Privacy Policy

1. Who we are

Signal is operated by NOMΘI, based in Abu Dhabi, United Arab Emirates. For privacy inquiries, contact [email protected].

2. Data we collect

We collect the following categories of data:

• Account data: your email address and name from Google OAuth sign in.
• LinkedIn export data: connections, posts, and related metadata that you upload from your official LinkedIn data export. We do not scrape LinkedIn.
• Conversation profiles: descriptions of your goals and intentions that you create within Signal.
• Generated content: AI generated drafts and post suggestions, along with your edits and feedback (thumbs up/down).
• Career interview data: CV text, job adverts, interview answers, transcripts, scores, competencies, role fit, and reports from Signal Career interview practice.
• Usage data: basic analytics about how you use Signal, collected through cookies.

3. How we use your data

• To score your contacts for relevance to your offers.
• To generate personalised outreach drafts and post suggestions using AI.
• To build a voice profile from your writing so drafts sound like you.
• To manage your subscription and billing through Stripe.
• To improve the accuracy of our scoring and generation models over time.
• To share scored career profiles with employers only when a candidate gives explicit opt in consent. Shared scored profiles may include scores, competencies, and role fit. Raw answers and full reports are not shared with employers without further candidate consent for an introduction.

4. Third party services

Signal uses the following third party services:

• Supabase for authentication and database hosting (Frankfurt, EU).
• Google OAuth for sign in.
• Stripe for subscription billing and payment processing.
• Anthropic (Claude) for AI draft and post generation. Your data is sent to Anthropic's API for generation only and is not used for model training.
• Hetzner for application hosting (EU region).

5. Data retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed from our systems within 30 days. Backups containing deleted data are purged on the same schedule.

6. Your rights

You have the right to:

• Access your data by emailing [email protected] for a copy of what we hold about you.
• Delete your account or your data by emailing [email protected]. If you have an account, you can also delete it from your Settings page once signed in.
• Port your data by emailing [email protected], and we will send it in a machine readable format.
• Object to processing by contacting us at [email protected].

7. Cookies

Signal uses functional cookies for authentication (Supabase session tokens). These are essential for the service to work and cannot be disabled. Signal does not use tracking pixels or invisible image beacons. We use Google Analytics for basic usage metrics, which you can opt out of via the cookie consent banner.

8. GDPR compliance

Signal processes personal data in accordance with the General Data Protection Regulation (GDPR). Our lawful basis for processing is the performance of a contract (your subscription) and legitimate interest (improving draft quality through aggregate pattern analysis). You may exercise your GDPR rights (access, rectification, erasure, portability, objection) by contacting [email protected]. We will respond within 30 days.

9. Children

Signal is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email. The date at the top of this page indicates when the policy was last updated.

11. Contact

For any privacy related questions, contact [email protected].
NOMΘI, Abu Dhabi, United Arab Emirates.