Security
What Flaiir can touch, and what it can't.
You give Flaiir access to your mailbox. This page says exactly what that access is for, and how to take it back.
What Flaiir asks for
| Where | Access | What for |
|---|---|---|
| Gmail and Google Workspace | gmail.modify | To send warm-up emails and move Flaiir's own messages out of spam. |
| Outlook and Microsoft 365 | Mail.ReadWrite, Mail.Send | The same, through Microsoft's sign-in. Microsoft no longer allows passwords for mail. |
| Other providers | App password or mailbox password | Used only to sign in to the mailbox over encrypted IMAP and SMTP. |
| DNS (Cloudflare) | The records you approve | Flaiir shows the exact records first. Nothing changes until you approve on Cloudflare's screen. |
What it never does
- Opens only the warm-up emails it sent, found by their own message ID. It never lists, reads or changes your other mail.
- Never holds a password for your DNS host. Changes go through the host's own approval screen.
- Sends nothing beyond the day's warm-up and the limits you set.
What it stores
- Mailbox passwords and sign-in tokens, encrypted with AES-256-GCM, until you disconnect.
- The warm-up emails Flaiir sent and received, and where each landed.
- Your daily numbers and the reason for each.
How to take access back
- Pause a mailbox to stop warm-up on the next send, or use the kill switch for a mailbox, a domain or everything.
- Disconnect a mailbox in Flaiir. Its password or token is deleted straight away, planned mail is cancelled, and it leaves the network.
- For Google, disconnecting also revokes Flaiir’s token with Google. You can check at myaccount.google.com/permissions.
- Microsoft has no way for an app to revoke its own token, so also remove Flaiir from the apps that can access your Microsoft account. For a work account, your admin manages this.
Questions about security: mamadou@flaiir.co