Privacy Policy

1. Data we collect

• Your Fezola account: email address, optional display name and a password stored only as a bcrypt hash.
• Security data for your sessions: IP address, browser user agent and timestamps, used to protect your account.
• Mailboxes you connect: address, display name, server settings and, for IMAP/SMTP mailboxes, the app password you provide, encrypted at rest with AES-256-GCM.
• Google accounts you connect (Gmail, Google Chat): your Google account identifier, the scopes you granted and a refresh token, encrypted at rest.
• Telegram: your Telegram user identifier and an encrypted session. Your phone number and login code are used only during sign-in and are not stored.
• AI assistants you authorize (for example Claude or ChatGPT): the client name, hashed access tokens and the date of last use.

2. Message content

Fezola does not store the content of your emails or chat messages. When your AI assistant calls a Fezola tool, Fezola fetches the requested messages from your provider, returns them to that assistant and discards them. Technical logs contain events and error codes, never message content.

Drafts that your assistant prepares are written directly to the Drafts folder of your own mailbox. Google Chat and Telegram are read-only: Fezola never sends messages on those services.

3. How we use data

We use your data only to provide the service you asked for: authenticate you, connect to your sources, answer your assistant's requests, keep the service secure and answer support requests. We do not sell your data, do not use it for advertising and do not use your messages to train AI models.

4. Google user data

Fezola's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Google Chat data is used only to show you, through the AI assistant you connected, the messages you ask for, and to create drafts you request. Humans do not read this data, except with your explicit consent for support, for security purposes or when required by law. Fezola does not use data obtained through Google Workspace APIs to develop, improve or train generalized artificial intelligence or machine learning models.

5. Sharing

• The AI assistant you connect (for example Anthropic's Claude or OpenAI's ChatGPT) receives the results of the tools it calls. Its use of that data is governed by its own privacy policy.
• Your providers (Google, Telegram, your email provider) receive the requests needed to read your messages or save drafts, under their own terms.
• Our infrastructure providers process data on our behalf: Railway (application hosting and database) and Cloudflare (DNS, network security and TLS).
• If you upgrade to Pro, Stripe processes your payment (card, billing address, invoices) on our behalf; we never receive your card number. Brevo sends our service emails (welcome, password reset).
• Sentry receives technical error reports from the application, without personal data or message content, so we can fix failures.
• PostHog (hosted in the European Union) also receives, from our servers, usage statistics of the service tied to your account number and never to your email address: connected sources, authorized assistants, names of the tools your AI calls, and the steps of your subscription. Never the content of a message or the parameters of a search. Legal basis: our legitimate interest in understanding and improving how the service is used; you can object by writing to support.
• We disclose data if the law requires it. We do not share data with anyone else.

6. Retention

Account data is kept while your account exists. Disconnecting a source immediately deletes its credentials and revokes Fezola's access at Google or Telegram. Deleting your account immediately deletes your account, your sources, their credentials and your assistant authorizations. Expired sessions and tokens are discarded. Security logs, which contain no message content, are kept for a limited period for troubleshooting.

7. Your choices and rights

From the Fezola app you can disconnect any source, revoke an AI assistant's access and delete your account. You can also revoke Fezola from your Google account settings or end its session from Telegram's active sessions. Depending on where you live (for example under the GDPR), you have the right to access, correct, export or delete your data and to object to its processing. Write to support@fezola.com; you may also lodge a complaint with your data protection authority (in France, the CNIL).

8. Security

All traffic uses HTTPS. Passwords and tokens for your sources are encrypted at rest, Fezola's own tokens are stored only as hashes, each AI assistant only sees the sources of the account that authorized it, and access is rate limited.

9. International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

10. Children

Fezola is not intended for people under 16, and we do not knowingly collect their data.

11. Cookies

Essential cookies, always on and exempt from consent: your sign-in session (stored in your browser), the language and theme you choose, and your cookie choice.

Only with your consent, and for each purpose separately:

• Product analytics (PostHog, hosted in the European Union): pages viewed, features used and anonymized session replay, to improve Fezola. Inside the app and on the authorization screen, all text and input fields are masked before sending: your addresses, mailbox names and message content never leave your browser. A signed-in account is only identified by an internal number.
• Advertising (Google, Meta or LinkedIn pixels loaded through Google Tag Manager): measuring how well our campaigns work, for example a sign-up that follows an ad.
• None of this loads before you choose. "Refuse all" is as easy as "Accept all", your choice is asked again after six months, and you can change it at any time with the "Manage cookies" link at the bottom of every page.

12. Changes and contact

We will update this page and its date when this policy changes, and notify you of material changes. Questions: support@fezola.com.