No inbox scanning, no training on your data, and an export button that always works. Here is plainly where your data lives, who can see it, what happens to it, and how to get it back.
Ifarlo asks for two things from Google or Microsoft: permission to read your calendar, and permission to send an email on your behalf. It does not ask for, and cannot obtain, access to read your mail. No mailbox scanning, no message history, nothing.
When you approve a follow up, it goes out through your own account and lands in your Sent items. Your client sees an email from you, and their reply arrives in your inbox where Ifarlo cannot see it.
Ifarlo drafts. You read it, change it if you want, and send it. It never sends a one to one email on its own.
Anything Ifarlo works out from a note or an email is shown to you first, as a list you can edit, approve or throw away. It becomes a record only when you say so.
Ifarlo uses Anthropic's Claude under commercial terms. Your customer data is never used to train any AI model, by us or by anyone else.
Your records are stored in London, on infrastructure in the UK. When you use an AI feature, the relevant text is sent to Anthropic for processing under commercial terms and is never used to train a model.
Everything on disk is encrypted with AES 256, including backups. Every connection uses TLS 1.2 or higher. Your Google and Microsoft connection tokens get a second layer of encryption applied by Ifarlo before they are written to the database, so they are unreadable even to someone holding the database.
Passwords are checked against public breach databases, so a password that has already leaked somewhere else is rejected. Five failed attempts locks the account for fifteen minutes. Sessions expire and are held in cookies that page scripts cannot read.
Your database is backed up every day, encrypted, and stored separately from the live database.
Running Ifarlo means a small number of suppliers process data on our behalf. This is all of them.
Supabase, database and file storage. Vercel, application hosting. Anthropic, AI features. Resend, sending email. Stripe, payments, and card details never reach Ifarlo. Sentry, error monitoring. Inngest, background jobs.
That is the complete list. We do not sell data, share it with advertisers, or use it for anything other than running Ifarlo for you.
Your workspace stays available to export for 30 days after you cancel, then it is deleted along with its backups.
Every workspace is isolated at the database level, not just in the interface. One customer's records can never be reached from another customer's account.
Disconnect Google or Microsoft in one click. Access is revoked immediately.
Export any list to a spreadsheet, or your whole workspace in one file, at any time. There is no export fee and no notice period.
If a customer asks to be erased, there is a permanent erase built into the product. It removes the record and its data for good, keeping only a dated note that an erasure happened, with no personal information in it.
Ifarlo Ltd, registered in England and Wales, company number 17251655. A data processing agreement is available on request.
Not yet, and we do not have a certification badge to show you. We are a young company and formal certification is on the roadmap. In the meantime, email hello@ifarlo.com with any security question and you will get a real answer from a person, not a link to a portal.
Email hello@ifarlo.com and it comes straight to me. I will reply within two working days.
Last reviewed August 2026.
Any question we have not answered? Email hello@ifarlo.com