Privacy Policy

Last updated: 10/16/2026

Signilio LLC ("Signilio," "we," "us," or "our") operates a multi-tenant SMS messaging platform (the "Services"). This Privacy Policy explains what information we process, how we use it, and the choices you have. By creating an account or using the Services, you agree to this Privacy Policy.

Our role: processor and controller

Signilio plays two distinct roles depending on the data:

  • As a controller, we determine how we handle your account information — the data you give us to open and operate your Signilio account (your name, email, business details, and billing information).
  • As a processor, we handle the contact and message data you upload and send through the platform on your behalf and under your instructions. You — the account holder — are the controller of that data. You are responsible for having a lawful basis and proper consent to message the contacts you load into the Services, by any method, including the API or any other way possible, and for your contacts' privacy rights. We process that data only to provide the Services to you.

Information we process

Account information you provide:

  • Name, email address, and password (stored hashed)
  • Business name and related business details
  • Billing information (card details are handled by our third-party payment processor; we do not store raw card numbers)

Data generated through your use of the platform:

  • Messages you send and receive through the Services (content, timestamps, sender and recipient numbers, delivery status)
  • Contact lists you upload or create
  • Campaign configurations and settings
  • Opt-out records for recipients
  • Delivery logs and carrier response data
  • IP addresses, browser and device type, and access logs
  • If you use the voice assistant: the text of what you say to it, and a record of each session (such as when it started, how long it lasted, and what it did)

Communications with us:

  • Support requests and correspondence

How we use information

  • To provide, operate, and maintain the Services, including routing and delivering your messages
  • To track delivery status and surface analytics in your dashboard
  • To process billing and send account and billing notices
  • To respond to support requests
  • To monitor for abuse, fraud, and policy or legal violations
  • To comply with our legal obligations and enforce our agreements

We do not sell your personal information. We do not use your message content for advertising, and we do not share it with third parties for their own marketing.

When we share information

We share information only as needed to run the Services or as required by law:

  • Service providers. We use third-party service providers — including infrastructure/hosting, messaging and carrier delivery, payment processing, email delivery, push notifications, analytics and error monitoring, security and fraud prevention, compliance screening, and AI service providers — to operate the Services. These providers process data only as necessary to perform services for us and are bound by confidentiality obligations.
  • Regulatory and carrier registration. To send business SMS in the US, brand and campaign information must be registered with The Campaign Registry (TCR) through carrier channels, as required by CTIA standards. We facilitate submission of the registration information you provide.
  • Legal and safety. We may disclose information where required by law, court order, subpoena, or government request, or where we believe disclosure is necessary to prevent fraud, abuse, or harm, or to protect our rights.
  • Business transfers. If Signilio is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality protections.
  • Carrier or regulatory review. If a number, message, or campaign is flagged by a carrier, regulator, or legal authority, we may review related account activity and disclose information necessary to address the matter.

Google user data (connecting Gmail)

Connecting a Google account is optional. If you connect one in Settings → Email, Signilio asks Google for two things only: permission to send email on your behalf (Gmail's send-only permission) and your Google account's email address, so we know which address your emails come from. Signilio cannot read, search, label, or delete any email in your mailbox.

  • What we store: the connected email address, an authorization token that lets us send the emails you ask us to send, and whether the connection is working. The token is encrypted, and the key that decrypts it is kept separately from our database.
  • How we use it: only to send the emails you (or a teammate using their own connection) send from the Signilio inbox, and to show those emails in the conversation. We keep a record of each email sent through Signilio (recipient, subject, message, and time), the same way we keep a record of text messages.
  • What we never do: we do not sell Google user data, share it with third parties, or use it for advertising. We do not use it to develop, improve, or train artificial intelligence or machine-learning models. People at Signilio do not read it, except with your permission, where needed for security or to investigate abuse, or where the law requires it.
  • Disconnecting: you can disconnect at any time in Settings → Email, which deletes the stored token and asks Google to cancel our access, or from the security settings of your Google Account.

Signilio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft user data (connecting Outlook or Microsoft 365)

Connecting a Microsoft account is optional. If you connect one in Settings → Email, Signilio asks Microsoft for permission to send email on your behalf (Microsoft's `Mail.Send` permission), to read your basic profile (`User.Read`) so we know which address your emails come from, and to keep that access so you do not have to sign in again for every email. Signilio cannot read, search, move, or delete any email in your mailbox.

  • What we store: the connected email address, an authorization token that lets us send the emails you ask us to send, and whether the connection is working. The token is encrypted, and the key that decrypts it is kept separately from our database.
  • How we use it: only to send the emails you (or a teammate using their own connection) send from the Signilio inbox, and to show those emails in the conversation. We keep a record of each email sent through Signilio (recipient, subject, message, and time), the same way we keep a record of text messages.
  • What we never do: we do not sell Microsoft user data, share it with third parties, or use it for advertising. We do not use it to develop, improve, or train artificial intelligence or machine-learning models. People at Signilio do not read it, except with your permission, where needed for security or to investigate abuse, or where the law requires it.
  • Disconnecting: you can disconnect at any time in Settings → Email, which deletes the stored token so Signilio can no longer send email from your account. Microsoft does not let an app withdraw its own access from its side, so to also remove Signilio from your Microsoft account, use the app permissions page of your Microsoft account or ask your Microsoft 365 administrator.

Your Microsoft account itself is provided by Microsoft under Microsoft's own terms and privacy statement, which govern how Microsoft handles your data. Signilio is not responsible for Microsoft's services.

Facebook and Instagram lead ads (Meta)

Connecting Facebook is optional. If a business connects it in Signilio, we use Meta's Facebook Login for Business, and only for the Pages and ad accounts that business chooses to share.

