Privacy Policy

Signal Send is operated as a software service for preparing audience segments and campaign copy. Questions: hello@signal-send.com. We typically respond within one business day.

Depending on how you use the service, we may process: account email and display name; passwords (hashed); uploaded contact lists and campaign files; job outputs (segments, copy, confidence scores); billing records if you pay; and, if you connect Klaviyo, OAuth tokens, the Klaviyo account name/id, and — when you import — list membership and profile fields you choose to pull. We do not scrape your storefront or infer private facts you did not upload or import.

We use this information to run the product: authenticate you, process lists, generate recommendations and copy, export workbooks, push optional results to Klaviyo when you ask, bill usage, prevent abuse, and improve reliability. Uploaded lists are not pooled into public model training.

Connecting Klaviyo is optional. CSV and workbook export work without it. If you authorize the connection, we request only the API permissions needed to identify your account, read lists and profiles so you can import an audience, update matching profiles, create or reuse lists, and optionally create email templates. We do not request permission to send or schedule campaigns, and we do not send email from Signal Send.When you click Import, we may read list names and profile fields (typically email, name, company, title, location, phone, and custom properties) from the list you select, then store them like an uploaded CSV for segmentation and copy. We only import when you ask.When you click Push, we may write: profile properties signal_send_segment and signal_send_job_id; lists named like Signal Send · {campaign} · {segment}; and, if you opt in, email templates from approved copy. We match contacts by email. We do not overwrite unrelated Klaviyo fields or push columns you marked as protected (except email, which is required to match).You can disconnect in Signal Send, which revokes our tokens. If you uninstall the app inside Klaviyo, we treat the connection as revoked the next time we refresh tokens and ask you to reconnect. Until Klaviyo reviews a listing, their install screen may warn that the app is unreviewed — that is their default for private OAuth apps, not an endorsement.

We use other companies to operate the service:

• OpenAI — generates segments, recommendations, and copy from fields you approve.
• Amazon Web Services (S3, us-east-1) — stores uploaded files and export workbooks.
• Render — hosts the application and PostgreSQL database.
• Stripe — processes payments if you buy credits or a subscription.
• Klaviyo — only if you connect your account; we read lists/profiles when you import, and write the data described above when you push, into the account you authorize.

Application hosting, database, and file storage currently run in the United States (Render and AWS us-east-1). If you are in the EU/UK, you acknowledge that information you upload is processed in the US. We are building toward formal data-processing terms on request; email hello@signal-send.com if you need a DPA or deletion confirmation before using the product with EU personal data.

Account records last until you ask us to delete them. Job files and list uploads are kept so you can resume work; we may expire unused uploads. Klaviyo tokens are stored encrypted and removed when you disconnect. Billing records are kept as required for taxes and disputes. You can request deletion of your account and stored lists at the contact email above.

You can access or correct account details, disconnect Klaviyo, export a workbook instead of pushing, and request deletion. Do not upload data you are not allowed to process. You are responsible for having a lawful basis to use contact information in your campaigns.

We transmit data over HTTPS. Klaviyo OAuth tokens are encrypted at rest. Access to production systems is limited to operators who need it. No method of transmission or storage is perfectly secure; report issues to the contact email above.

Signal Send is a business tool. It is not directed at children, and we do not knowingly collect personal information from children.

We may update this policy. The date at the top will change. Continued use after an update means you accept the revised policy.