Privacy Policy

Who we are

Fojora is run by Abe Cyber Security Consulting Pty Ltd (ABN 67 679 996 886), trading as Fojora, in New South Wales, Australia. “We”, “us” and “Fojora” on this page mean that company.

Questions about your information go to support@fojora.com.

What we collect

When you join the beta waitlist

• Your email address, and the kind of work you do if you tell us.
• The exact wording you agreed to, and whether you asked for product updates.

When you create an account

• Your email address, used to sign you in.
• If you sign in with Microsoft: your Microsoft account’s name, email address and account ID.
• Your time zone, so texts and deadlines use your local time.

When you connect a mailbox

• Your Microsoft account ID and mailbox address.
• Access tokens that let Fojora read new email. We encrypt these before storing them.

About the emails we check

• The sender’s address, the subject, when it arrived, and a link to open it in Outlook.
• Fojora’s decision about the email: whether it needed you, how urgent it was, and a one-line AI summary of what it’s about.
• For emails we text you about: the sender’s name, any action or deadline, and a few short quotes from the email that explain why we texted you.

Your rules and feedback

• The rules you write, the people you add, and the work type and seniority you choose. During setup we also guess your work type from your recent email, and keep that guess and the words it was based on.
• Your answers when you tell us whether a text was useful, with the sender and subject of that email, and any reason you give.
• During setup: the people and topics we suggest from your recent email, and up to 20 recent emails we show you as examples (sender, subject, time and a one-line AI summary of each).

Your phone number

• Your mobile number and its country, and when you confirmed it.
• A record of your agreement to receive texts: which wording you agreed to, when, and the IP address and browser you used.
• The texts we send you and whether they were delivered.

If you pay us

• Your plan, its status and renewal date, and Stripe’s reference numbers for you. Your card details go straight to Stripe. We never see or store them.

Technical details

• Your IP address, used to stop abuse and to guess your country on the phone step. We store it only in your texting agreement. Our sign-in and hosting providers also record it in their own security logs.

What we don’t collect

• We don’t store the full text of your emails or their attachments.
• We don’t use analytics, tracking pixels or advertising tools on our website or app.

How we handle your email

When you connect an Outlook or Microsoft 365 mailbox, you give Fojora permission to read your email and basic profile, including while you’re not using Fojora. We ask for read access only. Fojora has no permission to send, delete, move or change anything in your mailbox.

Microsoft tells us when a new email arrives in your Inbox or Junk folder. We also check your newest inbox emails once a day, in case a notice went missing. For each new email, we read the sender, the subject and the short preview Microsoft provides, which is about the first 255 characters of the message.

While your mailbox is connected, we record the details listed above for every new email in your Inbox and Junk folders, even when Fojora is paused. To stop that, disconnect your mailbox.

For each new inbox email, we send those details to Anthropic’s Claude model, with your rules, the addresses of people you’ve added, your work type and seniority, your time zone, and the sender and subject of the last five emails you told us didn’t need a text. Claude decides whether the email needs you and writes a one-line summary. When you write a rule, we also send its wording to Claude so Fojora can understand it. We don’t send Junk emails to Claude. We only check whether they come from someone on your list.

During setup, we look at your 50 most recent inbox emails on our own servers, without AI, to suggest people and topics. We then check up to 20 of them with Claude, so you can see how Fojora would treat real email before you switch it on. We check them again if you change your rules during setup.

We never use your email to advertise to you. We don’t sell it, and we don’t use it to train AI models.

How we use your information

• To run Fojora: read new email, decide what needs you, and text you.
• To make Fojora fit you. Your feedback teaches Fojora what to skip for your account only.
• To sign you in, keep your account secure and stop abuse.
• To bill you, if you choose a paid plan.
• To email you about your beta invitation and your account, and product updates if you asked for them.
• To meet our legal obligations.

If you are in the UK or the European Economic Area, we rely on these legal grounds: providing the service you signed up for, your consent (for texts and product updates, which you can withdraw at any time), our legitimate interest in keeping Fojora secure, and legal obligations.

Who helps us run Fojora

We share information only with the companies below, and only what each needs to do its job.

Supabase

Our database and sign-in. Holds the account information described on this page.

Vercel

Hosts our website and app.

