Privacy Policy

This Privacy Policy explains how Signal 9 ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our prospecting, outreach, and meeting-booking platform (the "Service"). We are committed to protecting your privacy and handling your data responsibly.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.

Account information: When you register, we collect your name, email address, and authentication credentials. Workspace and team member details are also stored to manage access and billing.

Prospect and contact data: You may upload or generate company and contact information (names, job titles, email addresses, phone numbers, LinkedIn URLs) through our research and enrichment features. This data is stored in your workspace and is associated with your account.

Outreach content: We store outreach drafts, email subject lines, and message content you create or that our AI generates on your behalf, along with send status and reply data.

Usage data: We collect information about how you interact with the Service, including feature usage, IP address, device type, and log data, to operate and improve the platform.

Payment information: When you subscribe to a paid plan, payment processing is handled by our payment provider, Stripe. We do not store full card numbers; we retain transaction metadata and billing details.

We use your information to: (a) provide, operate, and maintain the Service; (b) create and manage your account and workspace; (c) process outreach emails and track replies through integrations you connect; (d) generate AI-assisted prospect research, contact enrichment, and outreach drafts; (e) process payments and manage subscriptions; (f) provide customer support; (g) detect and prevent fraud or abuse; and (h) improve and develop new features.

We do not sell your personal information to third parties.

When you connect a Gmail account, we access your inbox solely to send outreach emails on your behalf and to detect replies to those emails. We do not read or store unrelated personal emails. We process message content only as needed to classify replies and update your pipeline.

You are responsible for ensuring you have a lawful basis to contact the prospects whose data you process through the Service, and for complying with applicable anti-spam and privacy laws.

The Service integrates with several third-party providers, each governed by their own privacy policies:

Google (Gmail and Calendar): Used to send outreach, detect replies, and manage bookings. We access Google data only with the scopes you authorize.

Stripe: Used for subscription billing and payment processing. Stripe handles card data under its own compliance program.

Salesforce and HubSpot: When you connect a CRM, we push contact and engagement data to your CRM instance on your instruction.

AI providers: We use large language model providers to generate prospect research and outreach drafts. Data sent to these providers may be processed by them under their own terms; avoid submitting information you do not want processed by AI services.

We use essential cookies and similar technologies to authenticate sessions, remember preferences, and keep the Service secure. We may use analytics tools to understand usage patterns. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

We retain your account and workspace data for as long as your account is active. When you cancel your subscription, we retain your data for a limited period to allow reactivation, after which it is permanently deleted unless legal obligations require longer retention.

Credit ledger and billing records are retained as needed for accounting and legal compliance.

For users in the European Economic Area or UK, we process personal data under the following legal bases: (a) performance of a contract (providing the Service you requested); (b) our legitimate interests in operating and improving the Service; (c) your consent (for optional integrations and analytics); and (d) compliance with legal obligations.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; restrict or object to processing; export your data in a portable format; and withdraw consent at any time.

To exercise these rights, contact us through the support channel in your account. We respond to verified requests within the timeframe required by applicable law.

We use industry-standard measures to protect your data, including encryption in transit, access controls, and regular security reviews. However, no system is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

Your data may be processed in countries other than your own, including by our third-party providers. Where this involves a transfer outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or rely on an applicable adequacy decision.

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify users of material changes via the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or your data, contact us through the support channel in your account. For legal requests, we will respond through the appropriate channels.