SignalPost Privacy Policy

1. What is SignalPost?

SignalPost is a local AI-powered social media posting tool built by Solent Signal. It runs on your computer and helps you create, preview, and publish social media posts to platforms including LinkedIn, Meta (Facebook/Instagram), X, and TikTok.

2. Data that stays on your device

SignalPost is designed with privacy first. The following data is stored locally on your device and never sent to Solent Signal servers:

• ·Social media OAuth tokens — encrypted with AES-256-GCM and stored in your home directory
• ·Platform credentials and API keys
• ·Your SignalPost configuration (brand voice, preferences)
• ·Post drafts and history

3. Data sent to third parties

When you use SignalPost, certain data is sent to third-party services to enable functionality:

• ·Anthropic (Claude API) — your post prompts and brand context are sent to generate content. Anthropic does not use API inputs for model training. See anthropic.com/privacy.
• ·Social media platforms — when you publish, your post content (text, images) is sent to the platforms you have connected (LinkedIn, Meta, X, TikTok) via their official APIs.
• ·Buffer (optional fallback) — if configured for X or TikTok, posts are routed through Buffer's API. See buffer.com/privacy.

4. Admin sync (optional)

If you are a Solent Signal client and choose to enable admin sync, SignalPost can send a summary of published posts (title, platform, timestamp) to your Solent Signal admin dashboard for analytics and content calendar purposes. This is opt-in and can be disabled at any time in your SignalPost configuration. No OAuth tokens or credentials are ever sent during admin sync.

5. OAuth and social account access

When you connect a social media account, SignalPost uses the platform's standard OAuth flow. You authorise SignalPost directly with the platform, and the resulting access token is stored encrypted on your device. We request only the minimum permissions needed to publish posts. You can revoke access at any time from the platform's settings or by disconnecting within SignalPost.

6. No tracking or analytics

SignalPost does not include any analytics, telemetry, or tracking code. We do not collect usage data, crash reports, or behavioural data from the application.

7. Data deletion

Since all data is stored locally, you can delete it at any time by removing your SignalPost configuration files. To disconnect social accounts, use the disconnect feature within SignalPost or revoke access from the platform directly.

8. Your rights

Under UK GDPR, you have the right to:

• ·Know what data we process (this policy covers it — we process very little)
• ·Request deletion of any data held by Solent Signal
• ·Withdraw consent for admin sync at any time
• ·Lodge a complaint with the ICO (ico.org.uk)

9. Contact

For any privacy questions about SignalPost, contact us at hello@solentsignal.com.