Privacy Policy

1. About SetSignal

SetSignal (“we,” “us,” or “our”) is a campaign management and appointment-setting platform. The platform helps licensed financial services and employee-benefits professionals connect with prospects, including public employees and business owners, and schedule consultations with them.

Our platform is accessible at app.setsignal.net. Questions about this Privacy Policy may be sent to support@setsignal.net.

2. Information We Collect

Agent account information:

• Name, email address, mobile phone number, and state of licensure provided during registration
• Whether the agent has opted in to SMS notifications, and when
• Authentication credentials managed securely by Clerk (clerk.com)

Google Calendar data (when an agent connects their Google Calendar):

• OAuth access token and refresh token — stored encrypted in our database, used only to add appointment events to the agent’s calendar
• We do NOT read, index, store, or analyze any existing calendar events, contacts, or other data from your Google account
• We only create new calendar events (retirement consultation appointments) on behalf of the agent

Microsoft Outlook Calendar data (when an agent connects Outlook):

• Same as Google Calendar above — OAuth tokens stored only to create appointment events
• No existing calendar data is read or stored

Contact (prospect) information:

• Name, email address, employer organization, and state — provided by campaign data
• Mobile phone number and SMS reminder preference — provided by the contact when booking an appointment
• Reply intent (interested / not interested / unsubscribe) — classified by our AI service

3. How We Use Your Information

• To authenticate agents and manage access to the SetSignal platform
• To add retirement consultation appointment events to an agent’s connected calendar when a booking is confirmed
• To send outreach emails on behalf of agents to contacts who have not opted out
• To classify inbound email replies and route them appropriately
• To generate internal analytics and reporting for platform administrators

We do not sell, rent, or share personal information with third parties for their own marketing purposes.

4. Text Messages (SMS)

SetSignal sends appointment text messages only to people who have opted in: contacts who choose “Yes” to text reminders when booking a consultation, and agents who opt in to SMS notifications during registration. Messages are about booked appointments only — confirmations, reschedule and cancellation notices, and reminders. Message frequency varies with your appointments. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. Full terms: SMS Terms & Conditions.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile numbers are used only to deliver the messages you opted in to, and are disclosed only to the SMS delivery provider that transmits them on our behalf.

5. Google API Services — Limited Use Disclosure

SetSignal’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

SetSignal requests two Google Calendar permissions, and uses each only for the connected agent’s own appointment scheduling:

• See and edit events on your calendars (calendar.events) — used to create an appointment event when a consultation is booked through SetSignal, update it if the appointment is rescheduled, and delete it if the appointment is cancelled.
• See your calendars and availability (calendar.readonly) — used to read the list of calendars on the account, query free/busy time blocks, and read the account time zone, so that SetSignal never offers a prospect a time the agent is already busy.

What this means in practice: we read when an agent is busy, not what they are busy with. SetSignal does not read the titles, descriptions, guests, locations or contents of an agent’s existing calendar events, and the only events it writes are SetSignal appointments.

• We do not use Google user data for advertising or to build user profiles
• We do not transfer Google user data to third parties
• We do not use Google user data to train generalized AI or ML models
• Google user data is never sent to any AI service. SetSignal uses AI to classify inbound email replies, draft outreach templates, summarize our own campaign metrics, and review agent-submitted cancellation evidence. None of those features receive Google Calendar data of any kind — no calendar events, free/busy times, calendar lists, account settings, or OAuth tokens are transmitted to an AI provider, in raw, aggregated, or derived form. Calendar access is used solely to read availability and write the agent’s own appointment events, and it is handled entirely within our own systems
• We do not allow humans to read Google user data except with the user’s express permission, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized
• Agents can revoke access at any time from the SetSignal calendar settings page or from their Google Account permissions page; revoking deletes the stored tokens

6. Zoom Integration

Agents may connect a Zoom account so that appointments booked with them take place on Zoom. When an agent connects Zoom, we receive and store:

• the agent’s Zoom user ID, account ID and email address, to identify the connection;
• OAuth access and refresh tokens, so we can act on the agent’s behalf;
• the meeting ID and join link of each Zoom meeting we create for an appointment;
• for those meetings only, the times the meeting started and ended and the times participants joined and left, with the participant’s display name and, where Zoom provides it, email address.

We use this only to create, move and delete the meeting for each appointment, to put the join link in the appointment’s emails and calendar invite, and to show the agent, their firm’s manager and SetSignal staff whether an appointment was attended. We never access recordings, audio, video, chat or transcripts, or any meeting we did not create. Zoom data is not sold, not used for advertising, and not shared with anyone outside those purposes.

The data is stored in our encrypted database, read only by our servers, and the tokens are never sent to a browser. When an agent disconnects Zoom in SetSignal, or removes our app from their Zoom account, we delete the stored tokens immediately and stop creating meetings. Remaining Zoom records are deleted on request to support@setsignal.net or when the agent’s account is deleted. See our Zoom integration guide.

7. Data Retention

• Agent account data is retained while the account is active
• Google and Microsoft OAuth tokens are stored only while the calendar integration is active; they are deleted when an agent disconnects their calendar or when their account is deleted
• Zoom OAuth tokens are stored only while the Zoom connection is active; they are deleted when an agent disconnects Zoom, removes our app in Zoom, or deletes their account
• Contact (prospect) email records are retained per campaign requirements and applicable email marketing regulations (CAN-SPAM)
• Unsubscribe and SMS opt-out records are retained indefinitely to honor opt-out requests

8. Data Security

We use industry-standard security practices including encrypted database storage (Supabase / PostgreSQL), HTTPS-only data transmission, and role-based access controls. OAuth tokens are stored at rest in encrypted form and are never exposed in logs or API responses.

9. Your Rights

• Disconnect calendar: Agents can disconnect their Google or Microsoft calendar at any time from the Calendars page. This revokes our access and deletes stored tokens.
• Disconnect Zoom: Agents can disconnect Zoom from the My Calendar page, or remove the SetSignal Meetings app from their Zoom account. Either deletes the stored Zoom tokens.
• Delete account: Agents may request account deletion by contacting us at support@setsignal.net.
• Opt out of email: Contacts may unsubscribe from outreach emails using the unsubscribe link included in every email.
• Opt out of text messages: Reply STOP to any SetSignal text. You will receive one confirmation and no further messages.

10. Service Providers

We use a small number of vetted service providers to operate the platform, in the following categories:

• Authentication and account management
• Database and file storage hosting
• Email and SMS delivery
• Web hosting and background job processing
• AI services used to classify inbound replies and draft message templates

These providers process data only to deliver their service to us, under contract, and are not permitted to use it for their own purposes. We do not sell or rent personal information. Google user data is never shared with any of them for advertising, profiling, or AI/ML model training. If you would like the identity of a specific provider, contact support@setsignal.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or to exercise your rights, contact: