Privacy

The short version: we do not keep what you write. Your text passes through us on its way to your inbox and is then gone.

What we never store

• The words in your texts. There is no column in our database for the body of a message. There never has been, and a test in our code fails the build if anyone adds one.
• Your photos and other attachments, except in the one case below.
• The contents of your email. We send mail to you. We cannot read your mailbox and we never connect to it.

Where your message actually goes

1. Your carrier delivers the text to our phone number.
2. It waits in a processing queue for a few seconds, holding the words and any photo, only long enough to build the email.
3. The email is sent to your confirmed address, and the queued copy is discarded.
4. The one exception: a photo too large to attach to an email is placed in private file storage so we can email you a download link instead. Those files are deleted automatically after 7 days. Nothing else is ever kept there.

What we do store

• Your name, as you gave it during setup.
• Your email addresses and their handles, and whether each has been confirmed.
• The phone numbers bound to your account.
• For each message: the time, the sending phone number, which address it went to, how many attachments it had, and whether it was delivered. Not the contents.
• Your Stripe customer and subscription identifiers. We never see or hold your card number; Stripe does.

People who text your Forwrd Personal number

With Forwrd Personal, other people can text your own number. For people who text your Forwrd Personal number we keep only what it takes to deliver and answer those texts:

• for each text, the time, the sender's phone number and whether it was delivered to you — never the words;
• a one-way hash of the private reply address in each forwarded email, kept 90 days, so your emailed reply can reach the right person;
• for each reply you send, the time and whether it was delivered — never the words;
• whether a sender has texted STOP to your number, so we never text them again until they text START.

Their messages are handled exactly like yours: held only long enough to build the email, never written to our database and never logged.

Our logs

Our logs redact automatically, before anything is written. Message bodies are replaced with a character count, phone numbers with +1********34, and email addresses with c***@example.com. Sign-in codes are stored only as a one-way hash, so even we cannot read them back.

Who else sees your data

Only the suppliers it takes to run the service, and only the part each one needs:

• Our telephone carrier carries the text itself, as a carrier does for every text anyone sends.
• Cloudflare runs our software and sends the email.
• Stripe handles payment.

We do not sell your data, share it for advertising, or pass it to data brokers, affiliates or any other third party. We disclose information only where a valid legal order compels us, and there is very little to disclose.

Email goes only where you proved you can read

Every address must be confirmed with a code we email to it before Forwrd will forward anything there. That is why there is no way to make this service mail a stranger.

Deleting your account

Text @cancel for the billing page, or email support@forwrd.email and ask us to delete everything. We remove your account, addresses, phone bindings and message history within 30 days. Billing records that tax law requires us to keep, we keep.

Children

Forwrd is not for anyone under 13, and we do not knowingly create accounts for them.

Changes

If we change this page in a way that matters, we will email account holders before it takes effect. Questions: support@forwrd.email.

Read the SMS policy for how the texting itself works, including STOP and HELP.