Privacy Policy

• Customers (businesses that use MET Signal) and their team members. For this information we decide how it is used; we are the “controller”.
• Prospects who run a free audit or contact us. We are the controller.
• Our customers’ website visitors, leads and callers. Our customers decide what to collect and why; we process it on their behalf as their “service provider” or “processor”. See “Our customers’ visitors, leads and callers” below.

• Account details: name, email address and password (stored only as a one-way hash), your role, and the business you belong to.
• Business details you enter during setup: legal business name, phone, address, hours, service area, services and top services, typical job value, ideal customer, website platform, website and domain contacts, who manages your website and Google Business Profile, ad spend, other agencies you work with, brand assets link, brand voice, competitors, review link, goals, busy season and notes. We never ask for your passwords; you give us access by adding our email as a user.
• Work requests: the details you enter when you ask us to do something (for example pages, keywords, offers, deadlines, links to your assets), approvals, and your feedback on finished work.
• Tracking settings: keywords, questions you want checked in AI assistants, competitors, locations, and report and notification email addresses.
• Billing: your plan and add-ons. Payments are made through Stripe; we never see or store full card numbers. We keep your Stripe customer and subscription IDs and payment status.
• Free audit and contact forms: your name, business name, email, phone, website, city or service area, number of locations and your message.
• Communications: emails and messages you send us, and notes our team keeps to serve your account.

Signing in with Google: if you choose “Continue with Google”, Google shares your name and verified email address with us. We use them only to create your account and sign you in; we get no other access to your Google account.

When you connect Google, you choose the accounts and sign in with Google. We request read access to:

• Google Search Console: the searches your site appears for, clicks, impressions, positions and page URLs.
• Google Analytics 4: visits, users and key events by date and marketing channel.
• Google Business Profile: your locations, profile views, calls, website clicks, direction requests, and your reviews (the reviewer’s public display name, rating, review text and your reply).
• Your Google account email, to show which account is connected.

We use this access only to read data for your dashboard, alerts and reports. We do not post, edit or delete anything in your Google accounts. You can disconnect at any time in Settings; disconnecting also revokes our access at Google.

If you connect Stripe billing, we receive your subscription and payment status from Stripe.

MET Signal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features you see in MET Signal (your dashboard, alerts, reports and recommendations).
• We do not sell it, use it for advertising, or use it to train artificial intelligence models.
• We do not transfer it to others except as needed to provide the service (for example our hosting and database providers), to comply with law, or as part of a merger or sale with your data protected under this policy.
• People on our team can see it only to support your account, for security, or where the law requires it.
• Your Google access tokens are encrypted when stored.

Our customers can add the MET Signal script to their website so they can see which marketing brings in customers. When you visit a website that uses it:

• A first-party cookie named _acc_vid stores a random visitor ID for up to 400 days, on that website’s own domain. The script also stores in your browser’s local storage the same visitor ID, a session ID, and the time of your last visit.
• Visit details: pages you view, the website that referred you, campaign tags (utm_source, utm_medium, utm_campaign) and ad click IDs (such as gclid and fbclid), the time of your first and last visits, and how many visits and pages you viewed.
• Forms: when you submit a contact or quote form, the fields you filled in (for example name, email, phone, service and message) are sent to the business as a lead, together with how you found them. The script ignores fields that look like passwords, card numbers or social security numbers, and our servers discard them too. We also record when a form is started.
• Phone calls and texts: MET Signal does not track, record or send phone calls or text messages. A business may note in MET Signal that it called you.
• Closed jobs and invoices: if a business imports a spreadsheet of completed jobs or connects its job or accounting software (for example through Zapier), we receive the job amount, date, service, job or invoice number, and the customer's name, email and phone, and use them only to match sales to the marketing that produced them. A business may also download ad click IDs and sale amounts to send to its own Google Ads account.
• Messages: if the business sends you automated emails through MET Signal (for example a reply to your request, an appointment reminder or a review request), we keep a copy of each message sent. Every email includes an unsubscribe link.

We do not collect IP addresses or browser details through the tracking script. We use your IP address briefly to limit abusive form submissions (see “Security”).

• Sign-in cookie: acc_session, which keeps you signed in for 7 days after your last visit (see “Cookies and similar technologies”).
• Security logs: to stop password guessing and spam, we briefly record the email address or IP address involved in sign-in attempts, password resets, sign-ups and form submissions. Free audit requests keep the requester’s IP address with the audit.
• Google Analytics: we use Google Analytics 4 on metsignal.com to understand how visitors find and use our site (pages viewed, how you arrived, rough location and device type). Google sets its own cookies for this and processes the data under its privacy policy (policies.google.com/privacy). You can opt out with Google’s browser add-on at tools.google.com/dlpage/gaoptout. We do not use advertising pixels.

