SignalDesk
Home Pricing Risk & Disclaimer
Log in Get started free

SignalDesk Privacy Policy

Last updated: 2026-08-22

This Privacy Policy explains how SignalDesk ("SignalDesk", "we", "us" or "our") collects, uses, stores and protects personal information when you use our website, application and services.

We are committed to handling personal information responsibly and in accordance with applicable data-protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, where applicable.

1. Who we are

The data controller responsible for your personal information is:

SignalDesk
Legal entity: Kernal Tech
Registered address: 6 Gwylfa Road, Swansea, SA1 6QN
Email: support@kernaltech.co.uk

For privacy-related questions or requests, contact us using the details above.

2. Information we collect

The information we collect depends on how you use SignalDesk.

Account information

When you create an account, we may collect:

  • email address;
  • name or other account information you choose to provide;
  • password credentials or password hashes;
  • account creation and authentication information; and
  • account preferences and settings.

We do not store your password in plain text.

Subscription and payment information

If you purchase a Premium subscription, payment information may be processed by our payment provider.

Depending on the payment provider used, SignalDesk may receive information such as:

  • subscription status;
  • billing status;
  • transaction identifiers;
  • payment method type;
  • billing country; and
  • limited payment information required to manage your subscription.

We do not need to store your full payment-card details where those details are processed directly by our payment provider.

Brokerage connection information

If you connect a supported brokerage account, we may process information required to establish and maintain that connection.

This may include:

  • brokerage account identifiers;
  • API keys, tokens or other authentication credentials;
  • account and portfolio information;
  • positions and holdings;
  • available balances;
  • orders;
  • fills and execution information;
  • trading permissions; and
  • information returned by the brokerage API.

Brokerage credentials are encrypted and are used only for the purposes authorised by you and supported by the relevant brokerage integration.

Where technically supported, SignalDesk requests only the permissions necessary to provide the relevant functionality.

SignalDesk does not request or require withdrawal permissions where the connected brokerage integration does not require them.

Trading and strategy information

When you use SignalDesk, we may collect information relating to your use of the service, including:

  • strategies you enable;
  • signals delivered to you;
  • strategy configuration;
  • orders submitted through SignalDesk;
  • execution results;
  • timestamps;
  • positions and portfolio information obtained from your brokerage;
  • automation status; and
  • actions taken through the SignalDesk application.

This information may be necessary to operate the service, maintain records, investigate incidents and provide customer support.

Technical and usage information

We may automatically collect technical information such as:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • referring pages;
  • pages or features accessed;
  • timestamps;
  • error logs;
  • authentication events;
  • security events; and
  • other information necessary to operate and secure the service.

We may use cookies and similar technologies as described in our Cookie Policy.

3. How we use personal information

We may use personal information to:

  • create and maintain your account;
  • authenticate users;
  • provide SignalDesk features;
  • generate and deliver signals;
  • operate strategies you have enabled;
  • submit authorised orders through connected brokerage accounts;
  • retrieve brokerage account and position information required to operate the service;
  • process and manage subscriptions;
  • provide customer support;
  • communicate with you about your account or the service;
  • monitor, maintain and secure our systems;
  • detect and prevent fraud, abuse and unauthorised activity;
  • troubleshoot technical problems;
  • maintain appropriate records;
  • analyse service performance and improve our products; and
  • comply with legal and regulatory obligations.

We do not sell personal information.

4. Legal bases for processing

Where UK GDPR applies, we process personal information using one or more of the following legal bases:

Contract

We process information where it is necessary to provide the services you have requested or to perform our contract with you.

For example, this may include creating your account, delivering signals, operating Premium functionality and processing subscription-related information.

Legitimate interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Examples include:

  • securing and protecting our systems;
  • preventing fraud and abuse;
  • maintaining and improving the service;
  • analysing technical performance;
  • investigating incidents; and
  • defending or establishing legal claims.

Legal obligation

We may process information where necessary to comply with a legal obligation.

Consent

Where applicable, we may process information based on your consent, including where consent is required for particular cookies, marketing communications or other processing activities.

Where processing relies on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect processing that occurred before withdrawal.

5. Brokerage credentials and connected accounts

Brokerage credentials are particularly important because they may provide SignalDesk with the ability to interact with your brokerage account.

We use reasonable security measures designed to protect stored credentials, including encryption and access controls.

SignalDesk does not hold your brokerage funds and does not use connected brokerage credentials to withdraw funds from your account.

However, depending on the brokerage and API permissions available, SignalDesk may be able to submit trading orders and retrieve account information on your behalf.

You remain responsible for reviewing the permissions granted to SignalDesk and monitoring activity in your brokerage account.