Anthropic

Runs the Claude model that reads each email’s sender, subject and preview, with your rules and settings, as described above. Under Anthropic’s commercial terms, it may not train its models on this content.

Microsoft

Your mailbox provider. We read from your mailbox through Microsoft, with your permission.

Twilio

Confirms your phone number and delivers our texts. Receives your number and each text’s wording.

Upstash

Queues our background work. Receives reference numbers only, never email content.

Resend

Sends our sign-in emails. Receives your email address.

Stripe

Takes payments, if you choose a paid plan. Receives your email address and payment details.

Google Workspace

Our own email. Receives whatever you send to support@fojora.com.

We may also disclose information if the law requires it, or to protect someone’s safety. If Fojora is ever sold or merged, your information would move with it under this policy, and we would tell you first.

Texts to your phone

Apart from the code that confirms your number, we text you only after you confirm your number and agree to receive texts. A text says who the email is from (when it’s safe to), what happened and any deadline, in a line or two, with a link that opens the email. For emails that look sensitive, such as from HR, legal or a bank, the text says only that a confidential matter needs your review.

Texts pass through Twilio and your mobile carrier, and may show on your lock screen. Fojora texts are about your email only. We never send marketing texts.

To stop all texts, open Settings and choose Remove my phone number. If your texts come from a phone number rather than the name “Fojora”, you can also reply STOP.

How long we keep it

• Details of emails we check (sender, subject, our decision, summaries and quotes): deleted automatically about 30 days after the email arrived.
• Your rules, feedback and setup examples: kept until you delete your account, so Fojora keeps working the way you set it up.
• Your phone number and texting agreement: kept until you remove the number or delete your account.
• Mailbox access tokens: deleted when you disconnect the mailbox or delete your account.
• Waitlist sign-ups: kept until you ask us to remove yours.
• Security records of key account events (such as connecting a mailbox): kept after you delete your account, with everything that identifies you removed.

Deleting and your rights

In Settings, at any time

• Delete my email history removes the details of emails we’ve checked and the texts we sent about them. Your rules, feedback and setup examples stay. Emails from the last two days may be checked again at our next daily check.
• Remove my phone number stops all texts, deletes your number and texting agreement, and pauses Fojora until you add a number again.
• Disconnect stops Fojora reading your mailbox and deletes its access tokens. Details already recorded stay until they expire or you delete them.
• Delete account removes your account and everything linked to it, except the anonymised security records described above.

Things deleting your account doesn’t do

• It doesn’t remove Fojora from your Microsoft account’s list of apps. Fojora can no longer use that access, but you can remove the entry at Microsoft account (personal) or My Apps (work or school).
• Microsoft may keep notifying us of new email for up to three days. We ignore those notices.
• Stripe keeps its own payment records, and Twilio keeps its own delivery records, under their own policies. Email us and we’ll ask them to delete yours where they can.
• It doesn’t remove a waitlist sign-up. Email us for that.

Your rights

You can ask to see the information we hold about you, to correct it, or to delete it. If you are in the UK or the European Economic Area, you can also ask us to limit or object to how we use it, or to give you a copy in a portable format. Email support@fojora.com. We’ll reply within 30 days.

Security

• Mailbox access tokens are encrypted with AES-256-GCM before we store them. They never appear in our logs.
• Information travels encrypted between your browser, our servers and our providers.
• Our database provider encrypts stored data. Each account can reach only its own records.
• We don’t store full email text. What we keep is limited to the details listed on this page.

No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the regulator, as the law requires.

Cookies

We use two kinds of cookie, both needed for Fojora to work:

• A sign-in cookie that keeps you signed in until you sign out.
• A short-lived cookie that holds your number for 10 minutes while you confirm it.

We don’t use analytics, advertising or tracking cookies.

Where your data goes

Some of the companies that help us run Fojora store or process data outside Australia, mainly in the United States. We share only what each one needs, and each protects it under its own security and privacy commitments.

Children

Fojora is for adults. You must be 18 or older to use it. We don’t knowingly collect information from anyone under 18.

Changes to this policy

If we change what we collect or how we use it, we’ll update this page and its date. For changes that matter, we’ll email you before they take effect.

Contact and complaints

Email support@fojora.com with any question or complaint about your information. We’ll reply within 30 days.

If you’re not happy with our answer, you can complain to the OAIC in Australia, the ICO in the UK, or the privacy regulator where you live.