Privacy Policy

1. Scope

SignalFlow is a social publishing platform that allows users to connect third-party social accounts and publish content to supported platforms. This policy applies to information processed in connection with our website, accounts, integrations, and related services (the “Service”).

Related documents: Terms of Service, Cookie Policy, Data Deletion Instructions, Security, and Contact.

2. Information We Collect

Account and registration information

When you create an account or sign in, we may collect:

• Name and email address
• Password or authentication credentials managed through our authentication provider
• Account preferences and profile details you choose to provide

Authentication and account session handling are provided through Supabase. We store account-related records needed to operate your SignalFlow workspace.

Connected social accounts

If you connect a third-party social platform (such as LinkedIn, X / Twitter, Facebook, Instagram, YouTube, or TikTok), we may receive and store:

• Account identifiers, display names, and profile metadata returned by the platform
• OAuth access tokens and, where provided, refresh tokens
• Connection status and permission scopes granted by you

We use connected-account permissions to authenticate with the platform APIs, publish content you instruct us to publish, check connection health, and display integration status in the Service. We do not use those permissions to publish content without your instruction or other authorised application behaviour you initiate within SignalFlow.

Content you submit for publication

We process content you create, upload, schedule, or submit for publication—including posts, captions, media references, campaign assets, and related metadata—so we can generate, store, schedule, and deliver that content as you direct.

Publishing activity and integration status

We retain records of publishing attempts and results (for example, success, failure, timestamps, and platform responses) to show status in the product, help troubleshoot issues, and improve reliability.

Subscription and billing information

Subscription and payment processing are handled by Stripe. SignalFlow may store billing-related identifiers and plan status needed to manage your subscription. Payment card details are processed by Stripe and are not stored by SignalFlow as full card numbers.

Transactional email

We use Resend to send transactional messages such as account, authentication, and service-related emails. That involves processing your email address and message content required to deliver those communications.

Technical, usage, diagnostic, and security information

Like most online services, we may automatically collect technical and operational data such as IP address, browser type, device information, approximate location derived from network data, timestamps, request logs, error diagnostics, and security-related signals used to operate, protect, and improve the Service.

Cookies and similar technologies

We use cookies and similar technologies for authentication, session management, preferences, and security. See our Cookie Policy for details.

3. How We Use Information

We use information to:

• Provide, operate, and maintain the Service
• Authenticate users and secure accounts
• Connect social accounts and publish content at your direction
• Process subscriptions and billing through Stripe
• Send transactional and service-related communications via Resend
• Monitor reliability, diagnose errors, and improve features
• Detect, prevent, and respond to abuse, fraud, and security incidents
• Comply with legal obligations and enforce our agreements
• Respond to support, privacy, and deletion requests

4. How Information May Be Shared

We may share information with:

• Service providers that help us operate SignalFlow, including Supabase (authentication and database), Stripe (billing), Resend (email), and hosting providers used to run the Service
• Connected social platforms, when you publish content or otherwise use integrations that require transmitting content or tokens to those platforms
• Professional advisors or authorities, when reasonably necessary to comply with law, protect rights and safety, or respond to lawful requests
• Successors, in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards

We do not sell your personal information. SignalFlow does not publish to your connected social accounts without your instruction or other authorised application behaviour you initiate in the Service.

5. Data Retention

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data, account status, and operational or legal requirements.

For instructions on disconnecting accounts and requesting deletion, see our Data Deletion Instructions.

6. Security

We implement reasonable administrative, technical, and organisational measures designed to protect information we process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Additional information is available on our Security page.

7. Your Choices

• Account information: You may update certain account details within the Service where available.
• Connected accounts: You may disconnect social platforms from SignalFlow through the product’s integrations or settings flows where available. You may also revoke access from the third-party platform’s own security or app settings.
• Marketing communications: Transactional and account-essential messages may still be sent as needed to operate the Service.
• Deletion: You may request deletion of your account and associated personal data as described in our Data Deletion Instructions.

8. Children’s Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

9. International Data Processing

SignalFlow and its service providers may process information in countries other than where you live. Where we do so, we take steps we consider appropriate under applicable law to protect the information, recognising that local legal requirements may differ.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If changes are material, we may provide additional notice through the Service or by email where appropriate.

11. Contact

For privacy questions, deletion requests, or related concerns, contact us at support@signalflowengine.com or use our Contact page.