Effective September 25, 2026.
Who is responsible
FIVEACES INC. operates Franked and is responsible for personal information it handles. Questions and requests go to privacy@franked.email.
What we collect
From recipients
- Your Franked address, delivery address, settings and allowlist.
- Records of messages held and delivered for you, including sender address, subject, amounts and status.
- Sign-in records needed to keep your session secure.
From senders
- The email you sent, held until it is delivered, discarded or expires.
- Your email address and the authentication results of your message, used to decide whether to send a payment notice.
- Payment status. Card details are handled by Stripe. We never see or store your card number.
Why we use it
To hold and deliver mail, send payment notices and sign-in links, process payments and refunds, prevent abuse and fraud, and keep the service running. We don't sell personal information, and we don't use message contents for advertising or to train models.
How long we keep it
- Held messages are deleted when they are delivered, discarded, or when the recipient's hold period ends (30 days by default).
- Delivered messages live in the recipient's own inbox, not with us.
- Payment and donation records are kept as long as tax and accounting law requires.
- Sign-in links expire after 15 minutes. Sessions end after 30 days or when you sign out.
Who we share it with
- Cloudflare receives, stores and sends mail and hosts the service.
- Stripe processes payments and refunds.
- Delivered messages are sent to the recipient's email provider.
These providers may process data outside Canada, including in the United States, where it may be accessible to authorities under local law.
Your rights
You can ask to access or correct your personal information, or ask us to delete it where we are not required to keep it. Recipients can close their address at any time. Write to privacy@franked.email. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.
Security
Data is encrypted in transit, sign-in uses single-use links, and only hashes of sign-in links and sessions are stored.
Changes
We will post updates here and change the effective date.