Privacy policy

Last updated 12 October 2026

Signals is operated by Devonauts (“we”). This page explains what data Signals handles, why, and your choices. Questions: amaya@devonauts.in.

Your account

When you sign in with Google we receive your name, email address and profile picture. We use them to identify you, show who did what in your workspace, and contact you about your account.

Business data you work with

Signals collects public business information (news, regulator notices, job posts, company websites) and research results about companies and their professional contacts that match the ideal-customer profile you describe. Contact details come from public sources and from data providers you or we connect (for example Apollo, Prospeo, Hunter, Findymail, Lusha, MillionVerifier, ZeroBounce). Data for each workspace is kept separate and visible only to that workspace's members.

Google user data (Gmail, Calendar, Contacts)

If you connect a Google account as a sending mailbox, Signals requests permission to:

• Send email (gmail.send): to send the outreach emails, follow-ups and replies you approve.
• Read email (gmail.readonly): to detect replies, bounces and out-of-office messages in threads Signals started, and to read message headers (who you email and when) to find warm introduction paths. Message bodies are only stored for replies to Signals emails.
• Read calendar and contacts (calendar.readonly, contacts.readonly, contacts.other.readonly): to learn who you have met or corresponded with, so leads where you already have a relationship are marked as warm.

Signals' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalised AI models. Google data is used only to provide the features above to your workspace. Disconnecting the mailbox in Settings revokes our access; you can also revoke it at myaccount.google.com/permissions.

LinkedIn data

Signals never logs into LinkedIn. If you upload your own LinkedIn data export, we store your connections' names, companies, positions and profile URLs to find warm paths for your workspace.

AI processing

Research, scoring, drafting and reply classification use Google's Gemini models on Google Cloud (Vertex AI), which do not use customer data to train their models.

Where data lives and how long

Data is stored on Google Cloud in India (asia-south1), encrypted at rest; OAuth tokens and provider keys are additionally encrypted by Signals. Workspace owners can export leads as CSV and delete projects at any time; deleting a project removes its leads, contacts, emails and history. To delete your whole workspace or account, email us and we will do so within 30 days.

Opt-outs

People who reply asking not to be contacted, or whose address bounces, are added to the workspace's suppression list and are not emailed again by that workspace.

Changes

We will post changes here and notify workspace owners of material changes.