1. Who we are

Signal is a product of Signal Raise Inc. (“Signal Raise,” “we,” “us,” or “our”). We operate the Signal platform at signalraise.com, which automates investor outreach for startup founders. Questions about this policy can be sent to support@signalraise.com.

2. Information we collect

We collect information you provide directly and information generated through your use of Signal:

Account data — name, email address, and password when you create an account.
Company profile — business name, description, financials, and raise details you enter to personalize outreach.
Email credentials — When you connect via Google OAuth, Signal stores your OAuth refresh token (never your password) to send emails and detect replies on your behalf. When you connect via SMTP, we store the host, port, and app password. Credentials are stored server-side only in encrypted Firestore and are never exposed to other users or returned to the browser.
Gmail data — When you connect your Google account, Signal accesses your Gmail to: (1) send cold outreach and follow-up emails on your behalf, (2) scan your inbox for investor replies so they appear in your Signal inbox, and (3) read reply content you explicitly open in Signal. We do not read, index, or store any other email content. Gmail data is never used for advertising, to train AI models, or shared with third parties beyond what is necessary to operate the Service.
Investor data — contact and research information about investors you add to your pipeline, sourced from public web data via Exa AI.
Usage data — agent runs, emails sent, and feature interactions used to enforce plan limits and improve the product.
Payment data — billing is handled by Stripe. Signal Raise does not store credit card numbers. Stripe’s privacy policy governs payment data.

3. How we use your information

To provide and operate the Signal platform.
To generate personalized investor outreach emails using your company profile and AI models (Anthropic Claude).
To send emails on your behalf and detect investor replies using your connected email account (Google OAuth or SMTP).
To enforce subscription plan limits and process billing via Stripe.
To send transactional emails (account verification, billing receipts, team invites).
To improve and debug the product using aggregated, anonymized usage data.

We do not sell your personal information. We do not use your data to train AI models. We do not use Gmail data for advertising purposes.

4. Google API Services and Gmail access

Signal Raise’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, when you connect your Google account to Signal:

Signal requests access to https://mail.google.com/ to send emails on your behalf and to scan for investor replies via IMAP.
Gmail data is used only to operate Signal’s email sending and reply detection features. It is not used for any other purpose.
Gmail data is not shared with third parties except as strictly necessary to operate the Service (e.g., routing outbound email through Google’s SMTP servers).
Gmail data is not used to serve advertisements or for remarketing.
Humans at Signal Raise do not read your Gmail messages. Automated systems access only the headers and body content required to detect investor replies, and only for messages in scope (emails from investors in your pipeline).

You can revoke Signal’s Gmail access at any time by visiting myaccount.google.com/permissions or by disconnecting your account in Signal’s Settings → Email Config.

5. Data sharing and third-party services

We share data only with the following sub-processors required to operate Signal:

Google Firebase — authentication, database (Firestore), and file storage.
Anthropic — AI model API for scoring and drafting emails. Inputs include your company profile and investor research data.
Exa AI — web search API for investor research and email discovery.
Stripe — payment processing and subscription management.
Google Cloud Run — API server hosting.
Vercel — dashboard hosting.

6. Data retention

We retain your account data and pipeline data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest (e.g., billing records). Investor research data contributed to the shared Signal database may be retained in anonymized, de-identified form.

7. Security

We use industry-standard security practices including encrypted data storage via Google Firestore, HTTPS in transit, and Firebase Auth for access control. Email credentials are stored server-side only and are never accessible to other users or exposed in client-side responses (passwords are stripped before being returned to the browser).

8. Your rights

You may request at any time:

A copy of the personal data we hold about you.
Correction of inaccurate data.
Deletion of your account and associated data.

To exercise these rights, email support@signalraise.com from the address associated with your account. To request account deletion specifically, visit our account deletion page.

9. Cookies

Signal uses only functional cookies necessary for authentication (Firebase Auth session tokens). We do not use advertising cookies or cross-site tracking.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via an in-app banner before the changes take effect. Continued use of Signal after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact us at support@signalraise.com.

Privacy Policy