Data Deletion Requests

1. Who This Page Is For

This page explains how to request deletion of a Signals user account and the data associated with it. It applies to the Signals web dashboard and the Signals mobile app for iOS and Android, both operated by Infinite Solutions Group LLC ("Company", "we", "us").

2. How Signals Accounts Work

Signals is a business communication platform. Accounts are not self-registered: an administrator at your organization creates each user account and assigns its role. Your organization is the owner and controller of the data in its Signals workspace, including customer and patient communication records. We process that data on your organization's behalf as a service provider.

This matters for deletion requests, because the route depends on whose data you are asking about.

3. Requesting Deletion of Your User Account

If you are a Signals user (for example, a staff member at a practice or business that uses Signals), you can request deletion of your user account in either of these ways:

• Ask your Signals administrator. An administrator or manager at your organization can remove your account from the User Management screen in the Signals dashboard. This is the fastest route and takes effect immediately. For safety, nobody can remove their own account this way, so the request has to go to a colleague.
• Email us at support@warpflow.ai with the subject line "Data Deletion Request". Include the email address associated with your Signals account and the name of your organization. We will verify the request with your organization's administrator before acting on it, and we will respond within 30 days.

When an account is removed, it immediately loses all access to your organization's Signals workspace. If that account does not belong to any other organization using Signals, the sign-in credentials are deleted as well.

4. Requesting Deletion of Customer or Patient Data

If you are a customer or patient of a business that uses Signals, and you want your personal information deleted, contact that business directly. They control their Signals workspace and their own records, and they are the appropriate party to act on your request. If you contact us instead, we will forward your request to them and let you know we have done so.

To stop receiving text messages from a business using Signals, reply STOP to any message from them. This takes effect immediately and does not require contacting anyone.

5. What We Retain, and Why

Some records are retained after an account is deleted. We do this only where we are required or permitted to, and we do not use retained data for any purpose beyond the reasons listed here:

• Access logs for protected health information. Where a customer organization is a HIPAA covered entity, the records documenting who accessed protected health information are retained for six years, as required by 45 CFR § 164.316(b)(2)(i).
• Communication records.Messages, calls, and recordings belong to the customer organization. That organization decides how long they are kept and may have its own legal obligation to retain them, so we cannot delete them at an individual user's request — that decision rests with the organization.
• Security and audit logs. Authentication events and access logs are retained to detect and investigate unauthorized access.
• Billing and transaction records. Retained as required by tax and accounting obligations.

Retained records are kept encrypted and access-controlled for as long as they are held.

6. Deleting an Entire Organization Workspace

If your organization is ending its use of Signals and wants its whole workspace deleted, an administrator or authorized signatory should email support@warpflow.ai. Because this affects records your organization may have its own legal obligation to retain, we will confirm the request and agree on a timeline before deleting anything.

7. Contact

For any question about this page or a request in progress, contact us at support@warpflow.ai.