Privacy Policy
Effective date: 25 July 2026 · Last updated: 25 July 2026
The short version. Fojora connects to communication channels you choose — such as email, calendar and messaging platforms — to draft and manage replies in your voice. Your message content is used only to provide the service to you. We never sell your data, never use it for advertising, and never use your content to train shared or third-party AI models.
1. Who we are
Fojora (“Fojora”, “we”, “us”) is an Australian company operating the communication assistant available at fojora.com (the “Service”). We are the data controller of the personal information described in this policy, and we handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the GDPR and applicable US state privacy laws where they apply to you.
This policy explains what we collect, why, who we share it with, how long we keep it, and the choices you have. If you use Fojora through a workspace administered by your employer, your employer may control that workspace and this policy applies alongside our agreement with them.
2. Information we collect
Information you provide
- Account information. Name, email address, password or single sign-on identifier, and workspace settings.
- Payment information. Processed by our payment provider; we never store full card numbers.
- Support communications. Messages you send us and feedback you share.
Information from connected channels
When you connect a communication channel (for example an email account, calendar, or messaging platform), we access, with your explicit authorisation:
- Message content and metadata — the messages, threads, senders, recipients, subjects and timestamps needed to read context and draft replies;
- Calendar data — events and availability, where you enable scheduling features;
- Historical communications — your past sent messages, used solely to learn your personal writing style and relevant facts so drafts sound like you (see Section 4).
Information collected automatically
- Usage data — features used, actions taken, error logs and performance data;
- Device and technical data — IP address, browser type, operating system and timezone;
- Cookies — strictly necessary cookies for authentication, and analytics cookies you can decline.
3. How we use your information
We use personal information to:
- provide, operate and secure the Service — including triaging messages, drafting replies, and organising threads across your connected channels;
- personalise drafts to your writing style and context, for your account only;
- process payments and manage your subscription;
- respond to support requests and communicate service updates;
- monitor, debug and improve the reliability of the Service using aggregated or de-identified usage data — never your message content;
- comply with legal obligations and enforce our terms.
We do not use your message content for advertising, and we do not sell personal information. Ever.
4. AI, personalisation and model training
Fojora drafts replies using retrieval-based personalisation: we build a private index of your writing style and the facts contained in your communications. This index:
- is scoped to your account only — it is never shared with, or queried by, any other customer;
- is never used to train shared, public or third-party AI models;
- is deleted when you disconnect the channel or delete your account (see Section 8).
Where we use third-party AI providers to generate text, they process your data as subprocessors under contracts that prohibit them from retaining your content or using it to train their models. No human at Fojora reads your messages except with your explicit consent for a support issue, where required for security or abuse investigation, or where required by law.
5. Google user data & Limited Use
Fojora's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, for data obtained through Google APIs (such as Gmail and Google Calendar):
- we only use it to provide and improve user-facing features of the Service that are visible and prominent to you;
- we do not transfer it to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice to you;
- we do not use it to serve advertisements;
- we do not allow humans to read it, except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and de-identified for internal operations;
- we do not use it to train generalised AI or machine-learning models.
6. Microsoft and other platform data
The same commitments in Section 5 apply to data obtained from any other platform you connect — including Microsoft services (such as Outlook and Microsoft Calendar, in accordance with the Microsoft APIs Terms of Use) and messaging platforms such as Slack. Platform data is used only to provide the features you have enabled, is accessed using the minimum permission scopes practical, and is deleted when you disconnect that platform.
7. When we share information
We share personal information only with:
- Service providers (subprocessors) — cloud hosting, AI text generation, payment processing, and analytics providers, each bound by data protection agreements and acting on our instructions;
- Your workspace administrator — if your account belongs to an organisational workspace;
- Authorities — where required by law, court order, or to protect rights, safety and security;
- A successor entity — in a merger, acquisition or asset sale, with notice to you before your personal information becomes subject to a different privacy policy.
A current list of subprocessors is available on request at support@fojora.com.
8. Data retention and deletion
- Connected channel data — deleted within 30 days of you disconnecting that channel.
- Account deletion — all personal information and your personalisation index deleted within 30 days of a verified deletion request; residual copies purged from encrypted backups within 90 days.
- Billing records — retained as required by Australian tax and corporations law (generally 7 years).
- Aggregated, de-identified data — may be retained, as it no longer identifies you.
To delete your account and data, use the in-app account settings or email support@fojora.com.
9. Security
We protect your information with encryption in transit (TLS 1.2+) and at rest (AES-256), OAuth-based channel connections (we never see or store your email password), network isolation, and least-privilege access controls with audit logging. No system is perfectly secure; if a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme, and any other regulator required by law.
10. Your rights
Everyone
You can access, correct, export or delete your personal information at any time via your account settings or by emailing support@fojora.com. We respond within 30 days and will not discriminate against you for exercising your rights.
Australia
You may request access to and correction of your personal information under the APPs. If you are unsatisfied with our response to a complaint, you may contact the OAIC at oaic.gov.au.
European Economic Area & United Kingdom
Where the GDPR or UK GDPR applies, we process your data on the legal bases of contractual necessity (providing the Service), legitimate interests (security, support and service reliability), consent (marketing and optional features), and legal obligation. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your local supervisory authority.
United States
Where a US state privacy law (such as the CCPA/CPRA) applies, you have the right to know, access, correct and delete personal information. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of.
11. International data transfers
Our infrastructure is hosted with major cloud providers and your data may be processed in countries other than your own, including Australia and the United States. Where we transfer data internationally, we use appropriate safeguards including Standard Contractual Clauses and equivalent contractual protections with all subprocessors.
12. Children
The Service is designed for professionals and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. For material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. The “Last updated” date at the top reflects the current version.
14. Contact us
Questions, requests or complaints about privacy:
Fojora
Email: support@fojora.com
Web: fojora.com