Privacy at Foyerbox

The short version

Foyerbox connects to the mail accounts you add and keeps a copy of their mail on our servers, so it can sort it, find codes and bills, and write your brief.
App passwords and sign-in tokens for your mail accounts are encrypted, with a key kept apart from the database.
Nobody at Foyerbox reads your mail. We'd only look at a message if you ask us to, to help you.
No ads, no tracking in the app, and we never sell or share your personal information. Your mail is never used to train AI.
You can export everything or delete your account at any time from Settings. Deleted data leaves our backups within 7 days.

Who is responsible

Foyerbox is published by EXOVIE APPLICATION PRIVATE LIMITED, a company registered in India (CIN U58202GJ2023PTC138997), with its registered office at Flat No. 301, Nyalkaran Apartment, 80 Ft. Road, behind Aryaland Residency, Rajkot, Gujarat 360005, India ("we"). We are the controller for the personal data described on this page. You can reach us about privacy at kevin@exovie.app.

What Foyerbox keeps

Data	Why	Legal basis (GDPR)	Kept for
Your Foyerbox account: email, name, a password hash (Argon2), settings, rules and brief schedule	To run your account	Contract	Until you delete your account
The mail accounts you add: address, server settings, and the app password or sign-in token (encrypted)	To fetch, sort and send your mail	Contract	Until you remove the address or your account
Copies of your messages, the names and sizes of their attachments, how Foyerbox sorted them, and what it found in them (a sign-in code, an amount due, a date)	To show your mail in one place, search it, and write your brief	Contract; for the people who wrote to you, our and your legitimate interest in providing the service you asked for	Up to 5,000 inbox messages per address, until you remove the address or your account. Attachments are fetched from your provider when you open them and not stored.
Messages you schedule, follow-up reminders and templates	To send later and remind you	Contract	Until they're sent, dismissed or deleted
Foyerbox AI credit counts (not the requests)	To apply the monthly allowance	Contract	About 40 days
Security records: sign-in attempts and IP addresses for rate limits	To stop abuse and break-ins	Legitimate interest in security	Up to 1 hour in memory; server logs up to 14 days
Subscription record: licence ID, subscription status, renewal date and the email you bought with	To issue, renew and cancel your subscription, and handle refunds	Contract	While the subscription lasts, then 2 years for refunds and disputes
Launch list: your email and the date you joined	To tell you when Foyerbox opens	Consent, which you can withdraw at any time	Until 12 months after we write, or until you ask us to remove it

Drafts you're writing are saved in your own browser, not on our servers, until you send them.

How your mail is used

Foyerbox reads your mail automatically to sort it (for example into "Needs reply" or "Codes"), find codes, bills and dates, and build your Today page and morning brief. This is done by software, and it makes no decisions about you with legal or similarly significant effects.
What you do in Foyerbox (read, star, archive, delete, send) happens at your provider too.
Nobody at Foyerbox reads your mail, except when you ask us to look at a specific message to help you, when it's needed to keep the service secure, or when the law requires it.
Your mail is never sold, never used for advertising, and never used to train AI models.
Remote images in messages are blocked until you load them, so senders can't see when you open their mail.

AI

AI is optional, and off until you turn it on. Foyerbox's built-in sorting works without it. If you turn on Foyerbox AI, the text of the messages a feature needs is sent to Anthropic: the message you summarize or reply to, the messages that match a question in Ask, and the messages your morning brief covers. Anthropic processes it under its commercial terms, keeps it only for a limited time for safety and abuse monitoring, and does not use it to train models. In every request, mail is marked as data with an instruction to ignore instructions written inside it, and AI never sends, deletes or archives anything by itself.

Google user data

If you connect a Gmail account with Sign in with Google, Foyerbox uses Google's permission to read, organize and send mail only to show your mail in Foyerbox and carry out what you do in it. Foyerbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail data is used only to provide the features you use in Foyerbox, and is shared only as this page describes: with Foyerbox AI, or an integration, for a request you made.
It is never used for advertising, never sold, and never used to train AI models.
Nobody reads it unless you agree for a specific message, it's needed for security or to comply with the law, or it's aggregated and anonymized for internal operations.

You can remove Foyerbox's access at any time at myaccount.google.com/permissions.

Service providers and transfers

We use these providers, under contracts that limit them to processing data for us:

Hetzner Online (Germany): the servers where Foyerbox runs and your mail is stored, and encrypted backups.
Cloudflare (United States, with servers worldwide): the website, DNS, the encrypted connection between your browser and the web app, and Foyerbox Cloud, which handles subscriptions, licences and the launch list.
Resend (United States): account emails (confirming your address, resetting your password) and subscription emails.
Anthropic (United States): Foyerbox AI, only if you turn it on.

Payments are handled by Paddle, which sells Foyerbox as the merchant of record and is an independent controller for your payment, billing and tax data under Paddle's privacy policy. We never see your card.

Integrations you connect yourself (Telegram, Slack, Discord, webhooks, Todoist, Notion, Cloudflare) receive only what you set them up to receive, under your own agreement with them.

When personal data from the EU, the UK or Switzerland goes to a country without an adequacy decision, the transfer is covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses and the UK Addendum.

Cookies

The Foyerbox app uses one strictly necessary cookie to keep you signed in. The website sets no cookies and uses no analytics. If you buy Pro, Paddle's checkout may use its own cookies to process the payment and prevent fraud. None of these are used for advertising, so there is nothing to consent to.

Your rights

You can export everything Foyerbox keeps about you (Settings → Your data → Export) and delete your account (Settings → Your data → Delete) at any time. Removing an address deletes its messages and password straight away. Deleted data leaves our backups within 7 days.

You can also ask us to see, correct or delete your data, to restrict how it's used, or to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. We answer within one month. If you're in the EU or UK, you can complain to your data protection authority (in the UK, the Information Commissioner's Office).

US state privacy rights

Foyerbox does not sell or share personal information, and does not use it for targeted advertising or profiling. We collect identifiers (your email, account and licence IDs), the content of the mail accounts you connect, commercial information (your subscription) and internet activity (IP addresses for security), for the purposes and periods listed above. Wherever you live, including California, Colorado, Connecticut, Virginia and other states with privacy laws, you can ask to know, access, correct or delete this information, and you won't be treated differently for asking. Browser signals such as Global Privacy Control are respected; since nothing is sold or shared, there is nothing further to opt out of.

Security

How Foyerbox protects your data is described on the security page. If a breach affects your personal data, we will notify the relevant authority and you as the law requires.

Children

Foyerbox is not meant for anyone under 16, and we don't knowingly collect data from children.

Changes to this policy

If this policy changes in a way that matters, we'll tell you in the app and by email before the change applies. Earlier versions will be listed on this page.

Contact

Write to kevin@exovie.app with any question or request about your data, or by post to EXOVIE APPLICATION PRIVATE LIMITED, Flat No. 301, Nyalkaran Apartment, 80 Ft. Road, behind Aryaland Residency, Rajkot, Gujarat 360005, India. We answer within one month.