Privacy Policy
1. Who we are
Signal Admin Services ("we", "us") provides an automated moderation and community-routing bot for Signal group chats. We are an independent service and are not affiliated with Signal Messenger LLC or the Signal Technology Foundation.
2. Group messages: zero retention
- Messages posted in groups the bot moderates are evaluated in memory against the rules you configure and then discarded immediately.
- Message text, whether it follows the rules or not, is never written to disk, logs, databases, or any durable memory.
- The bot cannot read messages posted before it joined a group, and it cannot see private conversations it isn't part of.
- Attachments the Signal client downloads for a moderated group are deleted immediately after evaluation. The bot never opens files or follows links or QR codes; link rules are matched by the text of the domain only.
3. Strike tracking without identities
To enforce multi-strike rules (for example, three warnings before removal), the bot stores a one-way pseudonymous key, HMAC-SHA256(group_salt, sender_uuid), using a secret salt unique to each group. Alongside that key we keep only the strike count, the rule number involved, and the date of the last violation. We do not store display names, phone numbers, profile details, or raw Signal identifiers. Strike records expire automatically after 30 days.
4. Spam-flood detection
To detect copy-pasted spam waves, the bot holds a rolling 10-minute window of message timestamps and SHA-256 hashes of normalized text, in memory only. No plaintext is kept, and the window is never saved to disk.
5. Billing and usage counters
For billing, we record only aggregate monthly integer counters per group (messages checked, warnings issued, removals). We never keep per-message logs.
6. Information you give us as a client
When you set up an account we collect the details you choose to provide: your name or community name, email address, optional phone number, preferred contact method, selected plan, reminder preferences, and any group list, invite links, or rule notes you share. We use this information only to:
- get in touch with you so we can best serve you and confirm your setup before activation;
- confirm your exact group roster so the bot joins only the groups you approve;
- configure your rules and send the usage reminders you select (by Signal DM, email, or both); and
- handle billing questions and support.
Payments are processed by Square. We never see or store your full card number; Square's own privacy policy governs payment data. Square shares basic transaction details with us, such as your receipt email and payment status.
7. Sharing
We do not sell, rent, or share your information or your members' information with advertisers or data brokers. Your community directory never recommends another client's groups. We disclose information only if required by law, and because we don't store message content, there is no message content to disclose.
8. Retention and deletion
Client contact and configuration details are kept while your account is active and deleted within 30 days after you cancel, except for records we must keep for tax or accounting purposes. You can ask us to delete your information at any time.
9. Untrusted content safety
All group messages, group names, and client-submitted rules are treated strictly as data, never as instructions to the bot, to protect your community from manipulation attempts.
10. Changes and contact
If we change this policy, we'll update the date above and let active clients know about material changes. Questions? Reply to any email from us or contact us during your welcome touchpoint.