Privacy Policy

1. Who we are

Proxy AI is operated by Proxy Foods Inc ("Proxy AI", "we", "us"), a Delaware corporation. For any privacy question or to exercise your rights, contact us at info@yourproxy.ai.

For data processed through the product, you (the customer / your organization) are the data controller and Proxy AI acts as a data processor on your behalf. For our website and marketing, Proxy AI is the controller.

2. What we collect

Website & early access

• Information you submit in the "Request access" form: name, company, work email, role, and optional use-case selections.
• Basic technical data needed to serve the site securely (e.g. IP address at request time). The site uses no third-party advertising or analytics tracking cookies.

The product

• When you connect Proxy AI, it accesses — within your own Microsoft 365 or Google Workspace account — your emails, calendar events, contacts and meeting transcripts, in order to draft replies and surface action items.
• Authentication is handled by Microsoft Entra ID (or Google). We never see or store your password.
• Your settings and preferences (e.g. monitored chats, draft tone).

3. How your data is stored and processed

• Your content (emails, drafts, action items, transcripts) is stored in your own Microsoft 365 / OneDrive or Google Workspace (Drive) tenant. We do not retain copies of your content on our own servers.
• To generate a draft or extract action items, the relevant content is transmitted to our AI provider (Anthropic) for processing only. It is used solely to produce your output, is not used to train any AI model, and is not retained by the provider beyond what is needed to return the result.
• Proxy AI never sends email on your behalf. Everything is a draft that you review and send yourself.
• Proxy AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described here, is never used to train AI models, and is never sold or used for advertising.

4. Sub-processors

We use the following providers to deliver the service:

Provider	Purpose	Region
Microsoft (Azure, Microsoft Graph)	Hosting, authentication, access to your M365 data within your tenant	Your tenant region / EU/US
Google (Workspace APIs: Gmail, Calendar, Drive, Sheets)	For Google Workspace customers: authentication and access to your Workspace data within your tenant	Your tenant region / EU/US
Anthropic	AI model that drafts replies and extracts action items	USA
Formspree	Processes the website "Request access" form	USA

5. Legal bases (GDPR)

• Consent — for sending you early-access and product communications after you submit the form.
• Performance of a contract / legitimate interests — to provide, secure and improve the service for customers.

6. Your rights

Depending on where you live (e.g. under GDPR, UK GDPR or the CCPA), you may have the right to access, correct, delete, port or restrict your data, to object to processing, and to withdraw consent at any time. For data we process on a customer's behalf, requests are directed to that customer (the controller). To exercise any right, email info@yourproxy.ai. You also have the right to complain to your local data protection authority.

7. Data retention

Your product content (emails, drafts, action items, transcripts) lives in your own Microsoft 365 or Google Workspace tenant and is retained per your own configuration — we keep no separate copy of it. Content transmitted to our AI provider to produce an output is not used to train any model and is not retained by that provider beyond returning the result. Marketing and contact data you submit is kept until you ask us to delete it or it is no longer needed. The limited operational data we hold to run the service (your settings and preferences, and diagnostic logs that do not contain your email or meeting content) is retained while your account is active and deleted on account termination or on request.

8. International transfers

Some providers process data in the USA. Where data is transferred out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable).

9. Security

We use industry-standard measures including encryption in transit, least-privilege access, and authentication via your identity provider. No method of transmission is 100% secure, but we work to protect your information.

10. Children

Proxy AI is a business tool and is not directed to anyone under 18.

11. Changes

We may update this policy; material changes will be posted here with a new effective date.

12. Contact & governing law

Questions: info@yourproxy.ai. This policy is governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules.