Privacy Policy

MetroSgnl (metrosgnl.com) is a US multifamily market intelligence platform. We provide market conditions, AI analysis, and market tools for real estate operators, investors, and brokers. For privacy purposes, MetroSgnl is the data controller for the personal data described below.

We collect only what we need to provide the service:

• Email address: when you subscribe to the market update email or create a Pro account.
• Authentication data: managed by Supabase. We store your email and subscription status. We use magic-link sign-in, so no passwords are stored.
• Payment data: if you subscribe to Pro, payment is handled by our payment provider. We do not see or store your card details. We receive a customer and subscription reference and your payment status.
• Usage and analytics data: we use Vercel Analytics (cookieless, aggregate) and, only after you accept cookies, Google Analytics 4. Analytics data can include pages viewed, approximate location (derived from IP, not stored by us), device and browser type, and how you arrived at the site (including UTM campaign tags from ads). This is used in aggregate to understand traffic, not to identify you.

We use your data to:

• Send the market update email, if you subscribed
• Create and manage your Pro account and send account-related messages
• Process and maintain your Pro subscription
• Measure site traffic and the performance of our marketing, in aggregate

We do not sell or rent your personal data, and we do not share it with third parties for their own marketing.

Where the GDPR applies, we rely on: performance of a contract (to run your account and subscription), legitimate interests (to keep the service secure and understand aggregate usage), and your consent (for analytics cookies and the optional email update, each of which you can withdraw at any time).

We use the following providers, each with their own privacy policy. Some are based in the United States.

• Supabase: authentication and user account storage
• Our payment provider: payment processing and subscription management (the provider acts as merchant of record and is named here once selected)
• Vercel: hosting and cookieless analytics
• Google Analytics: site and campaign analytics (only after you accept cookies)
• Anthropic (Claude API): powers AI commentary, the AI assistant, and Market Reports. The relevant market data and your request are sent to Anthropic and its cloud infrastructure providers to generate a response. This content is not used to train AI models.
• Resend: delivery of account and update emails
• Supabase (Postgres): storage of market conditions and source data (not personal data)

We keep cookies to a minimum and group them as follows:

• Essential cookies: needed for the site to work. These keep you signed in (Supabase session), remember your cookie choice, remember whether you have seen the product tour, and count your free AI uses. These are always on and do not require consent.
• Analytics cookies: set by Google Analytics 4 to measure site traffic and which campaigns bring visitors. These are off by default and are only set after you click Accept on the cookie banner. We do not enable advertising or cross-context behavioral advertising cookies.

When you first visit, Google Analytics runs in a cookieless, consent-denied state (Google Consent Mode). Nothing non-essential is stored until you choose Accept. If you Decline, no analytics cookies are set. We also honor the Global Privacy Control (GPC) signal: if your browser sends a GPC opt-out, we keep analytics off automatically and do not show the banner. To change your choice at any time, use the "Cookie settings" link in the site footer. Vercel Analytics is cookieless and aggregate, so it runs without cookies.

Email subscribers can unsubscribe at any time using the link in any email or by contacting us. Pro account data is retained for the duration of your subscription and for up to 90 days after cancellation, after which it is deleted or anonymized, unless we are required to keep records (for example, for tax or accounting) for longer.

MetroSgnl is operated from South Africa and several of our providers are based in the United States. This means your personal data may be transferred to and processed in countries outside your own, including the US. Where required, we rely on the providers' own safeguards (such as standard contractual clauses) for these transfers.

Depending on where you live (for example under the GDPR in the EEA and UK, the CCPA in California, or POPIA in South Africa), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Receive a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent, including for analytics cookies and the email update

To exercise any of these, email us at the address below and we will respond within the timeframe required by applicable law. You also have the right to complain to your local data protection authority.

MetroSgnl is intended for real estate professionals and investors and is not directed at anyone under 18. We do not knowingly collect personal data from children.

Questions about this policy or your data? Email us at hello@metrosgnl.com.