Effective September 25, 2026.
Who is responsible
FIVEACES INC. operates Franked and is responsible for personal information it handles. Questions and requests go to privacy@franked.email.
What we collect
From recipients
- Your Franked address, delivery address, settings and allowlist.
- If you join the waitlist, your email address, used only to tell you when your address is ready.
- Records of messages held and delivered for you, including sender address, subject, amounts and status.
- Sign-in records needed to keep your session secure.
From senders
- The email you sent, held until it is delivered, discarded or expires. It is encrypted while held.
- Your email address and the authentication results of your message, used to decide whether to send a payment notice.
- Payment status. Card details are handled by Stripe. We never see or store your card number.
Why we use it
To hold and deliver mail, send payment notices and sign-in links, process payments and refunds, prevent abuse and fraud, and keep the service running. We don't sell personal information, and we don't use message contents for advertising or to train models.
How long we keep it
- Held messages are deleted as soon as they are delivered, discarded, or when the recipient's hold period ends (30 days by default).
- For paid messages, the sender address, subject and payment details are kept with the payment record.
- Delivered messages live in the recipient's own inbox, not with us.
- Payment and donation records are kept as long as tax and accounting law requires.
- Sign-in links expire after 15 minutes. Sessions end after 30 days or when you sign out.
Who we share it with
- Cloudflare receives, stores and sends mail and hosts the service.
- Stripe processes payments and refunds.
- Delivered messages are sent to the recipient's email provider.
These providers may process data outside Canada, including in the United States, where it may be accessible to authorities under local law.
Your rights
You can ask to access or correct your personal information, or ask us to delete it where we are not required to keep it. Recipients can close their address at any time. Write to privacy@franked.email. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.
Security
Mail reaches us over an encrypted connection wherever the sending server supports it, and franked.email publishes an MTA-STS policy that requires one from sending servers that support it. Held messages are encrypted with a separate key for each message. Message contents are never written to logs. Sign-in uses single-use links, and only hashes of sign-in links and sessions are stored.
Franked must receive a message readable in order to hold and deliver it, as any email service does. Mail the sender encrypts with PGP or S/MIME is delivered unmodified and stays encrypted end to end.
Changes
We will post updates here and change the effective date.