Submit a privacy request

This form is the intake for the rights enumerated in Signal’s privacy notice § 6 — Right to Know, Right to Delete, Right to Correct, Right to Limit Use of Sensitive Personal Information. Submissions are reviewed by the qualified individual under the timing rules of California Civil Code § 1798.130. Authoritative template: docs/legal/forms/ccpa_rights_request.md.

What to expect. Acknowledgement within 10 business days, substantive response within 45 calendar days (extendable by 45 more if reasonably necessary, with notice to you). For Right to Delete, the cascade matches theDELETE /api/account path: vault entries first, then grants, then the account row, then your session.

What we do not do. We do not sell or share personal information, so the right to opt out is satisfied structurally. We cannot decrypt your vault — for specific pieces of vault content, the “Download my data” button on /vault is the practical realization of the right to know (Cal. Civ. Code § 1798.110): every entry, decrypted in your browser, in a single JSON file.

Prefer email? Send your request to ian.manchel@gmail.com with the same information. Authorized agents must attach the signed agent-authorization form.