Privacy policy
Last updated
Draft. This page is waiting for legal review before launch.
This policy covers the Signal website, the app, the API and the MCP server. It is written to be read. If something here is unclear, write to contact@replace-me.invalid.
Two kinds of data
Your account. Your name, email address and the organization you work in, held by Clerk, which runs sign-in and billing for us. We use it to run your account and to write to you about it. If you pay, your card is taken by Stripe through Clerk; we never see or store the card number.
Your callers’ calls. When you connect a voice agent, Signal reads its calls. Transcripts contain what callers said, which often includes names, dates of birth and account details. For this data you decide what is collected and why, and we process it on your behalf to give you the service. You are responsible for telling your callers, in the way the law where you operate requires, that their calls are recorded and analysed.
What we do with it
- Rebuild each call, label what happened, and group failures into issues for you.
- Run the simulated tests you ask for, against the agent versions you choose.
- Answer questions you put to Copilot about your workspace.
- Keep the service running, secure and paid for.
We do not sell personal data, and we do not use your calls to train models.
Models
Calls are read by language models through OpenRouter, which routes our requests only to providers that keep no copy of the data and do not train on it. Where Copilot is set to call Anthropic directly instead, its requests go to Anthropic.
Analytics and cookies
We use PostHog to understand how the product is used and to catch errors. In the app, sessions are recorded with every piece of text on screen and every input masked, and without network request bodies or the browser console, so a recording shows where people click and never what a call said. This website records no sessions. On this website, analytics loads only if it is turned on and your browser has not asked not to be tracked (Do Not Track or Global Privacy Control); when it does load, it sets a cookie that lets a visit here and a sign-up in the app count as one journey. Sign-in sets the cookies Clerk needs to keep you signed in.
Who processes data for us
Neon (database), Fly.io (servers), Cloudflare (web hosting), Clerk (accounts and billing), Stripe (card payments), OpenRouter (model routing), TypeSafe (Jev, decision model reached through OpenRouter), Anthropic (models, when Copilot calls them directly), PostHog (analytics) and GitHub (encrypted backups). The security page lists what each one does and where. Data is stored and processed in the United States.
How long we keep it
As long as your account is open. Deleting an agent deletes its calls and everything derived from them at once. Deleting your account or organization deletes the whole workspace. Encrypted nightly backups are kept for 14 days, so deleted data is gone from them within two weeks.
Your rights
You can ask to see, correct, export or delete personal data we hold about you. Write to contact@replace-me.invalid. If you are a caller whose call was analysed, ask the business you called: they control that data, and we will help them answer you.
Children
Signal is a tool for businesses and is not meant for anyone under 16.
Changes
If this policy changes in a way that matters, we will tell account holders by email before it takes effect. The date at the top says when it last changed.