Trust
Trust Center
Last updated October 5, 2026
At a glance
Video stays on your device
Hand and face tracking run in the browser. We never receive video, images, or tracking data.
No ads or data sales
We don't sell data, show ads, or build advertising profiles of anyone.
Encrypted in transit and at rest
HTTPS with HSTS on every site, and our database is encrypted at rest.
No passwords or card numbers
Sign-in runs through Clerk and payments through Stripe, so neither touches our servers.
Student privacy
Parent or school consent for children under 13, and student records handled for the school under FERPA.
Deletion on request
Students, parents, and schools can ask us to delete data, and we do it within 30 days.
What we store
| Data | What it includes | Where it's kept |
|---|---|---|
| Account | Name, email address, profile picture | Clerk and our database |
| Learning progress | Lessons, XP, signs practiced, and accuracy scores | Our database |
| Classes | Members, assignments, and completions | Our database |
| LMS connections | LMS user ID, name, email address, role, and course | Our database. Launch records are deleted about a day after they expire. |
| Billing | Plan and subscription status. Card details stay with Stripe. | Stripe and our database |
| Analytics | Pages viewed and app events | PostHog and Google Analytics |
| Camera video and tracking data | Never collected | Stays on your device |
The full details, including how long we keep each type of data, are in our Privacy Policy.
Security practices
- TLS on every connection with HSTS, plus a strict Content Security Policy on the website.
- Cloudflare in front of every site for traffic filtering and denial-of-service protection.
- Progress and XP calculated on the server, with single-use tokens for each lesson.
- Signed LTI 1.3 launches, and signed requests between our own services.
- Rate limits on sign-ups, reports, settings changes, and model downloads.
- Access to production data limited to the few people who need it.
More on each of these is on our Security page.
Compliance
- COPPA
- Children under 13 use Signpost only with a parent's or school's consent. We use their information only for learning and delete it on request.
- FERPA
- When a school uses Signpost, we handle student records as a school official, under the school's direction and only for its purposes.
- Student privacy laws
- We don't use student data for targeted ads, sell it, or build profiles beyond school purposes, in line with laws like California's SOPIPA.
- GDPR and UK GDPR
- Our lawful bases, your rights, and how we protect international transfers are in our GDPR Notice.
- CCPA
- We don't sell or share personal information.
- LTI 1.3
- Our LMS integration uses the 1EdTech LTI 1.3 standard, with signed launches and grade passback.
- Certifications
- We don't currently hold SOC 2 or ISO 27001 certification.
Subprocessors
These companies process personal data for us. Our Subprocessors page lists what each one does, the data it handles, and where.
- Cloudflare
- Neon
- Clerk
- Stripe
- PostHog
- Google Analytics
For schools and districts
Signpost works inside Canvas, Schoology, Blackboard, Moodle, Brightspace, and other learning management systems that support LTI 1.3. When a school uses Signpost:
- Students sign in through the LMS, which sends us their LMS ID, name, email address, and role.
- Lesson scores go back to the LMS gradebook automatically.
- Teachers see progress for students in their own classes, and no one else’s.
- We use student data only to provide Signpost to the school.
- The school can ask us to export or delete its student data at any time.
If your district needs a signed data privacy agreement or a completed security questionnaire, email [email protected].
Status and reporting
System status
Live uptime and past incidents are on status.signpostasl.com.
Report a vulnerability
Found a security issue? Our disclosure policy explains how to report it and what to expect from us.
Policies
Contact
Matrix Studios Software
1968 S. Coast Hwy #3479, Laguna Beach, CA 92651
Email: [email protected]


