Privacy Policy

Last updated: April 11, 2026

What We Collect

FoxChat collects the following data from visitors who interact with the chat widget:

• Messages: Text content of conversations between visitors and the AI agent or human operators.
• Page visits: URLs and durations of pages visited on the host site, used for context and analytics.
• Email address: Only if voluntarily provided by the visitor during conversation or via the email capture prompt.
• Device information: Browser type, approximate location (from IP, not stored), and a random visitor fingerprint for session continuity.
• Behavioral data: Typing patterns and mouse movement data used exclusively for spam detection (never stored long-term).

How Data Is Stored

• All data is stored in Supabase (PostgreSQL) with encryption at rest and in transit (TLS 1.3).
• Data is hosted in secure cloud infrastructure with SOC 2 compliant providers.
• Visitor fingerprints are random identifiers, not device fingerprints — they cannot identify a person.

How Data Is Shared

• Never sold. We never sell visitor data to third parties.
• Spam defense: When a message is flagged as spam, an anonymous content hash and visitor fingerprint are shared with our community spam intelligence network. This data cannot identify any individual.
• Site operators: The business that installed FoxChat on their site has access to conversation data for their own visitors.
• AI providers: Messages are sent to OpenAI (GPT-4o-mini) and/or Anthropic (Claude) for generating responses. These providers do not use the data for training.

Cookies and Local Storage

FoxChat does not use cookies. We use browser localStorage for:

• foxchat_vid — A random visitor ID for session continuity
• foxchat_dismissed — Whether the visitor closed the widget
• foxchat_dnd — Do-not-disturb preference (24-hour expiry)
• foxchat_email_dismissed — Whether the email capture was dismissed

GDPR Compliance

• Visitors can request deletion of their data by contacting the site operator or emailing privacy@getfoxchat.com.
• Site operators can delete visitor records and conversations from the FoxChat admin panel.
• Data is retained for the duration of the customer's subscription. Upon account deletion, all data is permanently removed within 30 days.

Contact

For privacy questions: privacy@getfoxchat.com