Privacy Policy

1. About SetSignal

SetSignal is a campaign management and appointment-setting platform operated by Appreciation Financial / Bombshell Technologies (“we,” “us,” or “our”). The platform helps licensed financial services agents connect with public employees to provide retirement benefit education and schedule consultations.

Our platform is accessible at setsignal.net. Questions about this Privacy Policy may be sent to tk@appreciationfinancial.com.

2. Information We Collect

Agent account information:

• Name, email address, and state of licensure provided during registration
• Authentication credentials managed securely by Clerk (clerk.com)

Google Calendar data (when an agent connects their Google Calendar):

• OAuth access token and refresh token — stored encrypted in our database, used only to add appointment events to the agent’s calendar
• We do NOT read, index, store, or analyze any existing calendar events, contacts, or other data from your Google account
• We only create new calendar events (retirement consultation appointments) on behalf of the agent

Microsoft Outlook Calendar data (when an agent connects Outlook):

• Same as Google Calendar above — OAuth tokens stored only to create appointment events
• No existing calendar data is read or stored

Contact (prospect) information:

• Name, email address, employer organization, and state — provided by campaign data
• Reply intent (interested / not interested / unsubscribe) — classified by our AI service

3. How We Use Your Information

• To authenticate agents and manage access to the SetSignal platform
• To add retirement consultation appointment events to an agent’s connected calendar when a booking is confirmed
• To send outreach emails on behalf of agents to contacts who have not opted out
• To classify inbound email replies and route them appropriately
• To generate internal analytics and reporting for platform administrators

We do not sell, rent, or share personal information with third parties for their own marketing purposes.

4. Google API Services — Limited Use Disclosure

SetSignal’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google Calendar access solely to create appointment events on behalf of the authenticated agent
• We do not use Google user data for advertising or to build user profiles
• We do not transfer Google user data to third parties
• We do not allow humans to read Google user data except with the user’s express permission or as required by law

5. Data Retention

• Agent account data is retained while the account is active
• Google and Microsoft OAuth tokens are stored only while the calendar integration is active; they are deleted when an agent disconnects their calendar or when their account is deleted
• Contact (prospect) email records are retained per campaign requirements and applicable email marketing regulations (CAN-SPAM)
• Unsubscribe records are retained indefinitely to honor opt-out requests

6. Data Security

We use industry-standard security practices including encrypted database storage (Supabase / PostgreSQL), HTTPS-only data transmission, and role-based access controls. OAuth tokens are stored at rest in encrypted form and are never exposed in logs or API responses.

7. Your Rights

• Disconnect calendar: Agents can disconnect their Google or Microsoft calendar at any time from the Calendars page. This revokes our access and deletes stored tokens.
• Delete account: Agents may request account deletion by contacting us at tk@appreciationfinancial.com.
• Opt out of email: Contacts may unsubscribe from outreach emails using the unsubscribe link included in every email.

8. Third-Party Services

We use the following third-party services to operate the platform:

• Clerk (clerk.com) — authentication and user management
• Supabase (supabase.com) — database and file storage
• SendGrid (sendgrid.com) — email delivery
• Twilio (twilio.com) — SMS messaging
• Anthropic (anthropic.com) — AI-powered reply classification and template generation
• Vercel (vercel.com) — web hosting
• Railway (railway.app) — background job processing

Each service maintains its own privacy policy governing its handling of data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, requests, or to exercise your rights, contact: