Legal

Privacy Policy

Effective date: June 6, 2026 · Last updated: June 6, 2026

This policy explains what we collect and how your data is handled. It is a working draft and should be reviewed by legal counsel before public launch. Items in [brackets] need to be completed.

1. Who we are

Proxy AI is operated by Proxy Foods Inc ("Proxy AI", "we", "us"), [registered address]. For any privacy question or to exercise your rights, contact us at hello@yourproxy.ai.

For data processed through the product, you (the customer / your organization) are the data controller and Proxy AI acts as a data processor on your behalf. For our website and marketing, Proxy AI is the controller.

2. What we collect

Website & early access

Information you submit in the "Request access" form: name, company, work email, role, and optional use-case selections.
Basic technical data needed to serve the site securely (e.g. IP address at request time). The site uses no third-party advertising or analytics tracking cookies.

The product

When you connect Proxy AI, it accesses — within your own Microsoft 365 or Google Workspace account — your emails, calendar events, contacts and meeting transcripts, in order to draft replies and surface action items.
Authentication is handled by Microsoft Entra ID (or Google). We never see or store your password.
Your settings and preferences (e.g. monitored chats, draft tone).

3. How your data is stored and processed

Your content (emails, drafts, action items, transcripts) is stored in your own Microsoft 365 / OneDrive tenant. We do not retain copies of your content on our own servers.
To generate a draft or extract action items, the relevant content is transmitted to our AI provider (Anthropic) for processing only. It is used solely to produce your output, is not used to train any AI model, and is not retained by the provider beyond what is needed to return the result.
Proxy AI never sends email on your behalf. Everything is a draft that you review and send yourself.

4. Sub-processors

We use the following providers to deliver the service:

Provider	Purpose	Region
Microsoft (Azure, Microsoft Graph)	Hosting, authentication, access to your M365 data within your tenant	Your tenant region / EU/US
Anthropic	AI model that drafts replies and extracts action items	USA
Formspree	Processes the website "Request access" form	USA

5. Legal bases (GDPR)

Consent — for sending you early-access and product communications after you submit the form.
Performance of a contract / legitimate interests — to provide, secure and improve the service for customers.

6. Your rights

Depending on where you live (e.g. under GDPR, UK GDPR or the CCPA), you may have the right to access, correct, delete, port or restrict your data, to object to processing, and to withdraw consent at any time. For data we process on a customer's behalf, requests are directed to that customer (the controller). To exercise any right, email hello@yourproxy.ai. You also have the right to complain to your local data protection authority.

7. Data retention

Marketing/contact data is kept until you ask us to delete it or it is no longer needed. Product content lives in your tenant and is retained according to your own configuration; we retain no separate copy.

8. International transfers

Some providers process data in the USA. Where data is transferred out of the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses. [Confirm transfer mechanism with counsel.]

9. Security

We use industry-standard measures including encryption in transit, least-privilege access, and authentication via your identity provider. No method of transmission is 100% secure, but we work to protect your information.

10. Children

Proxy AI is a business tool and is not directed to anyone under 18.

11. Changes

We may update this policy; material changes will be posted here with a new effective date.

12. Contact & governing law

Questions: hello@yourproxy.ai. This policy is governed by the laws of [jurisdiction].