← SIGNL

Privacy Policy

Last updated: 23 July 2026

1. Who we are

SIGNL (“SIGNL”, “we”, “us”) is operated by Mason Bowstead, a sole trader based in the United Kingdom. This policy explains what personal data we collect through the SIGNL platform (trysignl.app and its subdomains), why we collect it, and what rights you have over it.

If you have any questions about this policy or how your data is handled, contact us at mason@infoscalelab.com.

2. What data we collect

We collect data in three broad categories:

Account & workspace data. When you or your organisation sign up, we collect your name, email address, and any workspace details you provide (business name, team members, roles). If you sign in with Google, we receive your Google account's name, email address, and profile photo, as permitted by the scopes you approve during sign-in.

Business data you input or connect. SIGNL is a CRM and operations platform. Data you or your team enter — leads, contacts, call records, notes, forms, bookings, commissions, and similar business records — is stored so the platform can function. Where you connect third-party integrations (e.g. Stripe, GoHighLevel, Google Calendar), we receive the data those integrations are configured to share.

Usage & device data. We collect standard technical data (IP address, browser type, pages visited, timestamps) to operate, secure, and improve the service, and lead-tracking data (via our tracking pixel/script) on pages you publish through SIGNL, such as booking and form pages.

3. Google user data — Limited Use disclosure

SIGNL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with Google. We request your basic profile (name, email, profile photo) solely to authenticate you and create/access your SIGNL account. We do not use this data for advertising.

Google Calendar integration (optional, per-user). If you choose to connect your Google Calendar, you grant SIGNL permission to (a) create calendar events when a call is booked and assigned to you, and (b) — only if you enable “two-way sync” — read your calendar's free/busy times so SIGNL can avoid double-booking you. We do not read event titles, descriptions, attendees, or any other event content beyond the time ranges needed to compute availability. Calendar data is used exclusively to power this scheduling feature within your own SIGNL workspace. We do not sell this data, use it for advertising, or share it with any party other than the service providers described in Section 5 who help us run SIGNL. You can disconnect your calendar and revoke this access at any time from your Team settings inside SIGNL, or directly from your Google Account permissions page.

4. How we use your data

We use the data described above to:

  • Provide, operate, and maintain the SIGNL platform for your workspace
  • Authenticate you and secure your account
  • Power features you use, including scheduling, CRM, reporting, and AI-assisted features
  • Communicate with you about your account or changes to the service
  • Monitor, debug, and improve the reliability and security of the platform
  • Comply with our legal obligations

Where SIGNL uses AI features (e.g. Insights, Ask AI, Training), business data you've already stored in your workspace is sent to our AI provider (Anthropic) to generate the requested output. This data is not used by us or our AI provider to train models, and is processed only to fulfil your request.

5. Who we share data with

We do not sell your personal data. We share data only with the service providers that help us run SIGNL, each bound by their own data-processing terms:

  • Supabase — database hosting and authentication
  • Vercel — application hosting
  • Anthropic — AI-assisted features (Insights, Ask AI, Training)
  • Resend — transactional email delivery
  • Stripe — payment processing (where billing is enabled)
  • Google — sign-in and, if you opt in, Calendar sync

We may also disclose data where required by law, or to protect the rights and safety of SIGNL, our users, or the public.

6. Data retention

We retain your data for as long as your workspace is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we're required to retain it for legal, tax, or security purposes.

7. Security

We use industry-standard measures to protect your data, including encryption in transit, row-level access controls scoped to your organisation, and restricted internal access. No system is perfectly secure, and we can't guarantee absolute security, but we work to keep your data safe and will notify you as required by law if a breach affects you.

8. Your rights

If you're in the UK or EEA, you have rights under UK/EU data protection law, including the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact mason@infoscalelab.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

9. Children

SIGNL is a business tool and is not directed at, or intended for use by, children under 16.

10. Changes to this policy

We may update this policy from time to time. We'll update the “last updated” date above, and where changes are material, we'll take reasonable steps to notify you.

11. Contact

Questions about this policy or your data? Email mason@infoscalelab.com.