SignalCart.io collects and serves strictly publicly visible marketplace and social media content:

• Only publicly visible product listings, storefront profiles, and social posts — nothing behind a login wall.
• Zero buyer PII, zero private accounts, zero phone numbers, private addresses, or direct messages.
• Instagram, TikTok Shop, Amazon, and YouTube metrics are collected from public surfaces in compliance with applicable data protection regulations.

• Never commit your SIGNALCART_KEY to a public repository or .env file tracked by Git.
• If your API key is accidentally exposed, immediately log in to your SignalCart Dashboard (https://app.signalcart.io/login) to revoke and rotate the key.

If you discover a security vulnerability in this cookbook or in the SignalCart API, please report it privately to [email protected] rather than opening a public GitHub issue.