Privacy Policy

Introduction

This Privacy Policy explains how SignoFast ("SignoFast," "we," "us," or "our") processes personal information when you visit our marketing website, create an account, or use our cloud software for email outreach, including connecting Google and Microsoft mailboxes (such as Google Workspace or Microsoft 365), creating campaigns and sequences, syncing replies for our unibox, viewing analytics, and using features such as mailbox warmup (collectively, the "Service").

SignoFast is based in the United States. Personal information may be processed and stored in the United States and in other countries where we or our subprocessors operate, as described in the "International data transfers" section below.

If you are in the European Economic Area or United Kingdom, please also read the "Notice to European users" section below.

Where we process personal information solely on behalf of a business customer (for example, contact details of your leads stored in your workspace), our customer is typically the controller and our data processing terms with that customer apply. This policy still describes our role, security practices, and subprocessors at a high level.

Connected email accounts and provider actions

When you connect a mailbox, we access and process email-related data only as needed to provide the features you enable (for example, sending messages you initiate, reading threads for the unibox, or warmup), in line with the permissions you grant through Google (or future providers).

Mailbox providers (such as Google) may throttle, suspend, block, or revoke access to your account or API tokens based on their own policies, automated systems, or legal requirements. Those decisions are made by the provider, not by SignoFast. We are not responsible for provider enforcement actions, loss of access to your mailbox, or business losses that result from them. You are responsible for complying with each provider's terms and for resolving disputes or restrictions directly with the provider.

This policy does not replace Google's Privacy Policy or your agreement with Google; it describes SignoFast's processing in connection with the Service.

Personal information we collect

Depending on how you use the Service, we may collect the following categories of information:

• Account and profile: name, email address, company name, authentication identifiers, and preferences.
• Billing: plan, subscription status, and payment-related information processed by our payment processor (for example, Stripe). We do not store full payment card numbers on our own servers.
• Connected mailbox data: OAuth tokens and technical identifiers needed to maintain the connection; message metadata and content required to send campaigns, run sequences, display the unibox, provide analytics, and operate warmup and deliverability features, as permitted by you and the provider.
• Campaign and CRM-style data: leads, lists, tags, suppression preferences, templates, and engagement events (such as sends, opens, clicks, replies) generated through the Service.
• Support and communications: messages you send us, feedback, and diagnostic information you choose to provide.
• Technical and usage data: IP address, device type, browser, approximate location derived from IP, log data, cookies, and similar technologies on our website and app as described below.

We do not knowingly collect personal health information through the Service. We do not sell your personal information as the term "sell" is commonly understood in all jurisdictions.

Cookies and similar technologies

We use cookies and similar technologies to operate the Service, remember preferences, measure site traffic, and improve marketing effectiveness. You can control cookies through your browser settings. Where required, we will obtain consent before non-essential cookies are used.

How we use personal information

• Provide, operate, secure, and improve the Service.
• Authenticate users, connect mailboxes, and process sends and replies you request.
• Compute analytics at campaign and workspace level.
• Bill accounts, detect fraud, and enforce our Terms of Service.
• Communicate about the Service, including support and important notices.
• Send marketing where permitted; you may opt out of marketing emails at any time.
• Comply with law and respond to lawful requests.

Where we use Google user data obtained through restricted scopes, we comply with the Google API Services User Data Policy, including the Limited Use requirements.

How we share personal information

We share personal information with service providers who help us run the Service (for example, hosting, email delivery infrastructure, analytics, customer support tooling, and payment processing), with professional advisors when required, with authorities when legally compelled, and in connection with a merger, acquisition, or asset sale subject to appropriate safeguards.

Payment processing is handled by providers such as Stripe. Their privacy notices govern their handling of payment data.

Your choices and rights

• Access or update certain account information in the product.
• Disconnect a mailbox to stop further syncing from that account.
• Opt out of marketing emails using the unsubscribe link or by contacting us at the email below.
• Depending on your location, you may have rights to access, delete, correct, export, restrict, or object to certain processing. Contact us to exercise those rights.

Other sites and services

The Service may link to third-party websites or services. We do not control them and are not responsible for their privacy practices. Review their policies before sharing information.

Security

We use technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we encourage strong passwords and prompt revocation of connections you no longer trust.

International data transfers

We may process and store information in the United States and in other countries where we or our subprocessors operate. If we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms required by law.

Children

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Where changes are material, we will provide additional notice as appropriate.

How to contact us

United States state privacy rights

Depending on where you live, you may have additional privacy rights under U.S. state laws (for example, rights to access, delete, or opt out of certain processing in California, Colorado, Virginia, and other states). To exercise rights that apply to you, contact us at signofast@gmail.com. We may need to verify your identity before responding and will not discriminate against you for exercising rights granted by law.

Notice to European users

This section applies to individuals in the European Economic Area, United Kingdom, and Switzerland. References to "personal information" include "personal data" as defined in the GDPR.

SignoFast acts as a controller for processing described in this policy relating to our website, accounts, billing, and product operation. For personal data we process purely as a processor on behalf of a customer, the customer is the controller and their instructions and agreement govern.

Depending on the processing activity, we may rely on legal bases such as performance of a contract, legitimate interests (for example, securing and improving the Service), compliance with legal obligations, and consent where required.

You may have the right to access, rectify, erase, restrict, object to processing, data portability, and to withdraw consent where processing is based on consent. To exercise these rights, contact signofast@gmail.com. You may also lodge a complaint with your local supervisory authority.

Where we appoint an EU/UK representative or use standard contractual clauses, details may be updated from time to time; contact us for the current list of safeguards applicable to your data.

For more information about EU regulators, see the EDPB member directory. For the UK, see the ICO.