Privacy Policy

What SignalCraft Tools collects, why, who sees it, how long we keep it, and how to have it deleted.

Last updated: September 30, 2026

1. Who we are

SignalCraft Tools is run by Dialed Funnel Conversions LLC, doing business as Dialed Funnels ("we", "us"), 2108 N St Ste 5622, Sacramento, CA 95816, United States. We decide how the data described here is used, so we are responsible for it.

2. What this policy covers

This policy covers the SignalCraft Tools software that connects to Meta (Facebook and Instagram) through our Meta app, "Signalcraft™ Tools":

• SignalCraft SpeedLoader at speedloader.signalcraft.tools. Media buyers sign in with Facebook and use it to build ad campaigns in their own ad accounts, and to see how those ads perform.
• SignalCraft results dashboards. Reports we build for clients whose advertising tests we run, from those clients' ad accounts.
• This website, signalcraft.tools. It sets no cookies and runs no analytics or tracking. Our host, Cloudflare, keeps standard security logs such as IP addresses.

We use data from Meta only as Meta's Platform Terms and Developer Policies allow.

3. What we get from Meta

When you sign in to SpeedLoader with Facebook, Meta asks you to approve the access below. Meta then gives us:

• your Meta user ID and your name;
• an access token, which lets SpeedLoader act for you within the access you approved.

We do not get your Facebook password. We do not read your personal profile, friends, messages or personal posts. We do not collect information about the people who see or respond to your ads.

The access SpeedLoader asks for, and why

ads_management

To create campaigns, ad sets, ad creatives and ads in the ad accounts you choose, always paused so nothing spends until you turn it on. To upload your images and videos to your ad account. To create audiences of people who watched your video ads, so a new ad can leave them out. To check what was built against what you asked for.

ads_read

To read your ad accounts, campaigns, ad sets and ads, and their performance numbers (such as impressions, clicks, click-through rate, cost per click and amount spent), so SpeedLoader can show you your results.

business_management

To list the ad accounts and Pages you reach through a business portfolio, for example a client's Page shared with your agency, so you can pick them. SpeedLoader does not change your business portfolio.

pages_show_list

To list the Facebook Pages you manage, so you can choose which Page an ad runs as.

pages_read_engagement

To read a post on your Page when you reuse it as an ad (its text, link, button, and its counts of reactions, comments and shares), to find the Instagram account linked to your Page, and to find the copy of a video your Page holds for an ad, so people who watched it can be left out of later ads. SpeedLoader does not read who follows your Page.

pages_manage_ads

To create ads that run as your Page, and to list your Page's instant forms when you build ads that collect leads.

To fill SpeedLoader's menus, it also reads your ad accounts, Pages, linked Instagram accounts, pixels, custom conversions, audiences, instant forms and Page posts. These lists stay in the server's memory for about ten minutes and are not saved to our database.

4. What SpeedLoader keeps

SpeedLoader keeps the following in its database so your work survives closing the tab and so your team can see what was built:

• Your account: your Meta user ID, your name, an internal user ID, the workspace you belong to, and when you last signed in.
• Your access token and when it expires, so runs can keep going after you close the tab. Tokens are never sent to your browser or shown to other people in your workspace.
• Runs: each campaign plan you submit (campaign, ad set and ad names, ad text, links and link tags, budgets, schedule, targeting, the Page and Instagram account used, and the IDs of images and videos uploaded to Meta), and what happened at each step (the IDs Meta gave back, and any errors).
• A record of each ad created: ad ID, ad name, ad set, campaign, the run it came from, and any test labels. For workspaces we manage as part of our testing service, this record is shared with our results dashboards.
• Video records: each video's file name, a fingerprint of the file's contents (so SpeedLoader recognizes the same video later), the video IDs Meta gave it, and the audiences made from its viewers.
• Workspace settings: clients, ad account links, and presets you save, plus a short activity history (for example, "started a run" or "saved a preset").

Images and videos pass straight through SpeedLoader to Meta and are not kept on our servers. One exception: a zipped round folder sent through the older import is unpacked to the server's temporary storage while it is read, and that storage is cleared when the server restarts.

In your browser, SpeedLoader sets one sign-in cookie. It lasts 30 days, holds only your SpeedLoader user and workspace IDs, and is signed so it can't be altered. SpeedLoader also saves unfinished drafts in your browser's local storage, on your device, not on our servers. SpeedLoader uses no analytics, advertising or tracking cookies.

Server logs record errors to help us fix problems. They can include file names, Meta's error messages and internal IDs. We strip access tokens out of error messages before logging them.

