Privacy Policy

Last updated 2026-09-30

This page explains, in plain English, what GetFoxChat collects, where it goes and what you can do about it. It covers two things: our own website getfoxchat.com (including your GetFoxChat dashboard), and the chat that our customers put on their websites. It describes what our code does today.

Cookies and tracking on getfoxchat.com

When you first visit getfoxchat.com you see a banner with two choices: Accept All and Essential Only. Closing the banner with the X is the same as Essential Only. Your choice is saved in your browser (localStorage, key getfoxchat_cookie_consent) and applies to every page after that.

• Google Ads tag (Google). We use it to measure whether our Google ads work. The script loads from Google on our own pages with every consent signal set to "denied". Until you press Accept All it sets no cookies and Google receives only consent-denied, cookieless signals. After Accept All it may set advertising cookies such as _gcl_au, and Google may set its own cookies. We send Google the page address with only ad-click and utm parameters kept (other parameters are removed, and private link codes in the address are replaced), never your email.
• Microsoft Clarity (Microsoft). Page analytics that show how people use our pages. It loads only after you press Accept All, and only on getfoxchat.com itself (our marketing pages and your GetFoxChat dashboard). It sets its own cookie (such as _clck), and Microsoft sets its own cookies too. Clarity never runs in the chat on our customers' websites, in the walkthrough player, or inside the Shopify admin.
• Essential Only means no advertising cookies and no optional analytics: the Google tag stays in consent-denied mode and Clarity does not load.
• Global Privacy Control and Do Not Track are honoured. If your browser sends either signal, the Google tag and Clarity do not load at all, no banner is shown, nothing about your choice is stored, and our own page-view counter (below) sends nothing. The same applies when one of our pages is shown inside another site's frame.
• To change your choice later, clear this site's data in your browser (or remove the getfoxchat_cookie_consent entry). The banner will appear again.

Our own first-party visit records on getfoxchat.com

These are written to our own database, not to an analytics company, and use no cookies:

• Page views. One record per page load: the page host and path (no query string), the referring website's host only, any utm_source, utm_medium and utm_campaign in the link, a "ref" word from the link, a random per-browser session id, and whether you are on desktop, mobile or tablet. No IP address and no email. Known bots are dropped.
• Sign-up form. When you send the sign-up form, one record that it was sent and one with the answer (account created, email already registered, or the error message shown), with the same random per-browser session id. Not your email or password.
• Where you first came from. The first referrer and campaign are kept in your browser (localStorage) and, if you create an account, attached to it so we know which channel brought you.
• Ad channel. If you arrive from an ad, your browser keeps the channel (paid, organic, direct or other) and the Google ad click id (such as gclid) for 30 days, and the page-view record includes the channel. The click id is sent to us only after you press Accept All; with Essential Only it is never sent.

If you create a GetFoxChat account

• Account: your email address and password sign-in, handled by Supabase Auth. Your workspace, sites, settings, knowledge base and conversations are stored in our Supabase database.
• Your website's content: to teach the chat about your business we read the public pages of the site you add, using our own crawler and Firecrawl, and keep the text as your knowledge base.
• Payments: handled by Stripe. We receive your subscription status and billing email; we never see or store your full card number. If your first month includes a free month of MentionFox Pro (our sister product), we record your checkout email so MentionFox can attach that month to it.
• Email: we send account and product emails (for example an escalation alert or install instructions you ask for) through Resend.

"See it on your site" and "Email me this preview"

On our home page you can type a website address to see the chat answer on that site. We read that site's public pages to build the preview, and keep the address, the preview and a one-way hash of your IP address (used for rate limits). The private preview link works for 7 days. If you press "Email me this preview", we send one email through Resend. We do not store your email address: only a salted one-way hash of it (to stop abuse) and the time you pressed the button, and those rows are deleted after 8 days. You are not added to any list.

