faxit is made and run by Victor, who is responsible for the data described here. It is invite only. Nothing here is sold, used for advertising, or used to train general models.
When you link a Google account, faxit asks to read, modify, send and draft Gmail messages, and to read your send-as settings. When you link a Microsoft account, it asks for the matching Outlook permissions: read and write mail, send mail, and read mailbox settings. It uses these to show your inbox, archive and label threads, send what you write, and find your aliases. It does not touch Drive, OneDrive, Calendar, Contacts or anything outside mail.
Your account. Your sign-in email, the addresses of your linked mailboxes, your aliases and their labels, and one encrypted refresh token per mailbox (AES-256-GCM, with the key held outside the database). Sessions last 90 days.
A list of your mail, not your mail. For each thread in your inbox faxit keeps the subject, the sender, the date, the labels and a one-line snippet, so the list opens instantly and your Secretary can sort it. Message bodies are fetched live from Gmail or Outlook when you open a thread and are not kept on the server.
What you make in faxit. Rules you write, snoozes, scheduled sends, follow-up reminders, snippets, and notes in your Vault, including the text of those notes.
What your Secretary learns. Counts per sender (how often you open or answer them), the sender choices you make in a session (bring it to me, it can wait, it can go), and a short description of how you write, learnt from mail you sent. You can read and forget all of it in Settings.
Large attachments. A file you attach over the provider’s limit is stored encrypted at rest and leaves as a download link. It is deleted after 14 days, or earlier if you remove it.
Read statuses. When you turn read statuses on, mail you send carries a tiny invisible image. When the recipient’s mail client loads it, faxit records that the mail was opened, and when. It records nothing else about the recipient. Many mail clients block these images, so a missing status does not mean unread.
Notifications. Push registrations for the devices you turned notifications on, and verification codes spotted in incoming mail, which are kept for at most ten minutes so they can reach your phone.
The waitlist and invites. The email address you left on the website, and which invite code you used.
Usage. Daily counts (mails synced, replies sent, files dropped) and a record of each call to the drafting model with token counts and cost. These contain no message text.
A session cookie, your appearance and layout choices, which view you prefer per sender, and a local cache of recent threads so the app opens before the network does.
Sorting, drafts, translations and the one-line summaries in a session are produced by sending the text of the mail in question to Anthropic’s Claude API, together with your voice guide. Anthropic does not train on API data. Nothing is sent on your behalf without you pressing Send.
Your mailbox list refreshes continuously and is removed when you unlink the mailbox. Large attachments go after 14 days. Verification codes go after ten minutes. Everything else stays while your account exists, and is deleted when your account is.
faxit’s use of information from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Gmail and from Microsoft Graph is used only to provide the features above, is never sold, never used for advertising, and never used to develop, improve or train generalised AI or machine learning models. Nobody at faxit reads your mail except with your explicit consent for support, where the law requires it, or to investigate a security incident.
You can see, correct, export or delete what faxit holds about you. Unlink a mailbox in Settings and its token, aliases and thread list are deleted at once. Revoking faxit at myaccount.google.com/permissions or at account.live.com has the same effect on their side. To delete your account entirely, go to Settings, Leave faxit: the account, every linked mailbox key and everything faxit learnt are removed at once, and your mail stays in Gmail or Outlook. To ask for a copy of your data, write to hello@faxit.now and it is done within 30 days. If you are in the EU or the UK you also have the right to complain to your data protection authority.
hello@faxit.now. Questions about this page, or about anything faxit does with your mail, go there and are answered by a person. See also the terms.