving authorised source data; matching and reconciling records within the Customer's permitted scope; recording source provenance; attribution and business analytics; transcription and configured call/ |
| Duration and frequency | Continuous or periodic processing during the subscription and the expressly agreed limited offboarding/ |
| Data subjects | Customer representatives and users; prospects and customers; website visitors; call and meeting participants; staff, contractors and other people whose data the Customer lawfully supplies. |
| Personal-data categories | Names and contact details; business and account identifiers; pseudonymous website/ |
| Sensitive information | Not intended as a routine category. Any expressly agreed sensitive processing needs identified lawful conditions and additional safeguards. Incidental sensitive content must be minimised and handled under lawful instructions. |
| Customer rights and responsibilities | Choose lawful purposes and supported configurations; authorise sources and users; provide notices and choices; issue documented instructions; manage lawful retention; exercise audit and assistance rights; choose return or deletion. |
| Permitted recipients | Authorised Customer users; applicable subprocessors; destinations specifically instructed by the Customer; and recipients required by law. No sale or cross-customer identifiable-data use under the standard service. |
P2. Security obligations
Signet will maintain measures appropriate to the processing risks, including:
P2.1 Access and separation. Server-side authorisation, tenant-scoped processing, role-appropriate access, protection of administrator and integration credentials, personnel confidentiality and timely removal of unnecessary access.
P2.2 Transmission and storage. Encrypted transport for relevant application and provider communications; appropriate encryption at rest for hosted personal data; encrypted integration credentials with controlled key access; and private access controls for recording and transcript storage.
P2.3 Development and change. Controlled source changes, testing of tenant boundaries and significant data-processing changes, vulnerability management proportionate to risk, and processes for correcting defects. No guarantee that a particular audit, penetration test or certification has been completed is implied.
P2.4 Operations and incidents. Appropriate monitoring, incident handling, supplier oversight and documented response responsibilities. Records must be adequate to investigate relevant access or changes, while avoiding unnecessary sensitive payloads. Monitoring is not a representation that every operator activity is already captured in a customer-facing audit log.
P2.5 Availability and restoration. Appropriate backup and recovery measures, periodic assessment of restoration capability, and protection against unauthorised use of backups. Any guaranteed recovery target must be stated in an Order. Retention and restore procedures must reapply valid deletion instructions.
P2.6 Privacy engineering. Data minimisation, lawful retention and deletion procedures, separation of personal and anonymous datasets, appropriate anonymisation and extraction-risk testing for any permitted model development, and controls preventing source-restricted data from entering prohibited secondary uses.
These are contractual obligations for the processing undertaken, not claims of certifications or presently audited coverage. The parties may agree additional safeguards for higher-risk processing before it begins.
Schedule 3 — Supplier Register
The following identifies the relevant supplier brands and permitted functions. The current contracting entity, processing locations and transfer safeguards must be provided to the Customer before the relevant processing and maintained with this register. Only suppliers actually used for an enabled function receive its data. A conditional entry does not activate the feature or its data flow.
| Supplier brand | Permitted function and typical data | Application |
|---|---|---|
| Vercel | Application hosting and private object storage; application data, recordings or transcripts where stored. | Core infrastructure; actual locations and contracting entity must be supplied. |
| Neon | Database hosting; structured Customer Data and records. | Core infrastructure; reviewed deployment uses AWS us-east-1. |
| Anthropic | Relevant AI analysis and generation; transcripts, requested context and briefs. | Only enabled functions and permitted inputs. |
| AssemblyAI | Transcription; submitted audio and resulting transcript. | Only enabled transcription; reviewed implementation uses an EU endpoint. |
| Sentry | Error and performance monitoring; necessary technical and organisation/ | Operational monitoring; payload controls apply. |
| Resend | Transactional email; necessary recipient and message data. | Only enabled invitations, account and customer-directed transactional messages. |
| OpenAI | AI analysis of calls and meetings against the Customer's own criteria, using OpenAI's GPT models (currently GPT-6 Luna), and image generation where enabled; transcripts with speaker labels and participant roles, the Customer's analysis criteria and necessary call context, and relevant prompts and creative briefs. | Only enabled functions and permitted inputs, through OpenAI's API under its data processing addendum; not for training OpenAI's models. For enabled call and meeting analysis, OpenAI may include API inputs and outputs, including submitted transcript content, in abuse-monitoring logs. These logs are retained for up to 30 days by default, unless longer retention is required by law or reasonably necessary to protect services or third parties from harm. OpenAI does not use API data to train models by default unless the customer opts in; Signet does not authorise training on this workload. OpenAI processing may occur outside the UK and EEA, principally in the United States, under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as provided in OpenAI's data processing addendum. Contracting entity, processing locations and retention settings as stated in the current register, and covered by the applicable supplier terms and notification. |
Customer-chosen source providers and destinations are assessed separately; they are not automatically subprocessors. Stripe may separately process Signet billing data as described in the Privacy Policy. No customer SMS service or Twilio-based customer feature is promised or activated by this list. A future supplier addition follows Schedule 1, including notice and objection rights. This register must not describe a provider's default marketing statement as proof of a particular executed contract, region or training configuration.
