Privacy Policy

Who we are

SignalTower is operated by Fun Management SRL, a company registered in Romania (“we,” “us”). We provide an approval layer for AI-generated content at signaltower.ai and app.signaltower.ai. For anything in this policy, contact us at support@funmanagement.ro.

What we collect

• Account data. Your email address (and your name, if you sign in with Google), used to sign you in (one-time codes or Google sign-in; we never store passwords) and to send the notifications you enable.
• Workspace content. The content, media, brand context, feedback, and settings you or your connected agents put into SignalTower. This is your data; we process it only to provide the service.
• Files from drives you connect. If you connect Google Drive, Dropbox, OneDrive or Box, the files you choose to share with SignalTower (see “Files from your connected drives” below).
• Comments and messages to your social accounts. If you connect social accounts, we receive the comments, mentions and private messages people send those accounts, and keep the replies you approve. They appear in your Inbox and, when you use the agent, are sent to our AI providers to draft an answer. When you reply to someone else’s post from its link, we read that post and its replies, and look for answers to your reply for 14 days. These are the words of people outside your workspace: we use them only to show and answer them, never for analytics.
• Billing data. Payments are handled by Stripe. We never see or store card numbers; we keep your plan, invoices, and any company details you add for invoicing.
• Usage data. Standard server logs (IP address, timestamps, requests) kept for security and debugging.
• Product analytics. When you are signed in to the app, we record which features are used and where things go wrong (for example: a post was approved on LinkedIn, an image was requested, an error happened), with your user ID, email and workspace, so we can improve SignalTower. We record actions, never what you write: your posts, briefs, brand pages, files and messages are not sent. Recordings of screens, if we use them, hide all text, inputs and images. IP addresses are not kept. You can turn this off at any time in Settings, Profile, “Share usage analytics.” To learn what people need from the agent, each of its replies is labeled with a topic (for example “write a post” or “schedule”) and, when it couldn’t help, a short generic summary of what was asked, kept in our own database. These labels are made by our AI provider, like the agent’s replies themselves.
• Website analytics. On this website we count visits and which pages lead to a signup (PostHog, EU region). Until you choose, and if you reject, this runs without cookies: apart from your choice, nothing is stored on your device, and visits are counted on PostHog’s servers with a hash that changes every day. If you accept, PostHog sets a cookie on signaltower.ai for up to a year, so we can tell when a visit leads to a signup.

We remember your choice on this website in a cookie (“st_consent”) for 6 months. You can change it at any time with “Cookie settings” at the bottom of every page. The app uses cookies to keep you signed in and, if you share usage analytics, to recognize your browser for product analytics.

How we use it

To run the service: showing your review queue, dispatching webhooks you configure, generating drafts when you ask for them, sending the email notifications you enable, and billing your subscription. We do not sell your data, and we do not use your content to train AI models.

When you use in-app generation or AI review, the relevant content and brand context are sent to our AI providers to produce the result you requested. That is the extent of it.

Files from your connected drives

You can connect Google Drive, Dropbox, OneDrive or Box so SignalTower can use your own photos, videos and documents. We access only what you choose:

• Google Drive: only the files you pick in Google’s own file picker, and the files SignalTower creates for you. SignalTower cannot see anything else in your Drive.
• Dropbox, OneDrive and Box: only the folders you choose to share with SignalTower, and what they contain.

What we do with them: we keep a list of those files (name, type, size, dates), a small preview image, a short description of what an image shows (written by an AI model from the preview) and the text of documents, so you and your SignalTower agent can find and read them. When a file is used on a post or as a brand reference, a copy is stored in your workspace. When you ask, SignalTower saves posts, images and plans into its own SignalTower folder in your drive, always as new files. We never change, rename or delete your files.

The access your drive grants is stored encrypted and used only for the above. Disconnecting a drive, or leaving the workspace, revokes our access where the provider allows it and deletes the stored access and the list of files; copies already used on posts stay until you delete them.

We do not sell data from your drives, do not use it for advertising, and do not use it to train AI models. People at SignalTower do not read it, except with your permission for support, for security, or where the law requires. To produce what you ask for, the relevant file content may be sent to our AI providers (listed below) on the same terms.

SignalTower’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Workspaces run by an agency

Some agencies run SignalTower for their clients under their own name and domain. For those workspaces the agency decides how the data is used, and we process it on the agency’s behalf under our data processing agreement with it. The agency’s own privacy policy applies, and requests about that data go to the agency first; we help it answer them.

Who processes it for us

We use a small set of processors to run SignalTower:

• Hetzner (Germany): application hosting
• Supabase (EU region): database and authentication
• Stripe: payment processing
• Amazon Web Services (Amazon SES, EU region): transactional email
• OpenRouter: AI model access for in-app generation and review
• Zernio: connecting social accounts, publishing, and receiving comments and messages
• Browserless: loading public web pages you ask us to read
• Cloudflare (EU): DNS, network security, and file storage
• Inngest: background job scheduling
• PostHog (EU region): product analytics and error tracking

Retention and deletion

Your data stays as long as your account does. Delete a workspace and its content goes with it; ask us to delete your account and we remove your data within 30 days, except what we must keep for legal or accounting reasons.

Comments and messages are kept only while they are useful: comments you have handled are deleted after 180 days, a conversation with no new message for 180 days is deleted, a message its sender deletes is deleted here too, and disconnecting a social account deletes its comments and messages.

Your rights

Under the GDPR you can request access to, correction of, export of, or deletion of your personal data, and you can object to or restrict our processing of it. Email support@funmanagement.ro and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Changes

If this policy changes in a way that matters, we will note it here and update the date above. Continued use of SignalTower after a change means you accept the updated policy.