friday
Privacy
Last updated: April 22, 2026
What we store
To generate your weekly follow-up queue we store message metadata and bodies from your connected Gmail account (via Nylas), your calendar events (via Nylas), and — if you connect it — your meeting transcripts (via Fireflies). We also store the people you correspond with, our extracted commitments and follow-up candidates, and the audit log of drafts you send through Friday.
What we never do
- We don't sell your data.
- We don't train models on your emails.
- We don't share it with other Friday customers.
- We don't read it except to extract commitments and generate the weekly digest.
Where your data lives
- First-party storage: Neon Postgres (US-West), Vercel runtime + logs, Railway worker + logs.
- Nylas — stores a copy of messages/events we sync. Governed by Nylas's privacy policy.
- Anthropic — message snippets are sent to Claude Haiku for commitment extraction. Per Anthropic's policy, prompts and completions are not used for training.
- Resend — transactional email (the weekly digest). Resend retains email logs per their policy.
- Fireflies (optional) — stores your meeting transcripts on their servers. We only read them.
Deleting your data
You can request deletion any time from the settings page. We'll purge your data from our first-party storage (Neon, Vercel logs, Railway logs) within 24 hours.
We cannot guarantee 24-hour deletion from third-party services we integrate with. Nylas, Resend, Anthropic, Sentry, and Fireflies each have their own retention windows (typically 30–90 days). You can disconnect Nylas/Fireflies from our settings page — that stops all future data flow to us and to them.
Security
All connections use TLS. Row-level security in Postgres enforces tenant isolation — each DB query runs under a downgraded role with your user ID pinned to the session, so one customer cannot read another's data even through a compromised API path. Fireflies API keys are encrypted at rest with libsodium. Nylas OAuth grants live only in Nylas; we store only the grant ID.