Schedule 4 — Retention and Anonymous Service Intelligence
R1. Retention rules by category
| Category | Retention rule |
|---|---|
| Active Customer Personal Data | While reasonably necessary for the actual contracted purposes and lawful Customer instructions, subject to periodic review, category-specific schedules, valid rights requests and shorter source/ |
| Raw recordings, transcripts, model responses and supporting artifacts | The applicable documented category or Customer retention period, taking account of evidential need and sensitivity. Derived results may need a different period. No default perpetual retention or promise that all source media remains recoverable. |
| Post-subscription recovery data | Up to 180 days as a limited instructed processing service, ending earlier on a valid applicable instruction or mandatory limit. Delete or return when the service ends. |
| Extended archive | Only under an affirmative written arrangement for a defined genuine purpose and duration, reviewed periodically. No automatic extension through Customer silence. |
| Backups after deletion | Beyond ordinary use until expiry in the documented backup rotation; no analytics or training; restore only for legitimate recovery and reapply deletion. The actual cycle must be documented and communicated. |
| Signet's own tax, billing and necessary business records | The applicable statutory period, generally six years after the relevant company financial year for accounting/ |
| Signet's own legal, security and request records | A separately documented, proportionate period for the actual legal, security or accountability purpose. Restrict scope and access, review holds and erase when no longer necessary. |
| Eligible Anonymous Service Intelligence | No fixed contractual expiry while genuinely anonymous and permitted under law, confidentiality, source-provider terms and the licence below. Review risk and source restrictions; cease impermissible use. |
R2. Eligibility for anonymous reuse
A dataset, model or output qualifies only if a documented assessment establishes that it does not identify or permit reasonably likely identification, singling out or linkage of people and meets relevant US deidentification requirements. It must not reveal a customer's identity, identifiable business-level performance, proprietary creative or protected confidential information. Removal of direct identifiers alone is insufficient. The assessment considers other available information, small groups, unusual combinations, raw-content reproduction, membership or extraction attacks where relevant, and the intended recipients and uses.
Signet must restrict reidentification, control recipients, keep adequate assessment records, monitor material changes and stop treating information as anonymous if the criteria cease to hold. If an anonymous model becomes identifiable, it must be isolated and treated under the applicable personal-data rules, including correction, retraining or removal where required. A model is not automatically exempt because its source records were deleted.
R3. Permitted purposes and surviving rights
Eligible Anonymous Service Intelligence may support internal evaluation, statistical research, cross-customer benchmarking, predictive network models, reliability improvements and incorporation into Signet products. Subject to clause 8 and source rights, the Customer grants the necessary worldwide, royalty-free right to create such intelligence during lawful processing and to retain, combine, adapt, publish and commercially license qualifying statistical products and genuinely non-identifying models after termination. Appropriate recipients must be contractually restricted against reidentification and impermissible onward use. This is a limited derivative-data licence, not ownership of Customer Data or an assignment of customer creative assets. No public customer endorsement or identifiable case study is authorised.
R4. Hard exclusions
The right does not include: identifiable or pseudonymous customer prospect, household or worker profiles; raw recordings or transcripts merely stripped of names; reversible identity keys; data whose use would breach an individual right or recorded instruction; or any source data or derivative whose provider restrictions prohibit the purpose. Meta-sourced information and Google Limited Use data, where applicable, are not automatically reusable for cross-customer learning even if anonymised. Before inclusion, the specific source and proposed use must be verified as permitted; otherwise it is excluded.
Neither termination, a legal hold nor an archive election grants additional training rights. Research is not used as a blanket label to evade retention, deletion or purpose restrictions. Any separate personal-data research or training arrangement needs its own documented legal justification and agreement before processing; it is not authorised by this Schedule.