  • What we receive: the answers people submit on that business's Facebook and Instagram lead forms (such as name, phone number, email address and any consent they gave); the business's Pages, lead forms and form questions; the ad, ad set and campaign that produced each lead; and, if the business turns on stage reporting, the ad dataset it chooses. To keep the connection working we hold an access token for the business and for each Page it shares, stored encrypted.
  • How we use it: to deliver those leads into the business's Signilio account, show which form and ad each lead came from, and keep the connection working. If the business chooses, we also report back to Meta which leads reached certain stages, using Meta's lead ID only and never a phone number or email address.
  • What we don't do: we don't sell data received from Meta or share it with others for their own use.
  • Disconnecting and deletion: the account owner can disconnect at any time in Settings → Integrations, which deletes the stored tokens, or remove Signilio in Facebook Business settings. Anyone can ask us to delete their data. See our Data Deletion page.

Artificial intelligence (AI)

  • AI features. Some features of the Services use artificial intelligence, including services from third-party AI providers — for example, to answer questions about how to use the Services, or to let you use parts of the Services by voice.
  • What is sent: help chat. When you use the help chat, what you enter (such as your question, or a picture you choose to attach) and the limited account details needed to respond (such as your role and which features your account has) are sent to the AI provider to produce a response. We do not add your contact lists or message history; only what you type or attach is sent.
  • What is sent: voice assistant. If your account has the voice assistant, it listens only after you turn it on, until you turn it off or the session ends. While it is on, your voice is sent to our AI provider, which turns it into text and speaks the answers back to you. To do what you ask, the assistant may look up information in the Services, such as contact names, phone numbers and companies, messages in your conversations, your sending results, and the text shown on your screen, and send it to the AI provider. It is designed to use only information your own login can see. When you or your users ask it about your contacts or messages, you instruct us to process that information this way, as part of our role as your processor.
  • Your voice. We do not use your voice to identify you, and we do not create voiceprints or any other biometric identifier from it. We may keep the text of what you say and a record of each session for as long as we need them to operate, secure and improve the Services, enforce our terms and policies, resolve disputes, and comply with law.
  • No training on your information. Our AI providers process this information only to provide their service to us, under confidentiality and data-protection terms, and may not use it to train their AI models. They may keep it for a limited period to detect and prevent abuse, as their terms allow.
  • Retention. We may keep records of help chat conversations, and of voice assistant sessions as described above, for as long as we need them to operate, secure and improve the Services, enforce our terms and policies, resolve disputes, and comply with law. Pictures you attach are used to answer that question.
  • Review and requests our rules do not allow. We may review conversations with AI features. If someone asks an AI feature for something our rules do not allow (for example, messaging people who did not agree to it, or a legal threat), our team may receive the words of that request, with who asked and from which company, so we can keep the Services safe and lawful and enforce our terms.
  • Please don't include sensitive information. Do not enter, say or attach passwords, payment details or other sensitive information into AI features, and do not put your contacts' personal information into the help chat. The voice assistant uses your contacts' information only when you ask it to, as described above.
  • AI answers are not advice. AI-generated answers can be wrong or incomplete. They are general information about using the Services, not legal, compliance or other professional advice, and you are responsible for how you use them.
  • AI tools you connect. If you connect your own AI assistant or another app to your account (for example through our API or an AI connection), it can access and act on the information you allow. That provider handles the information under its own terms and privacy policy, and Signilio does not control it. You choose and manage these connections and can remove them at any time, and messages sent through them are sent by you.
  • Our own operations. We may also use AI tools to help our team build, operate, secure and support the Services. When those tools handle personal information, we limit it to what the task needs and use them under confidentiality and security commitments.

Data retention

We keep information for as long as your account is active and as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements. In general:

  • Account data: retained while your account is active and for a reasonable period after closure
  • Message and delivery logs: retained for a limited period in the ordinary course; earlier deletion available on request, except records we must keep by law or keep to establish or defend legal claims
  • Billing records: retained as required by applicable financial and tax law
  • Opt-out records: retained as needed to honor opt-outs and prevent future contact

You may request deletion of your account and associated personal data at any time by contacting us. Records we must keep by law, or keep to establish or defend legal claims, may be retained after a deletion request or account closure.

Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption of data in transit, encryption of sensitive credentials at rest, hashed passwords, access controls, and audit logging. No system is completely secure. If we become aware of a breach affecting your data, we will take steps to contain and remediate it and will notify you as required by law.

Your rights

Depending on where you live (including under California and other US state privacy laws), you may have rights to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Obtain a copy of your information in a portable format
  • Opt out of non-essential communications

To exercise any of these rights, contact us at admin@signilio.com. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

Note: where Signilio acts as a processor of contact data you uploaded, requests from your contacts about their data should be directed to you as the controller; we will assist you as required.

Cookies

See our Cookie Policy for details. In short, we use essential and functional cookies to operate the Services and remember your preferences. Inside the app we also use analytics and diagnostics tools to understand how the Services are used, find and fix problems, and improve them; these tools may record how you use the app (such as pages viewed, clicks and session recordings), with sensitive content such as message text and contact details masked. We do not use third-party advertising or cross-site tracking cookies, and we do not sell this information.

Children

The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from minors.

Changes

We may update this Privacy Policy by posting the updated policy on our website with a new "Last updated" date, and we will give any notice the law requires. We may also tell you about an update in the Services or by email, but we are not otherwise required to. An update takes effect when it is posted, unless the posted policy states a later date. Continued use of the Services after an update takes effect constitutes acceptance.

Contact

Questions about this Privacy Policy: admin@signilio.com