Security, in specifics.
This page is not a promise with a badge on it. Every line below is quoted from the product pages themselves: what is isolated, who can reach it, how export and deletion work and what our AI does and does not decide.
Organization isolation at the database level
Every record in every product is scoped to your organization and checked on each read and write. No path lets one organization query another's data.
Access starts at a seat
Access needs a signed-in seat on a plan that includes the product. Some actions also need an admin or owner role.
Export carries the same boundary
You can export only what you can already see, under the same access rules.
Support access, disclosed
Signal*form support can reach your organization's data, under the same model in every product. We name it rather than imply it cannot happen.
Encrypted in transit and at rest
Your data is encrypted in transit and at rest. AI requests reach the model providers' commercial APIs only when you trigger them, under those providers' API terms.
The honest limit
An owner can delete the whole organization from Settings › Data: the subscription is canceled first, then every record and file goes. Support access exists as described above; we would rather you know it than discover it.
Limits, in the products' own words
Real limits, quoted word for word from each product's page. A limit you can check buys more trust than a vague claim.
Deletion
- Spark*: Deleting a client or a brief removes it, with its comments, versions and generated assets, at once. An owner can delete the whole organization from Settings › Data.
- Metric*: Deleting a client removes it, with every campaign, connection, alert, forecast and client link attached to it, at once. An owner can delete the whole organization from Settings › Data.
- Flow*: Deleting a client, project, budget or time entry moves it to a recovery view where an admin sees who removed it and when, and can restore it. An owner can delete the whole organization from Settings › Data.
- Stack*: Deleting a tool removes it and its comments at once; archiving keeps it out of the totals and can be undone. An owner can delete the whole organization from Settings › Data.
- Skill*: Deleting a document, file, service, announcement, group, goal or private note removes it at once. A person leaves the roster when they leave the organization; an owner can delete the whole organization from Settings › Data.
- Radar*: Archiving a workspace removes it from your list at once and can be undone; an uploaded document can be deleted on its own at once. There is no self-serve permanent deletion of a workspace today.
- Brain*: Archiving a client hides it and suspends its portal without deleting anything. Deleting a client is a separate, explicit action that removes every record under it, uploaded files included, at once. An owner can delete the whole organization from Settings › Data.
- Pulse*: Disconnecting deletes the stored Google credential at once. The raw nightly read and your chat history are deleted after 30 days; the brief text, tasks and drafts stay until you remove them.
- Mood*: A generation nobody pins expires 30 days after it is made; pinning it, or uploading a reference, keeps it. Deleting a board, after a confirmation, deletes its files with it.
- Asset*: A file and its versions can be deleted from the library by your team, and a link can be revoked at any time. Deleting a Flow* task created from a revision request keeps the version history intact.
Source coverage (Radar*)
- Radar* does not read Reddit: its free tier does not allow commercial use.
- Radar* does not read X: it has no usable free tier.
- The Meta Ad Library only returns ads delivered in the EU or UK; elsewhere Radar* skips the check instead of reporting a false empty result.
Product by product
Pick a product to see its isolation, access, export and deletion lines, quoted from its own page.
Spark*
- Isolation
- Every brief, client record and persona belongs to your agency's account and is checked on every request; no other agency can reach it.
- Access
- Anyone in your agency with access to Spark* sees its briefs and clients. A client link opens one brief and none of the client's other work. Signal*form support can open Spark* data to help you.
- Export
- PDF export runs on data you can already see, so it carries the same limits as viewing the brief.
- Deletion
- Deleting a client or a brief removes it, with its comments, versions and generated assets, at once. An owner can delete the whole organization from Settings › Data.
What our AI does and does not decide
Brief, persona and client content goes to the model providers' commercial APIs only when you ask for a draft, a review, a persona or a transcript, never in the background. Training and retention for those calls follow each provider's API terms, not a setting in this product.
The AI decides
- Expanding a short intake or a call transcript into a full structured draft
- Naming which fields in a brief are vague, unsupported or missing specifics, with a suggested rewrite for each
- Drafting an audience persona from the brief's own context
The AI does not decide
- Whether a brief is approved: that runs through your own approval steps
- What reaches a client or a project tool: every push to Asana, monday.com, ClickUp, Notion, Slack or Microsoft Teams is a person clicking a button on an approved brief