Privacy Policy

Signal ("Signal," "we," "us") is a private productivity application that brings a user's Gmail accounts into a single dashboard and uses AI to summarize messages, surface action items, draft replies, and create tasks and calendar events. This policy explains what information Signal accesses, how it is used, and the choices you have.

Information we access

When you connect a Google account, and only with your explicit consent, Signal may access:

• Your Google account email address and basic profile — to identify the connected inbox.
• Gmail messages (read) — message content, senders, subjects, and metadata, so Signal can display, organize, and summarize your mail.
• Sending email (on your request) — to send replies that you review and approve.
• Google Calendar events — to read your schedule and create events from your mail when you ask it to.

Signal only accesses the accounts you choose to connect, and only the scopes you approve during the Google consent flow. You are not required to grant sending or calendar access to use the read-and-summarize features.

How we use it

• To present a unified, organized view of your inboxes.
• To generate AI summaries, extracted action items, and draft replies for the messages you open.
• To create tasks, deadlines, and calendar events at your direction.

Your Google data is used solely to provide these features to you. We do not sell your data, use it for advertising, or use it to build advertising profiles.

AI processing

To produce summaries and drafts, the content of the messages you open is sent to our AI provider, Anthropic, through its API, and a summary or draft is returned. This processing happens only for the messages you view or act on. Anthropic processes this content to generate the response and does not use data submitted through its API to train its models.

Service providers

Signal relies on a small number of processors to operate:

• Anthropic — AI summarization and drafting (message content is sent for processing, as described above).
• Supabase — secure database storage for your tasks, templates, deadlines, cached summaries, and authentication.
• Netlify — application hosting and serverless functions.

Each provider processes data only to deliver its part of the service.

Storage and retention

Signal stores the tasks, templates, deadlines, and cached message summaries you generate, plus the access tokens needed to connect your Google accounts, in a database protected by row-level security so that only your account can read your data. We retain this information for as long as your account is active. You can delete individual items in the app, and you can request full deletion of your data at any time (see below).

Your choices and control

• Revoke access at any time from your Google Account at myaccount.google.com/permissions. Revoking stops all further access by Signal.
• Delete your data by contacting us at the address below; we will remove your stored data and tokens.

Security

Access to your accounts is protected by authentication and row-level security, connections are encrypted in transit, and OAuth tokens are stored securely and never exposed in the browser. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

Children

Signal is not directed to children under 13 and does not knowingly collect their information.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions or data-deletion requests: hello@foundrlabs.ai.