FoxNose Ltd. Privacy Policy

1. Introduction

FoxNose Ltd. ("we," "our," or "us"), a company registered in Singapore, is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your data when you use our Software-as-a-Service (SaaS) B2B service, FoxNose, accessible at foxnose.net, its subdomains, fxns.io, and its subdomains (the "Service"). This policy applies to all users of the Service, including individuals and legal entities engaging with our platform.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data, such as collection, storage, or deletion.
• Controller: The entity that determines the purposes and means of processing personal data (FoxNose Ltd.).
• Processor: An entity that processes personal data on behalf of the controller.

3. Data Collection

We collect the following types of data:

• User Information: Name, email address, company name, and other details provided during registration or account setup.
• Usage Data: Information about how you use the Service, including IP address, browser type, and interactions with the Service, collected to improve quality, fix vulnerabilities, and support further development.
• Project Data: Data added by users to their projects within the Service.

Data is collected through:

• Registration and account creation.
• Use of the Service, including interactions and inputs.
• Cookies and similar tracking technologies (see Section 10).

4. Data Storage and Location

• User and Legal Entity Data: Stored securely within the European Union.
• Project Data: Stored based on the user’s chosen location for the project, either in the USA or the European Union, as selected during project creation.

5. Data Usage

We use your data for the following purposes:

• To provide and maintain the Service.
• To improve the quality of the Service, fix vulnerabilities, and support further development.
• To communicate with you regarding the Service.

6. Data Sharing and Third-Party Services

We do not share your data with third parties or companies without your explicit consent, except in the following cases:

• Legal Requirements: As required by law or to comply with legal processes.
• Service Functionality: Data may be shared with third-party services when necessary to enable specific functions of the Service (e.g., payment processing, analytics, or cloud infrastructure). In such cases, data may be stored or processed outside the jurisdictions chosen as the primary storage and processing locations (EU or USA). We strive to notify you of such cases through the Service’s interface where feasible.

We ensure that any third-party service providers comply with applicable data protection standards, such as GDPR, through appropriate agreements like Standard Contractual Clauses.

7. Data Protection Measures

We implement robust security measures to protect your data, including:

• Encryption of data in transit and at rest.
• Access controls to ensure only authorized personnel can access your data.
• Regular security audits and vulnerability assessments.

8. User Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Data Portability: Receive your data in a structured, machine-readable format.
• Object to Processing: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at privacy@foxnose.net.

9. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Retention periods are determined based on the nature of the data and legal obligations.

10. International Data Transfers

If project data is stored in the USA or processed by third-party services outside the chosen jurisdiction (EU or USA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in compliance with GDPR. We strive to notify you of such transfers through the Service’s interface where feasible.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve the Service. You can manage your cookie preferences through your browser settings or our Service’s cookie management tool.

12. Changes to the Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after such changes constitutes your acceptance of the new policy.

13. Contact Information

For any privacy-related inquiries, please contact us at:
FoxNose Ltd.
Email: privacy@foxnose.net

14. Compliance with GDPR

We are committed to complying with the GDPR and other applicable data protection laws. We process your data lawfully, fairly, and transparently.

15. Consent

Where processing is based on consent, we obtain your explicit consent through clear and affirmative actions, such as checking a box during registration. You may withdraw your consent at any time by contacting us.

16. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

17. Third-Party Links

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices.

18. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it.

19. Governing Law

This Privacy Policy is governed by the laws of Singapore and the jurisdiction of the courts in Singapore.

20. Effective Date

This Privacy Policy is effective as of July 21, 2025.

21. Review and Update

We will review this Privacy Policy periodically and update it as necessary to reflect changes in our practices or legal requirements.

By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.