Privacy Policy

1. Who we are

Signal is operated by NOMΘI, based in Abu Dhabi, United Arab Emirates. For privacy inquiries, contact [email protected].

2. Data we collect

We collect the following categories of data:

• Account data: your email address and name from Google OAuth sign in.
• LinkedIn export data: connections, posts, and related metadata that you upload from your official LinkedIn data export. We do not scrape LinkedIn.
• Conversation profiles: descriptions of your goals and intentions that you create within Signal.
• Generated content: AI generated drafts and post suggestions, along with your edits and feedback (thumbs up/down).
• Usage data: basic analytics about how you use Signal, collected through cookies.

3. How we use your data

• To score your contacts for relevance to your offers.
• To generate personalised outreach drafts and post suggestions using AI.
• To build a voice profile from your writing so drafts sound like you.
• To manage your subscription and billing through Stripe.
• To improve the accuracy of our scoring and generation models over time.

4. Third party services

Signal uses the following third party services:

• Supabase for authentication and database hosting (Frankfurt, EU).
• Google OAuth for sign in.
• Stripe for subscription billing and payment processing.
• Anthropic (Claude) for AI draft and post generation. Your data is sent to Anthropic's API for generation only and is not used for model training.
• Hetzner for application hosting (EU region).

5. Data retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed from our systems within 30 days. Backups containing deleted data are purged on the same schedule.

6. Your rights

You have the right to:

• Access your data by downloading a full export from the Settings page.
• Delete your account through the Settings page, or by emailing [email protected].
• Port your data via the data export feature, which provides all your data in a machine readable format (JSON).
• Object to processing by contacting us at [email protected].

7. Cookies

Signal uses functional cookies for authentication (Supabase session tokens). These are essential for the service to work and cannot be disabled. Signal does not use tracking pixels or invisible image beacons. We use Google Analytics for basic usage metrics, which you can opt out of via the cookie consent banner.

8. GDPR compliance

Signal processes personal data in accordance with the General Data Protection Regulation (GDPR). Our lawful basis for processing is the performance of a contract (your subscription) and legitimate interest (improving draft quality through aggregate pattern analysis). You may exercise your GDPR rights (access, rectification, erasure, portability, objection) by contacting [email protected]. We will respond within 30 days.

9. Children

Signal is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email. The date at the top of this page indicates when the policy was last updated.

11. Contact

For any privacy related questions, contact [email protected].
NOMΘI, Abu Dhabi, United Arab Emirates.