Privacy Policy
Last updated: [DATE]
What SignalAI does
SignalAI connects to your email inbox (via IMAP or Gmail forwarding), uses AI to classify incoming messages by urgency and category, and alerts you by text message and/or a web dashboard when something needs your attention.
Information we collect
Account information
- Email address, and name if you provide one
- Either a password (stored as a salted hash, never in plain text) or a Google account identifier, depending on how you sign in
- Phone number and carrier, if you enable text alerts
Email content
- If you connect via IMAP: your email address and an app-specific password for your mail provider (not your real account password), encrypted at rest
- The subject, sender, and body content of emails you forward or that we retrieve via IMAP, so they can be classified
- AI-generated classification data: category, priority, extracted deadlines and action items, and a short summary
Usage data
- How many emails have been processed and how many texts sent, each calendar month (used only to gauge fair use of your plan — see Terms of Service)
How your email content is actually used
Every email is sent to Anthropic's Claude API to be classified. This is the core of how SignalAI works, and it means email content leaves our servers and is processed by a third-party AI provider. We do not use your email content to train any AI model ourselves, and are not aware of Anthropic using API content for model training under our agreement with them — but you should not send anything through SignalAI that you would not be comfortable being processed by an AI system.
Third parties we share data with
| Service | What they receive | Why |
|---|---|---|
| Anthropic (Claude API) | Email subject, sender, body content | AI classification and draft-reply suggestions |
| Textbelt (or a self-hosted equivalent) | Your phone number, a short message summary | Text alerts for urgent emails |
| Resend | Your email address | Sign-in links, trial notices, digest emails |
| Stripe | Billing information you provide directly to them | Subscription payments — we never see or store your card details |
| Railway | All application data | Hosting infrastructure |
How long we keep things
- Spam: discarded immediately, never stored
- Automated mail (newsletters, receipts, notifications): kept and shown under FYI, so you can browse it if you want to
- Everything else (action items, deadlines, responses needed): kept until you archive it
- Archived emails: automatically deleted 30 days after archiving, or immediately if you use the "Clear archive" option yourself
- IMAP app passwords: kept encrypted for as long as your IMAP connection stays active; deleted if you disconnect it
Security
- IMAP passwords are encrypted at rest, not stored in plain text
- All connections to SignalAI use HTTPS/TLS
- Email body content is currently stored in our database without additional application-level encryption beyond our hosting provider's infrastructure-level encryption at rest — meaning it is not readable from a stolen disk, but is technically accessible to us directly, the same way it would be for most email-processing tools
- Authorized personnel access account data only to investigate specific reported issues or bugs — never to browse content routinely
Text message (SMS) privacy
If you enable text alerts, we collect your phone number and carrier, and send you a text when an urgent email arrives. We do not share or sell your mobile information to third parties for promotional or marketing purposes. Message and data rates may apply. Reply STOP to any text to cancel alerts, or HELP for help. Message frequency varies based on your email volume.
Your choices
- Delete your account: available directly from the Account page — this permanently removes your data
- Disconnect your inbox: immediately stops IMAP access and deletes the stored app password
- Turn off text alerts: available anytime from Setup
- Clear your archive: available from the Archived view
Children's privacy
SignalAI is not directed at, and should not be used by, anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If we make material changes to how we handle your data, we'll update this page and, where appropriate, notify you directly.
Contact
Questions about this policy or your data: hello@worklessapp.com
SignalAI is a product of WorkLess.