No inbox scanning, no training on your data, and an export button that always works. Here is plainly where your data lives, who can see it, what happens to it, and how to get it back.
Ifarlo asks for two things from Google or Microsoft: permission to read your calendar, and permission to send an email on your behalf. It does not ask for, and cannot obtain, access to read your mail. No mailbox scanning, no message history, nothing.
When you approve a follow up, it goes out through your own account and lands in your Sent items. Your client sees an email from you, and their reply arrives in your inbox where Ifarlo cannot see it.
Ifarlo drafts. You read it, change it if you want, and send it. It never sends a one to one email on its own.
Anything Ifarlo works out from a note or an email is shown to you first, as a list you can edit, approve or throw away. It becomes a record only when you say so.
Ifarlo uses Anthropic's Claude under commercial terms. Your customer data is never used to train any AI model, by us or by anyone else.
Your records are stored in London, on infrastructure in the UK. When you use an AI feature, the relevant text is sent to Anthropic for processing under commercial terms and is never used to train a model.
Everything on disk is encrypted with AES 256, including backups. Every connection uses TLS 1.2 or higher. Your Google and Microsoft connection tokens get a second layer of encryption applied by Ifarlo before they are written to the database, so they are unreadable even to someone holding the database.
Passwords are checked against public breach databases, so a password that has already leaked somewhere else is rejected. Repeated sign-in attempts are rate limited to slow down automated guessing. Sessions expire and are held in cookies that page scripts cannot read.
Your database is backed up every day and the backups are encrypted.
Running Ifarlo means a small number of suppliers process data on our behalf. This is all of them.
Supabase, database and file storage, in London. Vercel, application hosting, in London. Anthropic, AI features, in the United States and other countries where Anthropic operates. Resend, sending email, sent from Ireland with records held in the United States. Sentry, error monitoring, in the EU. Inngest, background jobs, in the United States. Stripe, payments, and card details never reach Ifarlo.
Supabase and Vercel are both SOC 2 Type 2 and ISO 27001 certified. Those are their certifications, not ours.
That is the complete list. We do not sell data, share it with advertisers, or use it for anything other than running Ifarlo for you.
Your workspace stays available to export for 30 days after you cancel, then it is deleted. Backups expire on their normal cycle shortly after that.
Every workspace is kept separate. Database rules enforce this for every signed-in user, and our background processes apply the same separation. One customer's account cannot see another customer's records.
Disconnect Google or Microsoft in one click. Access is revoked immediately.
Export any list to a spreadsheet, or your whole workspace in one file, at any time. There is no export fee and no notice period.
If someone asks to be erased, an Admin can permanently erase that person or company and their linked activity. Ifarlo keeps only a dated note that an erasure happened, with no personal information in it. If their details also appear elsewhere, such as a past campaign send or calendar invite, email us and we will remove those too.
Three roles, Admin, Manager and User, control who can see and change what.
If your data is ever affected by a security incident, we will tell you without undue delay, and where feasible within 72 hours.
Ifarlo Ltd, registered in England and Wales, company number 17251655. A data processing agreement is available on request.
Not yet, and we do not have a certification badge to show you. We are a young company and formal certification is on the roadmap. In the meantime, email hello@ifarlo.com with any security question and you will get a real answer from a person, not a link to a portal.
Email hello@ifarlo.com and it comes straight to me. I will reply within two working days.
Last reviewed October 2026.
Any question we have not answered? Email hello@ifarlo.com