Privacy policy

Last updated October 17, 2026

FoilerAI protects your email from scams. To do that we have to read your email, so this page explains exactly what we look at, what we keep, and what we never do. The short version:your data is never sold and never monetized, we read your email only to protect it, and we never connect to your bank.

What we collect

• Your account. Your name and email address from your Google account, and the access keys Google gives us to protect your mailbox. The access keys are stored encrypted.
• What we found about each email. For each email we check, we keep the sender's address, the subject, the time, and what our checks found: the verdict and the reasons for it.
• The people you write to. To recognise people you already correspond with, we keep a one-way fingerprint of each address and subject in your Sent mail and when you sent it. The fingerprint cannot be turned back into the address or subject.
• Payment details you confirm. When you tell us an email from a supplier is legitimate, we keep one-way fingerprints of its payment details, so we can notice if they change later.
• Emails you report as scams. When you tell us an email is a scam, we keep the details that made it one (for example the sender's address, a link, a phone number or the bank account it asked you to pay), so we can recognise the same scam if it comes back.
• Answers you have not given yet. For up to 30 days after we protect an email, we keep the details we would need to record your answer if you tell us it is legitimate or a scam. After that they are deleted.
• How you use our pages. When you open a link, a file or a page through FoilerAI, we record that it happened and what we decided, so we can protect you and fix problems.
• Fake FoilerAI emails. If someone sends you an email forged to look like it came from FoilerAI, we keep a copy for up to 36 months so our security team can study the attack. This is the only time we keep a copy of an email.

How we check your email

We check each email as it arrives and do not keep a copy of it. Most emails are decided by our own checks. When our checks cannot decide, the text of that email is read by an AI model provider working for us, only to answer that question. To check a file we send only its fingerprint, never the file itself, to services that know which files carry viruses. To check a link we send only part of a fingerprint of its address. Some pictures are sent to a picture-checking service when the answer could change our verdict.

Protected copies of your email are stored in your own Gmail account, not on our servers.

What we never do

• We never sell your data, rent it, or use it for advertising.
• We never connect to, hold sign-in details for, or access any bank account.
• We do not use your email to train AI models.
• People at FoilerAI do not read your email, except when you ask us to, when it is needed to investigate a security problem, or when the law requires it.

Google user data

FoilerAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail access only to protect your mailbox: to check new email, deliver protected copies, and move scams out of your inbox.

Who else handles your information

We use service providers to run FoilerAI: hosting, a database, AI model providers, and security services that check files, links and pictures. They handle your information only to provide their service to us, under contract. We share information with others only if the law requires it.

Your choices

• Disconnect any time. One click disconnects your mailbox and deletes the access keys we hold.
• Ask for a copy or deletion. Write to jack.miller@foiler.ai and we will send you a copy of what we hold about you, or delete it.

Children

FoilerAI is not intended for children under 13, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date at the top of this page, and tell you by email before any change that affects data we already hold.

Contact

Questions about privacy: write to jack.miller@foiler.ai.