Legal

Privacy Policy

Last updated 26 October 2026 · about a 7 minute read

What we collect

Your email, and what you ask

No passwords are stored, and we never see or store your card details.

Cookies

Off until you accept

Analytics and advertising cookies are set only if you click Accept.

Selling data

We never sell it

Your personal data is not sold, rented or shared for anyone else to market to you.

Your rights

Access, correct or delete

Email us and we answer within the time the law where you live requires.

01

MetroSgnl (metrosgnl.com) is a US multifamily market intelligence platform. We provide market conditions, AI analysis, and market tools for real estate operators, investors, and brokers. For privacy purposes, MetroSgnl is the data controller for the personal data described below.

02

We collect only what we need to provide the service:

  • Email address: when you subscribe to the market update email or create a Pro account.
  • Authentication data: managed by Supabase. We store your email and subscription status. We use magic-link sign-in, so no passwords are stored.
  • Payment data: if you subscribe to Pro, payment is handled by our payment provider. We do not see or store your card details. We receive a customer and subscription reference and your payment status.
  • What you ask and tell us: the questions you type into the assistant, the market you searched for when we do not cover it, and any answer you give to a one line question on the site. We keep the words as written, with your account id rather than your email address, so we can see which markets and which questions the product is being asked for. Anything that looks like an email address, a phone number or a long number is removed before it is stored, and the text is deleted after 180 days. We never publish it.
  • Advertising data: only if you accept advertising cookies. We advertise MetroSgnl on Facebook and Instagram, and the Meta pixel tells Meta which of their ads brought you here. What it sends is the pages you view on this site, four things you do here (reading a second market, creating an account, clicking Get Pro, and starting Pro), and the identifier Meta sets in its own cookie. For an account that is created or a subscription that starts, our server also sends Meta the same events with your email address hashed (scrambled with SHA-256 before it leaves us, so Meta can match it to an account it already has, but we never send the email itself). We send nothing at all for anyone who has not accepted advertising cookies, and nothing from the admin side of the site. To stop it: click Decline, or change your choice at any time with the "Cookie settings" link in the footer, which removes consent from that moment on; you can also turn off ad personalisation inside your own Facebook or Instagram settings.
  • Usage and analytics data: we use Vercel Analytics (cookieless, aggregate) and, only after you accept cookies, Google Analytics 4 and Microsoft Clarity. Analytics data can include pages viewed, approximate location (derived from IP, not stored by us), device and browser type, and how you arrived at the site (including UTM campaign tags from ads). This is used in aggregate to understand traffic, not to identify you. We collect first-party, aggregated usage analytics with no cookies and no advertising identifiers.
03

We use your data to:

  • Send the market update email, if you subscribed
  • Create and manage your Pro account and send account-related messages
  • Process and maintain your Pro subscription
  • Measure site traffic and the performance of our marketing, in aggregate

We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.

04

Where the GDPR applies, we rely on: performance of a contract (to run your account and subscription), legitimate interests (to keep the service secure and understand aggregate usage), and your consent (for analytics cookies and the optional email update, each of which you can withdraw at any time).

05

We use the following providers, each with their own privacy policy. Some are based in the United States.

  • Supabase: authentication and user account storage
  • Polar: payment processing and subscription management. Polar is the merchant of record for MetroSgnl Pro, so your card details go to Polar, never to us
  • Vercel: hosting and cookieless analytics
  • Google Analytics: site and campaign analytics (only after you accept analytics cookies)
  • Microsoft Clarity: session recordings and heatmaps, so we can see where a page confuses people. Nothing is loaded, requested or sent to Clarity unless you accept analytics cookies. Clarity masks the contents of every input box, including your email address, so what you type is never sent to it.
  • Meta (Facebook and Instagram): advertising measurement, through the Meta pixel in your browser and the Meta Conversions API from our server (only after you accept advertising cookies)
  • Anthropic (Claude API): powers AI commentary, the AI assistant, and Market Reports. The relevant market data and your request are sent to Anthropic and its cloud infrastructure providers to generate a response. This content is not used to train AI models.
  • Resend: delivery of account and update emails
  • Supabase (Postgres): storage of market conditions and source data (not personal data)

YouTube. To publish our own short videos to our YouTube channel we use YouTube API Services. By using our site you are not using YouTube; this runs on our servers, for our channel only. It uploads videos we made and reads back their status, and nothing else: it never reads, stores or shares any visitor's or any other person's YouTube data. The only data it holds is the access token for our own channel, kept on our server until we revoke it. YouTube's Terms of Service apply to that use: youtube.com/t/terms, as does Google's Privacy Policy: policies.google.com/privacy. Access granted to it can be revoked at any time at security.google.com/settings/security/permissions.

06

We keep cookies to a minimum and group them as follows:

  • Essential cookies: needed for the site to work. These keep you signed in (Supabase session), remember your cookie choice, remember whether you have seen the product tour, and count your free AI uses. These are always on and do not require consent. When you visit metrosgnl.com/start we set one small cookie, ms_home, so the logo brings you back to that page for 30 days. It holds no personal information and you can clear it at any time.
  • Analytics cookies: set by Google Analytics 4 to measure site traffic and which campaigns bring visitors, and by Microsoft Clarity to join the pages of one visit into a single recording. These are off by default and are only set after you click Accept on the cookie banner.
  • Advertising cookies: set by the Meta pixel so Meta can tell which of its ads brought you here and can show MetroSgnl ads to people who have read a market. These are off by default. The pixel is not loaded at all until you accept: if you decline, your browser makes no request to Meta from this site.

When you first visit, Google Analytics runs in a cookieless, consent-denied state (Google Consent Mode), Microsoft Clarity is not loaded at all: we measured what it does when it is loaded with consent denied, and it withholds its own cookies but still records and still sets identifiers on Microsoft's own domains, so we do not load it until you accept, and the Meta pixel is not loaded at all. Nothing non-essential is stored until you choose Accept. If you Decline, no analytics or advertising cookies are set and no advertising events are sent from our server either. We also honor the Global Privacy Control (GPC) signal: if your browser sends a GPC opt-out, we keep both off automatically and do not show the banner. To change your choice at any time, use the "Cookie settings" link in the site footer. Vercel Analytics is cookieless and aggregate, so it runs without cookies.

07

Email subscribers can unsubscribe at any time using the link in any email or by contacting us. Pro account data is retained for the duration of your subscription and for up to 90 days after cancellation, after which it is deleted or anonymized, unless we are required to keep records (for example, for tax or accounting) for longer. Assistant questions and any free text you send us are deleted 180 days after you send them.

08

MetroSgnl is operated from South Africa and several of our providers are based in the United States. This means your personal data may be transferred to and processed in countries outside your own, including the US. Where required, we rely on the providers' own safeguards (such as standard contractual clauses) for these transfers.

09

Depending on where you live (for example under the GDPR in the EEA and UK, the CCPA in California, or POPIA in South Africa), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Receive a copy of your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent, including for analytics cookies and the email update

To exercise any of these, email us at the address below and we will respond within the timeframe required by applicable law. You also have the right to complain to your local data protection authority.

10

MetroSgnl is intended for real estate professionals and investors and is not directed at anyone under 18. We do not knowingly collect personal data from children.

11

Questions about this policy or your data? Email us at hello@metrosgnl.com.