Privacy Policy
TrueSignals ("we," "us," or "our") operates at truesignals.io. This policy explains what data we collect, how we use it, and what controls you have over it.
What we access
TrueSignals connects to your Google Workspace and HubSpot account to deliver its service. Specifically:
- Google Workspace (Gmail + Calendar): Via a service account with domain-wide delegation, we read email threads between your sales reps and prospect domains, and calendar events with prospect domain attendees. Access is read-only. We use the
gmail.readonlyandcalendar.readonlyOAuth scopes. - HubSpot: Via a Private App API key you provide, we read open deal records — stage, last activity date, logged notes, next steps, and rep ownership. Access is read-only.
What we store
We do not store raw email content. We store:
- Signal metadata: date, type (email or calendar), subject or event summary, whether a corresponding CRM note exists within 48 hours
- AI-generated summaries of email threads and calendar events (generated by Claude, Anthropic's AI)
- HubSpot deal records at the time of each nightly scan
- Weekly digest records and handoff pack outputs
All data is scoped to your organization and is never shared with or accessible to other TrueSignals customers.
How we use it
We use the data exclusively to deliver the TrueSignals service: nightly deal scanning, weekly pipeline reality digests, and on-demand rep handoff packs. We do not sell data, train AI models on your data, or use it for any purpose outside the service.
Rep disclosure
TrueSignals reads your sales reps' work email and calendar. Before connecting, you should disclose this monitoring to your reps in your company's employment agreement, acceptable use policy, or a written addendum. We recommend language such as: "The company may use software tools to read and analyze work email and calendar activity for pipeline management and deal continuity purposes."
Data security
- All data is stored in an isolated database scoped to your organization
- Connections to Google and HubSpot APIs are encrypted in transit (TLS)
- API credentials are stored encrypted at rest
- No TrueSignals employee accesses your data except for support purposes with your explicit consent
Data retention and deletion
If you cancel your TrueSignals subscription, your account is deactivated and all stored data is deleted within 30 days. You can request immediate deletion at any time by emailing hello@truesignals.io. Revoking the Google service account or HubSpot API key immediately stops all data collection.
Third-party services
TrueSignals uses the following third-party services to operate:
- Anthropic (Claude API): Email and calendar content is sent to Anthropic's API to generate summaries and signal analysis. Anthropic does not use API inputs to train its models.
- Supabase or Neon: Managed Postgres database for storing signal metadata and digest records.
- Vercel: Application hosting and API infrastructure.
Your rights
You can request a copy of all data we hold about your organization, request correction of inaccurate data, or request deletion of all data. Contact us at hello@truesignals.io for any of these requests. We will respond within 30 days.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email to the account holder. Continued use of TrueSignals after notice of changes constitutes acceptance of the updated policy.
Contact
Questions about privacy or data handling: hello@truesignals.io