• We crawl customers’ websites (and websites entered in the free audit) to check technical SEO, speed, content and AI search readiness. Our crawler identifies itself as MetSignalBot.
• We read competitors’ public sitemaps to spot new pages, and check public search and map rankings.
• We ask AI assistants the questions our customers choose and store the answers, which businesses were mentioned and which websites were cited.

• Provide the service: dashboards, lead tracking and attribution, reports, alerts, recommendations, AI visibility checks and the work you request.
• Send the emails our customers set up, and service emails (sign-in links, invites, quotes, request updates, reports, payment notices).
• Bill you and handle payment problems, refunds and disputes.
• Keep the service secure, prevent abuse and fix problems.
• Follow up on free audits and inquiries. You can ask us to stop at any time.
• Comply with the law and enforce our Terms of Service.

We do not sell personal information, “share” it for cross-context behavioral advertising, or use it to build advertising profiles.

Some features use AI providers (Anthropic, OpenAI, Google Gemini and Perplexity) through their business APIs:

• AI visibility checks send only the question you chose and your city.
• Report summaries, monthly action plans and priority suggestions send business-level information: your business name, industry and city, totals such as visits, leads and revenue by channel, top search queries and pages, review counts and averages, AI mention rates, and task titles.
• Page and content tools send the text of the web page being improved, related search queries and page addresses.

We do not send leads’ or visitors’ personal information, form submissions, message records, reviewers’ names or review text, your business-details answers, or our internal notes to AI providers. AI output can be wrong; we review AI-assisted work before it is published on your behalf.

We share information only with service providers that help us run MET Signal, under contracts that limit their use of it:

We may also disclose information if required by law or to protect rights and safety, and to a buyer or successor if our business is sold or reorganized, with this policy continuing to apply. Our customers can see the leads, visitor activity, calls and messages for their own business.

If you contacted or visited a business that uses MET Signal, that business controls your information. Please contact them to access, correct or delete it, or email us at support@metsignal.com and we will pass your request to them and help them respond.

When a business deletes a lead, we delete that lead’s details together with the messages sent to them and any call notes.

You can clear or block cookies in your browser settings. Blocking the sign-in cookie will stop you from signing in.

Deleted information may remain in encrypted backups for a limited time until they are replaced.

• All connections are encrypted (HTTPS). Passwords are stored only as salted hashes, and sign-in links are single-use and stored as hashes.
• Google access tokens are encrypted at rest.
• Sign-in attempts, password resets and forms are rate-limited, and changing your password signs out your other devices.
• Access to customer data is limited to the customer’s own users and the MET Signal team members who serve them.

No system is perfectly secure. If a breach affects your information, we will notify you as required by law.

• Access and correct: account owners can view and update most information in Settings, Business details and Profile.
• Export or delete: email us to request a copy of your data or to delete your account and its data.
• Emails: use the unsubscribe link in any marketing or automated email. Service emails about your account (like payment notices) are part of the service.
• Your privacy rights: depending on where you live (for example California, Colorado, Connecticut, Virginia or Utah), you may have the right to know, access, correct, delete or get a copy of your personal information, and to opt out of its sale or use for targeted advertising (we don’t do either). We will not treat you differently for using these rights.

To make a request, email support@metsignal.com. We will confirm your identity (usually through your account email) and respond within 45 days. You may use an authorized agent. If we deny your request, you can reply to appeal and we will explain our decision.

MET Signal is built for marketing information. Please do not use MET Signal forms, messages or notes to collect or store health information, financial account or card numbers, government ID numbers or similar sensitive data. MET Signal is not designed to meet HIPAA requirements, and customers in healthcare must not send protected health information through it.

MET Signal is a business service for adults. It is not directed to children under 16, and we do not knowingly collect their personal information.

We and our service providers store and process information in the United States. By using MET Signal from another country, you understand your information will be processed in the United States.

We may update this policy as MET Signal changes. We will post the new version here with a new date, and email account owners before material changes take effect.

Market Exposure Technologies LLC, a Wyoming limited liability company. Privacy questions or requests: support@metsignal.com. By mail: 30 N Gould St, STE N, Sheridan, WY, 82801.