Privacy notice

This notice is for people who visit https://getenvoy.me, join the Windows beta, or run the Envoy desktop app. Envoy is a local-first product operated as an early-access project. We do not claim SOC 2, ISO 27001, or similar certifications.

Classification and optional drafts run on your Windows PC. Mail bodies are not sent to an Envoy-hosted inference API.

The app still uses the internet for:

• Azure CDN — Windows updater and classifier catalog / model bytes
• Google — Gmail OAuth and Google Calendar, when you connect those
• Microsoft Graph — Outlook Calendar only, when you enable it (Outlook mail is not in this beta)
• Hugging Face — if you download a catalog language model
• A BYO OpenAI-compatible endpoint — only if you opt in after the in-app privacy warning
• Envoy-Auth, our sign-in broker, exchanges and refreshes Google and GitHub tokens. It never sees your mail.

Tokens, settings, mailbox cache, and downloaded models persist on your disk. That is not “zero persistence” and not “zero cloud.”

An account holds your name, email, sign-in provider, beta waitlist status, and the PCs registered to your license. We email sign-in links and beta approvals from noreply@getenvoy.me. Your mail, calendar and chats are not part of the account. We do not sell signup lists.

Sessions store your IP address and user agent. Sign-in stores the provider’s access, refresh and ID tokens. Account emails are sent through Resend. GitHub is a sign-in option.

We set a session cookie when you sign in, and a short-lived cookie (15 minutes) that ties an emailed sign-in link to the browser that requested it. Neither is an advertising identifier.

You can ask us to confirm, correct, or delete the beta email we hold, or to stop using it for tester updates. Open a request at GitHub Issues. You may also lodge a complaint with your local data-protection authority.

Envoy is not directed at children under 16. Do not join the beta with a child’s email.

We will update this page when the product’s data flows change. The date at the top is the latest revision.