5. Results dashboards

For clients whose advertising tests we run, our team reads ad performance numbers from those clients' ad accounts every night, using our own Meta access. We read campaign, ad set and ad names and IDs, the text of the lines being tested, impressions, link clicks, click-through rate and cost per click. These are totals for each ad. They contain no information about the people who saw the ads.

We store these numbers in a private code repository and publish them as dashboards. Each client's dashboard is at a private link that is kept out of search engines. Our team's pages require a login.

6. How we use data

We use the data described here only to run SignalCraft Tools for you:

• to build the ads you ask for and check them;
• to show you and your workspace what was built and how it performs;
• to report test results to the clients they belong to;
• to keep the software working, fix problems and answer support requests.

We do not sell or rent data. We do not use data from Meta to advertise to you, to build profiles of you, or to train AI models. We do not pass it to data brokers.

7. Who we share it with

• Meta, to carry out what you ask SpeedLoader to do in your ad accounts.
• People in your workspace see its runs, plans and results, and who created each run.
• The client a report is for sees their own results dashboard.
• Service providers that run parts of SignalCraft Tools for us, under their own security and privacy terms:
  • Railway: hosts SpeedLoader, its database and its logs, in the United States;
  • Cloudflare: network, security, website hosting and team logins;
  • GitHub: stores the results dashboards' data and builds them;
  • Slack: team notices that a client's report was updated (client name and links only, no ad data);
  • Anthropic: we maintain the software with the help of Anthropic's AI assistant, Claude. While fixing a problem it may see server logs or database records, under our control.
• Authorities, when the law requires it.
• A buyer or successor, if our business is sold or merged. We will tell you if that happens.

8. How long we keep it

• Menu lists read from Meta: about ten minutes, in memory.
• Your access token: until you sign in again (the new one replaces it), you remove SignalCraft Tools from your Facebook settings and ask for deletion, or you ask us to delete it. Meta tokens stop working after about 60 days whatever we do.
• Your account, runs, ad records, video records and workspace settings: while your workspace uses SpeedLoader. They are your workspace's record of what was built. We delete them when the workspace's owner asks.
• Results dashboards: while we work with the client and afterwards as our business records, unless the client asks us to delete them.
• Server logs: for the time our host keeps them.

9. Deleting your data

You can ask for deletion in two ways.

From Facebook

In Facebook, open Settings & privacy, then Settings, then Business integrations (or Apps and websites). Remove SignalCraft Tools and choose to have your data deleted. Meta sends the request to us, and SpeedLoader does the following straight away:

• deletes your stored access token;
• removes your Meta user ID and your name from your SpeedLoader account;
• unlinks your Meta user ID from the runs, clients and presets you created;
• renames your personal workspace so it no longer shows your name.

Meta then shows you a confirmation code and a link to a confirmation page. Runs you built stay with your workspace as its record of what was created, now shown as made by "a former member". To have those removed too, email us.

By email

Email tech@dialedfunnels.com with the subject "Data deletion request". Say which of your data you want deleted, including any workspace records you own. We will confirm who you are, delete it within 30 days, and reply to confirm.

Removing SignalCraft Tools from Facebook stops all future access to your Meta data straight away, whether or not you ask for deletion. Signing out of SpeedLoader ends your session in that browser only.

10. Security

All traffic uses HTTPS. Access tokens stay on our servers and are never sent to your browser. Only the people who operate SignalCraft Tools can reach the database, and access tokens are stripped from logged errors. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you and the authorities as the law requires.

11. Requests from public authorities

Police, courts or government agencies sometimes ask companies for data about their users. If we receive a request for SignalCraft Tools data:

1. We check it is lawful. It must come from an authority entitled to make it, through proper legal process such as a subpoena, court order or warrant. When we're unsure, we get legal advice.
2. We push back on bad requests. If a request is unlawful, too broad or unclear, we ask for it to be narrowed or corrected, and we challenge it where we have grounds to.
3. We give the minimum. We hand over only the data the request legally requires, and nothing else.
4. We keep a record. For each request we note who sent it, what it asked for, what we gave or refused, and why.
5. We tell you first. Unless the law forbids it, we tell the person whose data is requested before we hand it over, so they can object.

So far we have received no such requests.

12. Your rights

Depending on where you live, including under the GDPR, UK GDPR and California law, you can ask us to tell you what data we hold about you, correct it, delete it, give you a copy, or stop using it. Email tech@dialedfunnels.com. We will answer within 30 days. We do not sell personal information. If you are in the EU or UK, you can also complain to your data protection authority.

We process data in the United States. SignalCraft Tools is for businesses and marketing professionals, not for anyone under 18.

13. Changes and contact

If we change this policy, we will update the date at the top and describe any significant change there.