Effective Date: January 1, 2025
Last Updated: January 1, 2025
AIFox AI, Inc. ("AIFox AI," "we," "us," or "our") is committed to protecting the privacy of our customers, website visitors, and all individuals whose data may come under our care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aifoxai.com or use our AI-powered cybersecurity platform.
Please read this policy carefully. By accessing or using our website or services, you agree to the practices described herein. If you disagree with any part of this policy, please discontinue use of our services.
We collect information you provide directly when you:
This information may include your name, business email address, company name, phone number, job title, and any content you include in your communications with us.
When you visit our website, we may automatically collect technical information including your IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and clickstream data. This data is collected through server logs and analytics technologies.
We use cookies and similar tracking technologies as described in our Cookie Policy. You can manage your cookie preferences at any time through our cookie consent banner or by adjusting your browser settings.
As a cybersecurity platform, our customers may process security telemetry, log data, and related information through the AIFox AI platform. This data is processed as a data processor on behalf of our enterprise customers under the terms of our Data Processing Agreement. This Privacy Policy does not apply to security data processed on behalf of customers.
We use the information we collect for the following purposes:
For individuals in the European Economic Area, United Kingdom, or other jurisdictions with similar legal requirements, our legal bases for processing personal data include:
California residents have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include:
AIFox AI does not sell personal information. To exercise your California privacy rights, contact us at security@aifoxai.com.
We do not sell your personal information to third parties. We may share your information with:
As a cybersecurity company, data security is foundational to everything we do. We implement comprehensive technical, organizational, and physical safeguards including AES-256 encryption at rest and in transit, multi-factor authentication, least-privilege access controls, continuous security monitoring, annual penetration testing, and SOC 2 Type II certified security operations.
Despite these measures, no system is completely secure. We encourage you to report suspected security issues to security@aifoxai.com.
We retain personal information for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Website visitor data is typically retained for 24 months. Customer contact data is retained for the duration of the business relationship plus three years. You may request deletion of your data at any time subject to legal retention obligations.
AIFox AI is headquartered in the United States. If you are located outside the United States, your information may be transferred to and processed in the United States. We use appropriate safeguards for international transfers, including Standard Contractual Clauses approved by the European Commission where required.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.
For privacy inquiries, requests, or concerns, contact AIFox AI at:
We respond to verified requests within 45 days. For complex requests, we may require an extension of up to 90 days and will notify you if an extension is needed.
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website with a new effective date. For significant changes, we may also provide direct notification by email. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
Depending on your location, you may have additional rights under applicable data protection laws. These rights may include:
To exercise any of these rights, contact us at security@aifoxai.com with sufficient information to identify your account and the specific right you wish to exercise. We will respond within the timeframes required by applicable law.
As a cybersecurity company, privacy is not an afterthought but a foundational engineering principle. Our systems are designed with data minimization, purpose limitation, and technical safeguards built in from the start. We conduct Privacy Impact Assessments for new data processing activities and integrate privacy reviews into our software development lifecycle.
We apply the following privacy-by-design principles across all our systems: collect only minimum data necessary; implement automatic data deletion schedules; apply pseudonymization and anonymization where technically feasible; provide granular access controls so employees access only the data they need; and conduct regular privacy audits and vulnerability assessments on data handling systems.
In the event of a data breach that affects your personal information, AIFox AI will notify you and applicable regulatory authorities as required by law. Our breach response procedures comply with California law, GDPR requirements where applicable, and other applicable data breach notification statutes. We aim to notify affected individuals within 72 hours of discovering a breach that is likely to result in high risk to your rights and freedoms, subject to law enforcement considerations.
Our website may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to aifoxai.com and the AIFox AI platform. We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any third-party services you access through our website or platform integrations.
AIFox AI does not intentionally collect sensitive personal information such as government identifiers, financial account numbers, precise geolocation, racial or ethnic origin, health information, or biometric data through our website. If you inadvertently include such information in a contact form or communication, we will process it solely to respond to your inquiry and will not retain it beyond that purpose.
Enterprise customers who process sensitive personal information through the AIFox AI platform do so as data controllers. Such processing is governed by the applicable Data Processing Agreement and the customer's own privacy obligations under applicable law.
AIFox AI may use automated processes to analyze usage patterns and improve our services. For enterprise customers, our platform makes automated security decisions such as threat classification, risk scoring, and automated containment actions. These automated decisions are subject to human review and override capabilities as described in our product documentation and enterprise agreements. Customers retain the ability to configure the level of automation and human oversight applied in their deployment.