What the chat on a customer's website stores

When a business adds GetFoxChat to its website, the chat runs from getfoxchat.com and talks only to GetFoxChat's own servers. It loads no other company's script: no Google, no Clarity, no advertising tags. It sets no cookies. The business that runs the website decides to use GetFoxChat and can see the conversations from its own visitors.

Stored in your browser (localStorage and sessionStorage), on that website only: a random visitor id (foxchat_vid, not a device fingerprint), whether you closed or hid the chat, a "do not disturb" time, whether you dismissed or gave your email in the email prompt, when you last answered a rating question, and small counters that stop the chat from repeating the same prompt.

Stored on our servers, for the business that runs the site:

• Your messages and the replies (from the AI or from a person at the business), and any file you attach.
• The pages you visit on that site while the chat is loaded, their titles and how long you stayed, and your browser's user-agent string (used to tell people from bots).
• Your email address and name, only if you type them into the chat or the website passes them to the chat because you are signed in there. The website may also pass details such as your plan.
• A short summary of past conversations, so the chat can remember what you asked before on that site.
• Ratings you give (thumbs, satisfaction, survey answers).
• A list of the buttons, links, menu items and form-field labels on the page you are on (their labels only, with email addresses masked), so the chat can point you to the right place.

What the chat sends when you only visit a page (you do not chat): the site's id, the random visitor id, the page address and title and the time you arrived; when you leave, how long you stayed; the labels of the page's buttons, links and form fields (at most once every 45 seconds per page); and, if the business set up visitor goals and the chat is confident which one fits, the name of that goal once per visit. Nothing you type into the website's own forms is read or sent.

What the chat sends with each message you write: your message, the page address and title, its headings and the visible text of the page (used to answer and not stored), and which fields the page's forms have: their label, type and whether each is filled in or empty, never what you typed. Password, hidden, email, phone and file fields, and fields marked for personal data such as name, address, phone, email, birthday or card details, are skipped entirely.

Spam checks: with your message the chat sends a count of keystrokes and mouse movements and whether the typing had natural pauses. These counts are used to spot automated spam and are not stored. If the business marks a conversation as spam, a one-way hash of the message and the random visitor id are kept and checked across GetFoxChat sites for 30 days.

Emails to visitors: if you gave your email in the chat, the business may send you the conversation transcript, or a follow-up about a question left unanswered, by email through Resend.

AI: to write replies, your message and the conversation are sent to Anthropic (Claude). If Anthropic is unavailable, the reply is written by OpenAI instead. Your question is also sent to OpenAI to create a search vector, used to find the right page in the business's knowledge base. If the business connected Slack, new conversations may be posted to the business's own Slack.

The chat works the same whatever your cookie choice on getfoxchat.com, because it is not our marketing site: it keeps only the first-party data above, which the chat needs to work.

Service providers we use

• Vercel hosts getfoxchat.com and serves the chat script.
• Supabase hosts our database, sign-in and server functions.
• Anthropic writes chat replies and helps build knowledge bases; OpenAI is the reply fallback, creates search vectors and is a fallback voice for walkthrough narration.
• DeepSeek helps with walkthrough text in the dashboard (for example translation and narration scripts), and Groq produces walkthrough voice narration. These handle the content a site owner creates, not visitor chats.
• Firecrawl reads public web pages when we build or refresh a knowledge base or a preview.
• Stripe handles payments. Resend sends email.
• Google (Ads tag) and Microsoft (Clarity) on getfoxchat.com only, as described above.

We do not sell personal data.

Keeping and deleting data

We keep account and conversation data while the account is in use; the only automatic time limits are the ones stated on this page (the 7-day preview link and the 8-day preview-email rows). A business using GetFoxChat can merge and edit its contacts in the dashboard. To ask for a copy of your data or to have it deleted, visitors can contact the website's business or email us, and account holders can email us, at privacy@getfoxchat.com. Shopify stores that use GetFoxChat also get Shopify's own customer data and deletion requests handled automatically.

Contact

For privacy questions: privacy@getfoxchat.com