Privacy Policy

The short version. Proxy runs on your device. Your mail, calendar, and Life Map stay on your hardware. We do not sell, rent, or trade your data. We do not read your email, your calendar, or your Life Map. We do not use your data to train models. The sections below are the longer version and carry the formal weight.

What runs on your device. Proxy is a personal AI operating system with desktop and mobile applications. When you connect accounts (Google, iMessage, or others), OAuth tokens are stored in the secure enclave of your device (macOS Keychain or the iOS/iCloud Keychain equivalent). Data synced from those accounts (email threads, calendar events, contacts, and the graph of your people, ideas, and plans) lives in your local Life Map, on your device. Your agents act on that data from your device. None of it is uploaded to The Proxy Company's servers to deliver the core service.

Google Account data. When you choose to connect your Google account to Proxy, Proxy accesses your Gmail messages, drafts, and labels, and your Google Calendar events, solely to enable your personal AI agents to read, search, summarize, draft, and send email, and to view, schedule, and manage calendar events at your direction. Access is scoped to the OAuth grants you approve at connect time: currently read, compose, and send for Gmail, and read and write for Google Calendar.

Google API Limited Use disclosure. Proxy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, The Proxy Company does not use Google user data for serving advertisements, does not allow humans to read your Google user data unless we have your affirmative agreement for specific messages or it is necessary for security or legal compliance, and does not transfer or use Google user data to train generalized third-party cloud AI/ML models. You may revoke Proxy's access at any time from Proxy's Accounts settings or at myaccount.google.com/permissions, and request deletion of any associated metadata by contacting team@theproxycompany.com.

iMessage, other integrations. Proxy may ask for system-level access to other on-device sources (iMessage via macOS Messages, local files, or third-party services you explicitly connect). Each integration requests only the permissions needed for the corresponding feature, and only at the point where you turn it on. Each new integration added to Proxy in the future will be listed in this section with a plain-English account of what is accessed and why, before it ships.

What we collect on our own website. The Proxy Company website collects only the minimum needed for it to function. If you join the waitlist, we store your name, email address, intended use, and the social handle or link you share with us in our private company dashboard to review requests and manage early access. Earlier signups may also include company details they chose to provide. We use privacy-respecting analytics on our own marketing pages to understand aggregate traffic; no advertising trackers and no cross-site profiling.

What we never do. We do not sell, rent, or share user data with third parties for their own purposes. We do not display advertising. We do not read your email, drafts, or Life Map, whether on our own systems or through any vendor. We do not contribute your data to any training pipeline (ours or anyone else's), and we do not share it with model providers as training data. When our agents call cloud models to complete a task, the request contains only the context needed for that task, and for no longer than that task takes.

Subprocessors. The Proxy Company does not use third-party subprocessors to store or process your Google user data or Life Map contents. When a Proxy feature requires a cloud call (for example, a frontier model invocation you explicitly choose), the payload is limited to the content of that single request, is not retained by the provider beyond the call, and travels over TLS. The current list of cloud providers in use is maintained on this page; as of October 2026, it consists of frontier model API endpoints covered by their respective zero-retention API terms.

Data retention. Because the core service operates on your device, we do not retain your email, calendar, or Life Map on our systems at all. On our own website, we retain waitlist entries until you unsubscribe or ask us to remove them. Backups of our website's minimal operational data are retained for up to 90 days. If we ever expand what we collect, this page will be updated at the time of collection, before it takes effect.

Security and breaches. Local data is encrypted by FileVault on macOS and the iOS data protection stack on your mobile devices. OAuth tokens are protected by macOS Keychain. Access to our own servers is limited to a small, named set of administrators under hardware-key two-factor. If we ever become aware of a breach affecting data we hold on our own systems (for example, waitlist records), we will notify affected individuals by email within 72 hours of confirmation.

Children's privacy. Proxy is not directed at children under 18 and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has provided us personal data, contact team@theproxycompany.com and we will delete it.

Your rights. Regardless of where you live, you can ask us what personal data we hold about you, ask us to correct or delete it, object to a specific use, or opt out of any communications. Write to team@theproxycompany.com and we will respond within 30 days. For users in jurisdictions with additional statutory protections (GDPR, CCPA, CPRA), those protections apply as required by law, and the contact point above is sufficient to exercise them.

Your choices. You can disconnect any connected account from Proxy's Accounts settings at any time. For Google specifically, revocation is also available from myaccount.google.com/permissions. To stop emails from The Proxy Company, reply "stop" or write to team@theproxycompany.com. To ask us to delete your waitlist entry or any other personal data we hold on our own systems, contact team@theproxycompany.com. Your local data stays on your device under your control.

Changes to this policy. We may update this Privacy Policy from time to time. The current version and the date it was last changed are always posted at the top of this page. Material changes that affect Google user data will be announced to connected users before they take effect.

Governing law. This policy is governed by the laws of the State of New York, excluding its conflict-of-law provisions, without regard to your jurisdiction of residence.

Contact. The Proxy Company is based in Brooklyn, New York. Privacy questions, deletion requests, or anything else: team@theproxycompany.com.

Return to Proxy ↗