1. Who we are

Signal is a product of Signal Raise, Inc. (“Signal Raise,” “we,” “us,” or “our”). We operate the Signal platform at signalraise.com, which automates investor outreach for startup founders. Questions about this policy can be sent to support@signalraise.com.

2. Information we collect

We collect information you provide directly and information generated through your use of Signal:

Account data — name, email address, and password when you create an account.
Company profile — business name, description, financials, and raise details you enter to personalize outreach.
Email credentials — When you connect via Google OAuth, Signal stores your OAuth refresh token (never your password) to send emails and detect replies on your behalf. When you connect via SMTP, we store the host, port, and app password. Credentials are stored server-side only in encrypted Firestore and are never exposed to other users or returned to the browser.
Gmail data — When you connect your Google account, Signal accesses your Gmail to: (1) send cold outreach and follow-up emails on your behalf, (2) scan your inbox for investor replies so they appear in your Signal inbox, and (3) read reply content you explicitly open in Signal. We do not read, index, or store any other email content. Gmail data is never used for advertising, to train AI models, or shared with third parties beyond what is necessary to operate the Service.
Uploaded documents — files you choose to upload, including confidential materials placed in your private dataroom (e.g., incorporation documents, financial statements, cap tables, contracts). These are stored access-controlled, visible only to you, and used solely to provide the Service — never shared with other users or third parties unless you direct us to (for example by creating a dataroom share link for an investor), and never used to train AI models. When someone opens a share link you created, we ask for their email address and show it to you along with their view and download activity.
Investor data — contact and research information about investors you add to your pipeline, sourced from public web data via Exa AI.
Usage data — agent runs, emails sent, and feature interactions used to enforce plan limits and improve the product.
Payment data — billing is handled by Stripe. Signal Raise does not store credit card numbers. Stripe’s privacy policy governs payment data.

3. How we use your information

To provide and operate the Signal platform.
To generate personalized investor outreach emails using your company profile and AI models (Anthropic Claude).
To send emails on your behalf and detect investor replies using your connected email account (Google OAuth or SMTP).
To enforce subscription plan limits and process billing via Stripe.
To send transactional emails (account verification, billing receipts, team invites).
To improve and debug the product using aggregated, anonymized usage data.

We do not sell your personal information. We do not use your data to train AI models. We do not use Gmail data for advertising purposes.

4. Google API Services and Gmail access

Signal Raise’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, when you connect your Google account to Signal:

Signal requests access to https://mail.google.com/ to send emails on your behalf and to scan for investor replies via IMAP.
Gmail data is used only to operate Signal’s email sending and reply detection features. It is not used for any other purpose.
Gmail data is not shared with third parties except as strictly necessary to operate the Service (e.g., routing outbound email through Google’s SMTP servers).
Gmail data is not used to serve advertisements or for remarketing.
Humans at Signal Raise do not read your Gmail messages. Automated systems access only the headers and body content required to detect investor replies, and only for messages in scope (emails from investors in your pipeline).

You can revoke Signal’s Gmail access at any time by visiting myaccount.google.com/permissions or by disconnecting your account in Signal’s Settings → Email Config.

5. Data sharing and third-party services

We share data only with the following sub-processors required to operate Signal:

Google Firebase — authentication, database (Firestore), and file storage.
Anthropic — AI model API for scoring and drafting emails. Inputs include your company profile and investor research data.
Exa AI — web search API for investor research and email discovery.
Stripe — payment processing and subscription management.
Google Cloud Run — API server hosting.
Vercel — dashboard hosting.

Signal Network

Other Signal Raise founders can see a short network card about your startup: its name, tagline, sector, stage, location, website, and a summary of what you offer and who you sell to, drafted from the company profile you provide. You can edit or hide this card at any time from the Signal Network page. No one can contact you through Signal Raise unless you turn on intro requests, and your email address is shared with another founder only after you accept a specific request from them.

6. Data retention

We retain your account data and pipeline data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest (e.g., billing records). Investor research data contributed to the shared Signal database may be retained in anonymized, de-identified form.

7. Security

We use industry-standard security practices: data is encrypted at rest (Google-managed encryption in Firestore and Cloud Storage) and in transit (HTTPS/TLS), with Firebase Auth and server-enforced access rules controlling who can read what. Email credentials are stored server-side only — they are never readable by other users, never returned to the browser, and never accessible from client-side code.

Documents in your dataroom are stored in access-controlled storage readable only by your account. Downloads use short-lived signed links that expire within minutes, so there are no permanent public URLs to your files. If you create a dataroom share link, people with that link can view and download your non-draft documents until the link expires or you revoke it; they must provide an email address first, which is recorded and shown to you.

8. Your rights

You may request at any time:

A copy of the personal data we hold about you.
Correction of inaccurate data.
Deletion of your account and associated data.

To exercise these rights, email support@signalraise.com from the address associated with your account. To request account deletion specifically, visit our account deletion page.

9. Cookies

Signal uses only functional cookies necessary for authentication (Firebase Auth session tokens). We do not use advertising cookies or cross-site tracking.

10. Mobile app and push notifications

The Signal Raise mobile app (iOS and Android) is a companion to the web platform and accesses the same account and pipeline data described above. In addition:

Push notification tokens — If you enable notifications, we store your device’s push token, platform, and device name server-side solely to deliver notifications you have opted into (investor replies, run completion, follow-ups). You can change notification types in the app or disable them entirely in your device settings; tokens are removed when you sign out or when your device reports them invalid.
No tracking — The mobile app contains no advertising or analytics SDKs and does not track you across other apps or websites.
Offline cache — The app stores your most recently fetched pipeline and inbox data on your device so it remains usable offline. This cache is cleared when you sign out.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via an in-app banner before the changes take effect. Continued use of Signal after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, contact us at support@signalraise.com.

Privacy Policy