foxd.ioLast updated: October 12, 2026
This policy explains how Foxd Inc. ("foxd.io", "we", "us") collects, uses and protects personal information when you visit www.foxd.io, contact us, or use our dashboard and services. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information We Collect
- Contact form messages. Your name, email address and the message you send us.
- Visitor analytics. See Analytics below.
- Customer accounts. If you are a customer, the details you give us to set up and run your services, such as your name, business name, email address and billing information.
- Google and Facebook connections. See Connected Google and Facebook Accounts below.
- Server logs. Our hosting provider keeps standard request logs, including IP addresses, for security and troubleshooting.
How We Use Information
- To reply to your messages and provide the services you ask for.
- To understand how our website is used and to make it better.
- To find technical problems and keep our services secure.
- To send invoices and service notices to customers.
- To meet our legal obligations.
We do not sell your personal information or use it for advertising. We send customers only service emails, such as invoices and notices about their account. We do not send marketing emails. If we start to, we will ask for your consent first, and every message will have a way to unsubscribe.
Analytics
We use our own first-party analytics, on our website and on the customer websites we host. It does not use cookies or third-party advertising trackers.
For each page view, we record the page, the referring website, your IP address, the country derived from it, and your browser, operating system and device type. Your browser stores a random visitor ID in local storage and a session ID in session storage, so that we can tell visitors and visits apart. These IDs are not linked to your name or email address, but they can count as personal information under privacy law.
We use this information to measure how a website is used, find technical problems and filter out bots. We delete analytics records after 365 days. The visitor ID stays in your browser until you clear this site's data in your browser settings, which also stops us from linking your future visits to past ones.
Customer Websites
We host websites, analytics, contact forms and online stores for our customers. For data collected on a customer's website, the customer controls that data and we process it for them, following their instructions. The customer is responsible for telling their visitors how it uses their information and for getting any consent the law requires. If you have a question about a website we host for someone else, contact the owner of that website first.
Online payments on customer stores go through Stripe, which handles card details under its own privacy policy. We do not receive or store card numbers.
Connected Google and Facebook Accounts
Customers can connect their Google Business Profile, Facebook Pages and linked Instagram business accounts to their dashboard. You choose to connect an account, and you can disconnect it at any time.
What We Access
- Google. Your Google account ID and email address, and access to manage your Business Profile. We use this access to show and manage your business listing in your dashboard, for example your business details and reviews.
- Facebook and Instagram. Your Facebook user ID and name, and read-only access to the Pages you manage, their posts, ratings and reviews, and the Instagram business accounts linked to them. We use this access to show that information in your dashboard.
What We Store
We store the account ID, account name, the permissions you granted, and the access tokens Google or Meta give us. We encrypt the tokens before we store them. We do not keep copies of your listings, posts, ratings or reviews. We get them from Google or Meta when you view them in your dashboard.
How We Share It
We use this data only to provide the features you see in your dashboard. We do not sell it, use it for advertising, or give it to anyone else, except when the law requires it. People at foxd.io do not read this data unless you ask us to, it is needed for security, or the law requires it.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting
When you disconnect an account in your dashboard, we delete its tokens and account details from our database. Copies in our backups are deleted within 7 days. Disconnecting does not remove the permission you gave in your Google or Facebook account. To remove it, see our data deletion instructions.
Where We Store Information
We store information with Google Cloud in the United States. Stripe processes payments for customer stores. When you connect a Google or Facebook account, we send requests to those platforms on your behalf. These providers can use the information only to provide their services to us. Information stored outside Canada is subject to the laws of the country where it is stored.
Retention
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires.
- Analytics records. 365 days.
- Contact messages. Until the website owner deletes them, or their account is closed.
- Customer account details. While the account is open. We delete them when the account is closed.
- Invoices and billing records. Six years, as Canadian tax law requires.
- Google and Facebook tokens. Until you disconnect the account, or your account is closed.
- Server logs. 30 days.
- Database backups. We keep the last 3 daily backups, so deleted data leaves our backups within 7 days.
Security
We serve all pages over HTTPS, encrypt database connections, and limit access to personal information to people who need it to do their work. No system is perfectly secure, but we take reasonable steps to protect your information.
If a breach of security affects your personal information and creates a real risk of significant harm, we will tell you and the Office of the Privacy Commissioner of Canada as soon as possible, as the law requires.
Your Rights
You can ask to see the personal information we hold about you, to correct it, or to delete it. You can also withdraw your consent to how we use it, subject to legal or contract limits. To make a request, email our Privacy Officer. We will reply within 30 days. If you are not satisfied with our reply, you can complain to the Office of the Privacy Commissioner of Canada.
Children
Our services are for businesses. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We can change this policy from time to time. When we do, we update the date at the top of this page. We tell customers about important changes by email before they take effect. The Terms of Service also apply to your use of our website and services.
Privacy Officer
Our Privacy Officer is responsible for our privacy practices and answers questions, complaints and requests about personal information.
Allan Legemaate, Privacy Officer
Foxd Inc.
contact@foxd.io