What Found can see, and what it can't.
Found reads your email, Slack and money so it can tell you the few things that need you. That's a lot to hand over, so here's exactly what it does with all of it. If anything on this page stops being true, I'll update it before the code changes.
It reads. It doesn't act on its own.
Found never sends, pays, archives or deletes anything unless you press the button.
- Replies go out only when you press Send, from your own Gmail, so they look like you because they are you.
- Archive moves an email out of your inbox. Nothing is ever deleted.
- Your morning brief is emailed from you, to you. Nobody else gets a copy.
Every money and chat connection is read-only.
You make the key, so you can see exactly what it allows and take it back whenever you like.
- StripeA restricted key that can read customers, subscriptions and invoices. It can't charge, refund or change anything.
- WiseA read-only token. It sees balances and transactions, and it can't send money or add anyone to pay.
- SlackYour own Slack app with read permissions only, so Found can't post, react or change a thing. If you want the brief in Slack, it goes through a separate webhook that can only post to the one place you pick.
- XeroYour own Xero app, asking only for read access.
- ShopifyYour own app with read access to orders. Found never touches your store.
- CalendarA private calendar link, which can only be read.
Where your data lives.
- Your email, file text and labels sit in your own Found database. It isn't shared with anyone else's.
- Passwords and keys are encrypted with AES-256 before they're saved, so a copy of the database alone can't unlock your accounts.
- Getting in takes a code sent to your email and your password. Sessions end on their own after 30 days, and you can sign out everywhere at once.
Who else sees it.
- TypeSafeTo label and search your email, Found sends the text to Jev, a model from TypeSafe. It's used to sort things, never to write anything.
- AnthropicOnly if you turn on AI answers, with your own key. Then your question and the emails and messages that answer it go to Claude. It's off until you switch it on.
- Nobody elseFound doesn't sell your data, show you ads or share it with anyone.
Leaving is easy.
- Disconnect Stripe, Wise, Slack, Xero or Shopify in Settings and Found deletes the key and what it pulled from there straight away.
- Want your whole Found gone? Message me and I'll delete it.
This website.
- Joining the waitlist saves your email, first name, the kind of business you picked, your time zone and who invited you. No IP addresses.
- Visits are counted without cookies. Each visitor is a scrambled code that changes every day, so nobody can be followed from one day to the next.
Spotted a problem?
Please tell me privately first. How to reach me is in our security.txt, and I'll reply as soon as I see it.