You are handing us
your correspondence.
So this page is written plainly, with the uncomfortable parts left in. If anything here is not what you expected, do not connect a mailbox.
1. What Hank reads
Every message on the mailboxes you connect. Not a sample, not the ones we judge important — all of them, including their attachments. That is the product: an assistant that has read nothing is an assistant that knows nothing.
It reads the sender, recipients, subject, body, dates and attachments of every message that arrives, and of the mail you have sent. If you connect Google Calendar, it reads and writes your events. Nothing else on your Google account is touched.
Hank shows you only what needs you and stays silent on the rest — but silence is not the same as not having read it. Assume Hank has read everything on a connected mailbox, because it has.
2. What it keeps, and for how long
- Messages and what Hank concluded about them — kept until you remove them or delete your account.
- Attachments — held for 30 days and then deleted automatically. If you file one to the Filing Cabinet it becomes permanent and stays until you remove it.
- Contacts, lists, bills, workspaces, drafts, bookings — until you remove them or delete your account.
- Mailbox credentials — your IMAP password or your Google refresh token, encrypted, until you disconnect or delete your account.
3. Who can see it
Other customers cannot. Every read is scoped to your account, enforced server-side; a request that reaches for another account's data is refused rather than filtered.
We do not read your mail in the ordinary course of business. There is no support tool, no inbox viewer, no dashboard through which anyone at Hank browses customer correspondence. None exists.
The honest limit: Hank is a small company, and its engineers hold administrative access to the database that stores your data, as is true of every provider you have ever used. That access is not used to read customer mail. It exists to fix faults, and it is the reason the paragraph above says "in the ordinary course" rather than "never".
We do not sell your data, and we never will. We do not share it with advertisers, brokers or partners. We do not train any model of our own on your mail.
4. The companies we rely on
Hank is built on other people's infrastructure. These are all of them, and what each one touches:
| Who | What they process | Where |
|---|---|---|
| Google Cloud Firestore, Cloud Storage, Cloud Run | Everything Hank stores: messages, attachments, contacts, documents. | United States us-east4 · us-east1 |
| Google Vertex AI | The content Hank reasons over — message text and attachments — is sent to Google's models to be understood. Under Google Cloud's terms this content is not used to train Google's models. | Google's global endpoint see §5 |
| Google Workspace APIs Gmail, Calendar | Only if you connect Google. Reading your mail and calendar, and sending on your behalf. | United States |
| Firebase Authentication | Your login. | United States |
| Crossdeck | Product analytics, error reports and your subscription status. Not your mail, your documents or your contacts. | United States |
| Stripe | Payment, when you subscribe. Hank never receives or stores your card details. | United States |
| Telegram | Only if you connect it. Messages you exchange with Hank there pass through Telegram. | Telegram's infrastructure |
Mail that Hank sends leaves from your own account, through your own mail provider. It does not pass through a third-party sending service, and it does not come from us.
5. Where your data physically sits
Stored data is held in the United States: Firestore in us-east4 (Northern Virginia) and file storage in us-east1 (South Carolina).
Model processing is not currently pinned to a single region. Hank calls Vertex AI on Google's global endpoint, which routes a request to available capacity, which may be outside the United States. If your professional obligations require processing in a named jurisdiction, ask us before you connect a mailbox — we can pin it, and we would rather have that conversation than have you assume.
6. Your rights over it
- Take it with you. Export your filed documents at any time, whether your subscription is active or not.
- Delete all of it. Settings → Delete everything. This removes your account, every message Hank read, every document it filed, your contacts, lists and workspaces, and your stored credentials. Your Google access is revoked at Google, not merely forgotten here. There is no copy and it cannot be undone.
- See it, correct it, object to it. Write to us and we will answer.
Deletion is available whether or not you are paying. A right to your own data that stops working when you stop paying is not a right.
7. If something goes wrong
If your data is accessed without authorisation, we will tell you. Under South Africa's Protection of Personal Information Act we are required to notify the Information Regulator and the people affected, and we will do so as soon as we reasonably can — not when it is convenient.
8. What we do not claim
Hank does not hold SOC 2, ISO 27001 or any comparable certification. We are a young company and we have not been audited. We have said what we actually do in §3, §4 and on the security page, so that you can judge it yourself rather than take a badge on trust.
We will not tell you our encryption is "military grade". We have said exactly which algorithm protects your credentials and where the key lives.
9. Children
Hank is a business tool and is not intended for anyone under 18.
10. Changes
If we change how your data is handled in any way that matters, we will tell the people it affects before it takes effect — not by quietly changing the date at the top of this page.
11. Contact
Privacy questions, requests, and complaints: privacy@digitalhank.com.
Hank is operated by Crossdeck, out of South Africa.
12 Ibis Lane, Fourways, Sandton, 2115, South Africa.
Complaints come to us first, at privacy@digitalhank.com. If you are in South Africa you may also complain to the Information Regulator; if you are in the EEA or the UK, to your local supervisory authority.