Privacy Policy

This Privacy Policy explains how MRBE ("we", "us", "our"), operating QuietSignal, collects and processes personal data. MRBE is based at Oudenaardsesteenweg 354B, 8500 Kortrijk, Belgium.

1. Who is the Data Controller

For data you provide directly (your account, billing, usage), MRBE is the data controller.

For contact data you upload into QuietSignal (people you monitor), you are the controller and we act as the data processor on your behalf.

2. What Data We Collect

Account data: name, email address, password hash, profile image.

Usage data: pages visited, actions performed, timestamps, IP address, browser type.

Contact data you upload: names, LinkedIn URLs, job titles, employers of people you want to monitor.

Detection data: results from LinkedIn profile enrichment (current title, current company) for contacts you have added.

Billing data (if applicable): handled by our payment processor; we do not store card details.

3. How We Use Your Data

We use your data to:

• Provide, maintain, and improve the Service
• Detect job changes in your contacts (via third-party enrichment)
• Send transactional emails (signals detected, account activity, invitations)
• Respond to support requests
• Prevent fraud and abuse
• Comply with legal obligations

4. Legal Basis (GDPR)

We process personal data on the following bases:

• Contract: to deliver the Service you signed up for
• Legitimate interest: to improve the product, prevent abuse, and communicate about the Service
• Consent: where required (e.g., optional analytics, marketing emails)
• Legal obligation: for tax, accounting, and compliance

5. Data We Share

We share data with:

• Apify — for LinkedIn profile enrichment
• Supabase — for database hosting (EU region where available)
• Vercel — for application hosting
• Resend — for transactional email delivery
• Google — for OAuth authentication (if you sign in with Google)

We do not sell personal data.

6. International Transfers

Some of our providers may process data outside the European Economic Area (EEA). Where this happens, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

7. Retention

We retain account and contact data for as long as your account is active. If you delete your account, your data is permanently removed within 30 days, except where retention is required by law (e.g., tax records).

8. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with the Belgian Data Protection Authority

To exercise these rights, email hello@getquietsignal.com.

9. Cookies

We use essential cookies to run the Service and optional cookies for analytics. See our Cookie Policy for details.

10. Security

We use reasonable technical and organizational measures to protect your data: encrypted connections (TLS), encrypted passwords (bcrypt), access controls, and hosting on compliant infrastructure.

No method of transmission or storage is 100% secure. You use the Service at your own risk.

11. Children

QuietSignal is not intended for individuals under 18. We do not knowingly collect data from children.

12. Changes

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice.

13. Contact

Data protection questions: hello@getquietsignal.com

MRBE Oudenaardsesteenweg 354B 8500 Kortrijk, Belgium