Privacy Policy

Effective date: 25 July 2026 · Last updated: 4 August 2026

1. Who we are

Fojora (“Fojora”, “we”, “us”) is an Australian company operating the communication assistant available at fojora.com (the “Service”). We are the data controller of the personal information described in this policy, and we handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the GDPR and applicable US state privacy laws where they apply to you.

This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have. If you use Fojora through a workspace administered by your employer, your employer may control that workspace and this policy applies alongside our agreement with them.

2. Information we collect

Information you provide

• Account information. Name, email address, password or single sign-on identifier, and workspace settings.
• Waitlist information. The email address you submit to join our waitlist, used only to contact you about Fojora.
• Payment information. Processed by our payment provider (Stripe); we never store full card numbers.
• Phone number. If you enable SMS alerts, the mobile number you verify, so we can text you (see Section 5).
• Alert preferences. The people, topics, confidence threshold and free-text instructions you set to decide what is worth an alert.
• Support communications. Messages you send us and feedback you share.

Voice Profile tool

When you use the free Voice Profile tool at fojora.com, common personal details (such as email addresses and phone numbers) are removed from your pasted text in your browser before anything is sent to us. The cleaned text is then sent to our server and passed to our AI provider (Anthropic) to compute your style scores; the response is returned to you and your pasted text is discarded — it is not stored or logged. If you choose to create a share link, only the derived style summary (scores, archetype, phrases and the display name you enter) is saved — never the pasted text — and you can ask us to delete it at any time.

Information from connected mailboxes

When you connect a mailbox (for example Outlook/Microsoft or Gmail/Google), you grant Fojora read-only access using that provider’s own authorisation flow. Fojora never sends, deletes or modifies your email. With that access we process, with your explicit authorisation:

• Message metadata — sender, subject and timestamps of new inbox messages, which we store to run and de-duplicate the urgency check and to show you a history of alerts;
• Message content, transiently — a short excerpt is read at the moment of classification to judge urgency, then discarded — the body of your email is never stored or logged;
• Calendar data and historical sent messages — only if and when you enable scheduling or voice-matched drafting features, used solely to provide those features to you (see Section 4).

Information collected automatically

• Usage data — features used, actions taken, error logs and performance data;
• Device and technical data — IP address, browser type, operating system and timezone;
• Cookies — strictly necessary cookies for authentication, and analytics cookies you can decline.

3. How we use your information

We use personal information to:

• provide, operate and secure the Service — including detecting genuinely urgent email using your chosen people, topics and instructions, sending you SMS alerts, and (where you enable it) triaging and drafting replies;
• personalise urgency detection and drafts to your preferences and writing style, for your account only;
• process payments and manage your subscription;
• respond to support requests and communicate service updates;
• monitor, debug and improve the reliability of the Service using aggregated or de-identified usage data — never your message content;
• comply with legal obligations and enforce our terms.

We do not use your message content for advertising, and we do not sell personal information. Ever.

4. AI, personalisation and model training

Fojora drafts replies using retrieval-based personalisation: we build a private index of your writing style and the facts contained in your communications. This index:

• is scoped to your account only — it is never shared with, or queried by, any other customer;
• is never used to train shared, public or third-party AI models;
• is deleted when you disconnect the channel or delete your account (see Section 9).

Where we use third-party AI providers to generate text, they process your data as subprocessors under contracts that prohibit them from retaining your content or using it to train their models. No human at Fojora reads your messages except with your explicit consent for a support issue, where required for security or abuse investigation, or where required by law.

5. Phone numbers and SMS alerts

SMS alerts are optional and off by default. We only text you after you have verified your mobile number (via a one-time code) and given explicit consent to receive automated alerts. We record that consent — the number, the consent wording and version, and the time — so we can demonstrate it.

• We send an SMS only when a message meets the confidence threshold you set; each alert contains the sender, subject, a one-line reason and a link to the app — never the content of your email.
• Your number is shared only with our SMS provider (Twilio) to deliver the message, and with Stripe/our systems for no other purpose. It is never sold or used for marketing.
• You can opt out at any time by replying STOP to any message, or by removing your number in settings; opting out stops all alerts immediately.
• Standard message and data rates from your carrier may apply. SMS availability depends on your country and carrier.

6. Google user data & Limited Use

Specifically, for data obtained through Google APIs (such as Gmail and Google Calendar):

• we only use it to provide and improve user-facing features of the Service that are visible and prominent to you;
• we do not transfer it to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you;
• we do not use it to serve advertisements;
• we do not allow humans to read it, except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and de-identified for internal operations;
• we do not use it to train generalised AI or machine-learning models.

7. Microsoft and other platform data

The same commitments in Section 6 apply to data obtained from any other platform you connect — including Microsoft services (such as Outlook and Microsoft Calendar, in accordance with the Microsoft APIs Terms of Use) and messaging platforms such as Slack. Platform data is used only to provide the features you have enabled, is accessed using the minimum permission scopes practical, and is deleted when you disconnect that platform.

8. When we share information

We share personal information only with:

• Service providers (subprocessors) — cloud hosting, AI text generation, payment processing, and analytics providers, each bound by data protection agreements and acting on our instructions;
• Your workspace administrator — if your account belongs to an organisational workspace;
• Authorities — where required by law, court order, or to protect rights, safety and security;
• A successor entity — in a merger, acquisition or asset sale, with notice to you before your personal information becomes subject to a different privacy policy.

A current list of subprocessors is available on request at support@fojora.com.

9. Data retention and deletion

• Voice Profile pasted text — processed transiently; never stored.
• Shared Voice Profile cards — the derived style summary is kept until you ask us to delete it.
• Waitlist emails — kept until you unsubscribe or our launch communications end.
• Connected channel data — deleted within 30 days of you disconnecting that channel.
• Account deletion — all personal information and your personalisation index deleted within 30 days of a verified deletion request; residual copies purged from encrypted backups within 90 days.
• Billing records — retained as required by Australian tax and corporations law (generally 7 years).
• Aggregated, de-identified data — may be retained, as it no longer identifies you.

To delete your account and data, use the in-app account settings or email support@fojora.com.

10. Security

We protect your information with encryption in transit (TLS 1.2+) and at rest (AES-256), OAuth-based channel connections (we never see or store your email password), network isolation, and least-privilege access controls with audit logging. No system is perfectly secure; if a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme, and any other regulator required by law.

11. Your rights

Everyone

You can access, correct, export or delete your personal information at any time via your account settings or by emailing support@fojora.com. We respond within 30 days and will not discriminate against you for exercising your rights.

Australia

You may request access to and correction of your personal information under the APPs. If you are unsatisfied with our response to a complaint, you may contact the OAIC at oaic.gov.au.

European Economic Area & United Kingdom

Where the GDPR or UK GDPR applies, we process your data on the legal bases of contractual necessity (providing the Service), legitimate interests (security, support and service reliability), consent (marketing and optional features), and legal obligation. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority.

United States

Where a US state privacy law (such as the CCPA/CPRA) applies, you have the right to know, access, correct and delete personal information. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of.

12. International data transfers

Our infrastructure is hosted with major cloud providers and your data may be processed in countries other than your own, including Australia and the United States. Where we transfer data internationally, we use appropriate safeguards including Standard Contractual Clauses and equivalent contractual protections with all subprocessors.

13. Children

The Service is designed for professionals and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. For material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. The “Last updated” date at the top reflects the current version.

15. Contact us

Questions, requests or complaints about privacy:

Fojora
Email: support@fojora.com
Web: fojora.com