If you disconnect your brokerage account or revoke API access, credentials and associated connection information may remain in our systems for a limited period where necessary for security, audit, legal or operational purposes.

6. Who we share information with

We may share personal information with service providers that help us operate SignalDesk.

These may include providers of:

  • cloud hosting and infrastructure;
  • databases;
  • authentication and security;
  • payment processing;
  • email and communications;
  • analytics and monitoring;
  • market data;
  • brokerage integrations; and
  • customer support.

These providers process information on our behalf where required and are expected to maintain appropriate confidentiality and security protections.

We may also disclose information:

  • where required by law;
  • to comply with a valid legal request;
  • to protect SignalDesk, users or third parties;
  • to investigate fraud, abuse or security incidents;
  • to establish, exercise or defend legal claims; or
  • in connection with a merger, acquisition, restructuring, financing or sale of all or part of our business.

We do not sell personal information to third parties.

7. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will use appropriate safeguards where required by applicable data-protection law.

These safeguards may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another legally recognised transfer mechanism.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Different categories of information may be retained for different periods.

For example:

  • account information may be retained while your account remains active;
  • subscription and transaction records may be retained for accounting, tax and legal purposes;
  • security and access logs may be retained for a limited period;
  • brokerage and trading records may be retained where necessary to operate the service, investigate disputes or maintain appropriate records; and
  • information required for legal claims may be retained for the applicable limitation period.

When information is no longer required, we will delete it or securely anonymise it where reasonably practicable.

9. Account deletion

You may request closure or deletion of your SignalDesk account by contacting us.

Closing your account does not necessarily result in the immediate deletion of every record associated with you.

We may retain certain information where necessary to:

  • comply with legal or regulatory obligations;
  • complete accounting or tax records;
  • resolve disputes;
  • prevent fraud or abuse;
  • maintain security records;
  • establish, exercise or defend legal claims; or
  • comply with other lawful retention requirements.

Where information is retained, we will limit its use to the purposes for which retention is necessary.

10. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Depending on the information and system involved, these measures may include:

  • encryption;
  • access controls;
  • authentication controls;
  • secure credential storage;
  • logging and monitoring;
  • network and application security controls; and
  • security updates and vulnerability management.

No internet-based service can guarantee absolute security.

You are responsible for keeping your SignalDesk credentials, devices, authentication methods and brokerage credentials secure.

11. Your data-protection rights

Depending on your circumstances and applicable law, you may have rights including:

  • the right to access your personal information;
  • the right to request correction of inaccurate information;
  • the right to request deletion;
  • the right to request restriction of processing;
  • the right to object to certain processing;
  • the right to data portability; and
  • the right to withdraw consent where processing is based on consent.

These rights are subject to applicable legal exceptions and limitations.

To exercise a right, contact us using the details provided above.

We may need to verify your identity before processing certain requests.

12. Complaints

If you have concerns about how we process your personal information, please contact us first so that we can investigate the issue.

If you are in the United Kingdom and remain dissatisfied, you may also have the right to complain to the Information Commissioner's Office ("ICO").

Information about making a complaint is available through the ICO's website.

13. Marketing communications

Where permitted by law, we may send service-related communications necessary to operate your account.

We will only send marketing communications where we have a lawful basis to do so.

You can opt out of marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us.

Opting out of marketing does not prevent us from sending essential service, security or account-related communications.

14. Cookies and analytics

SignalDesk may use cookies and similar technologies to:

  • keep users authenticated;
  • maintain security;
  • remember preferences;
  • understand how the service is used;
  • diagnose technical problems; and
  • improve the service.

Where required by law, non-essential cookies and similar technologies will only be used with your consent.

Further information should be provided in our Cookie Policy.

15. Children's information

SignalDesk is not intended for children who are not legally capable of entering into the applicable service agreement.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us, contact us so that we can investigate and take appropriate action.

16. Automated decision-making

SignalDesk may use automated software to generate trading signals and operate strategies that you have enabled.

These processes are designed to operate the trading functionality you have selected.

SignalDesk does not use automated processing to make decisions about your eligibility for financial products based on your personal circumstances.

Where applicable law gives you rights concerning solely automated decision-making or profiling, those rights will be respected.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Where changes are material, we will provide appropriate notice where required by law.

The "Last updated" date at the beginning of this Privacy Policy indicates when it was most recently revised.

18. Contact

For privacy questions, data-protection requests or concerns, contact:

SignalDesk
Legal entity: Kernal Tech
Email: support@kernaltech.co.uk

© 2026 SignalDesk. Not investment advice. See Risk & Disclaimer, Terms, Privacy, Cookies.