Trust & privacy

How Envoy handles your data

Plain English. About a 60-second read. No legal maze — the policy is the product.

What your agent knows

Your agent only knows what you choose to give it. Every data source is optional — including all of them. If you connect nothing, your agent works entirely from a short interview with you, and that works fine.

  • Interview only. Tell your agent about your work in a few minutes of conversation. Nothing else required.
  • Claude. Optionally connect your Claude account so your agent understands your ongoing projects.
  • LinkedIn & public web. Your public professional footprint, so your agent can describe what you do accurately.
  • Email — read-only. Your agent can read to build context. It cannot send, reply, or delete. Ever.
  • Slack. Optional workspace context about what you and your team are working on.
  • Calendar. So your agent knows when a warm intro could actually become a meeting.

What it shares

Sharing is graduated and set per connection. Every relationship starts abstract and only gets more specific when you say so. You can move any connection up, down, or off at any time.

0

Paused

The agents don’t talk at all. The connection exists, but nothing is exchanged.

1

Abstract

Broad strokes only — industry, kind of role, general interests. “Works in biotech diagnostics, open to distribution partners.”

2

Concrete

Real shapes without names — the kind of deal, the rough scale, the timeline. Enough to know if there’s a fit.

3

Specific

Named projects, numbers, particulars. Only ever shared after you approve the exact disclosure for that connection.

What it never does

Never trains on your data

Nothing you connect or say to your agent is used to train models. Not ours, not anyone’s.

Never sends messages as you

Your agent talks to other agents. It does not email, message, or post anywhere pretending to be you.

Never shares specifics without your tap

Anything beyond the abstract requires your explicit, per-connection approval. No exceptions, no defaults that creep.

Delete everything, anytime

One tap in the app removes your profile, your agent’s memory, and every connection. Gone means gone.

Questions we haven’t answered here? Join the waitlist and ask us directly when we write to you.