Skip to content
Legal · Personal data on foxora.ai

Privacy notice

What this website collects, why we use it and the choices you have. This notice covers foxora.ai and the Runtime waitlist; Studio has its own privacy policy.

In short

15 sections below

  • Google and Meta measurement is optional and starts only after you allow it.

  • Waitlist sign-ups are used only to tell you about access.

  • We don’t sell personal data.

  • Using Foxora Studio? Read the Foxora Studio privacy policy

01 Who we are and what this covers

xBesh Labs FZE LLC is a company in India. It runs the website at www.foxora.ai. In this notice, “Foxora”, “we” and “us” mean xBesh Labs FZE LLC, and “you” means anyone who visits the website, joins our waitlist or writes to us.

xBesh Labs FZE LLC decides why and how the personal data described here is used. Under India’s Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary; under the GDPR and UK GDPR, the controller.

This notice covers:

  • visits to www.foxora.ai;
  • the waitlist for Foxora Runtime (section 4); and
  • emails you send us.

It does not cover Foxora Studio, our workspace for AI agents. Studio has its own privacy policy and terms of service, which apply on every plan, including the Free plan (section 5).

02 What we collect on this website

This website has no account, no contact form and no comments. We handle personal data only in these cases:

When youWhat is processedWhyHow long
Visit a pageWhat your browser sends to load a page: IP address, browser and device type, the page asked for and the time.To deliver the page and protect the website from abuse.Kept by our hosting provider for a limited period for security and operation, then deleted.
Press “Pause motion”One value in your browser’s session storage. It stays on your device and is never sent to us.To keep motion paused as you move between pages.Deleted by your browser when you close the tab.
Join a waitlistYour email address, and your name and a short note if you add them.To tell you when you can get access.As long as needed to tell you about access, then deleted.
Email usYour email address, your name and what you write.To answer you.As long as needed to answer you, then deleted.
  • Visit a page

    What is processed
    What your browser sends to load a page: IP address, browser and device type, the page asked for and the time.
    Why
    To deliver the page and protect the website from abuse.
    How long
    Kept by our hosting provider for a limited period for security and operation, then deleted.
  • Press “Pause motion”

    What is processed
    One value in your browser’s session storage. It stays on your device and is never sent to us.
    Why
    To keep motion paused as you move between pages.
    How long
    Deleted by your browser when you close the tab.
  • Join a waitlist

    What is processed
    Your email address, and your name and a short note if you add them.
    Why
    To tell you when you can get access.
    How long
    As long as needed to tell you about access, then deleted.
  • Email us

    What is processed
    Your email address, your name and what you write.
    Why
    To answer you.
    How long
    As long as needed to answer you, then deleted.

If you allow optional cookies, Google Analytics measures visits and Meta pixels measure advertising performance and may support advertising audiences. We do not send waitlist form fields through this tracking code. Declining optional cookies does not limit access to this website.

03 Cookies and on-device storage

Your choice comes first. Google Tag Manager loads Google Analytics and Meta pixels only after you choose “Allow”. They receive browser and device information, page URLs, referrers and interaction information, and may set analytics and advertising cookies such as _ga, _fbp and _fbc. Google and Meta process this information under their own privacy policies.

Change your choice anytime. Use “Cookie settings” at the foot of any page, or the button below. “No thanks” keeps optional tags off. Your choice is stored on this device as fx-consent for up to six months. Browser Global Privacy Control and Do Not Track signals keep optional tracking off. Withdrawing consent stops subsequent tracking and clears the analytics and Meta cookies accessible to this website; it does not remove information already sent.

One on-device value. If you press “Pause motion” at the foot of any page, your browser stores the value foxora-motion-paused in its session storage, so motion stays paused as you move between pages. It contains no identifier, is never sent to us, and your browser deletes it when you close the tab. If your device is set to reduce motion, the website follows that setting without storing anything.

Google and Meta are external recipients only when you allow optional tracking. The browser check above shows the storage and requests visible on this page, including any tags you have allowed.

04 Waitlist

Foxora Runtime is in development. You can join its waitlist at foxora.ai/runtime-waitlist.

  • What we collect: your email address, and your name and a short note if you choose to add them.
  • Why: only to tell you when you can get access. If you add a note, we read it for that purpose and nothing else. We do not add you to a newsletter, and we do not share your details with anyone for their marketing.
  • Basis: your consent, which you give when you submit the form.
  • How long: as long as needed to tell you about access, then deleted.
  • Leaving: you can withdraw your consent at any time. Write to hello@foxora.ai with the subject “Privacy or grievance” and we will remove you.

05 Foxora Studio

Foxora Studio is our desktop workspace for AI agents. When you sign up for or use Studio, on the Free plan or a paid one, the Foxora Studio privacy policy and terms of service apply to that use, not this notice.

In short: Studio runs agent work on your computer. Your prompts and files go to Foxora and to the model providers that do the work. We don’t sell your data, and our contracted model providers don’t train on it. Sign-in uses OAuth 2.0 with PKCE, and the apps you choose to connect are linked through Composio. The service providers Studio uses are listed in section 6.

06 Service providers

We use these service providers. They process personal data on our behalf, for the purposes below, under their contracts with us.

ProviderWhat they doFor
VercelHosts this website and serves its pages.foxora.ai
SupabaseSign-in and database.Foxora Studio
Model providersProcess your prompts and files to do the work you ask for.Foxora Studio
ComposioConnects the apps you choose to link to Studio.Foxora Studio
Stripe and PayPalTake payments for paid plans.Foxora Studio
  • Vercel

    What they do
    Hosts this website and serves its pages.
    For
    foxora.ai
  • Supabase

    What they do
    Sign-in and database.
    For
    Foxora Studio
  • Model providers

    What they do
    Process your prompts and files to do the work you ask for.
    For
    Foxora Studio
  • Composio

    What they do
    Connects the apps you choose to link to Studio.
    For
    Foxora Studio
  • Stripe and PayPal

    What they do
    Take payments for paid plans.
    For
    Foxora Studio

07 Sharing and transfers

We do not sell or rent personal data. We share it only:

  • with the service providers in section 6, who act on our instructions;
  • when the law requires it, for example to answer a valid order from a court or government authority; and
  • to protect the rights, safety and security of our users, the public or Foxora.

If xBesh Labs FZE LLC is involved in a merger, acquisition or sale of its business, personal data may pass to the new owner, and this notice will continue to protect it.

Foxora is based in India, and our service providers may process data in other countries. Where the Digital Personal Data Protection Act, 2023 applies, we do not transfer personal data to any country the Government of India has restricted. Where the GDPR or UK GDPR applies, transfers rely on an adequacy decision or on safeguards the law recognises, such as standard contractual clauses.

08 How long we keep data

Our rule is simple: we keep personal data only as long as we need it for the purpose you gave it for, and then we delete it.

  • Emails: as long as needed to answer you, then deleted.
  • Waitlist sign-ups: as long as needed to tell you about access, then deleted.
  • Request logs: kept by our hosting provider for a limited period for security and operation, then deleted.
  • The motion value: deleted by your browser when you close the tab.

We may keep a record for longer only where the law requires it, and only for as long as it does.

09 Security

This website is served only over HTTPS. We take reasonable steps to protect the personal data we hold, but no way of sending or storing data is completely secure. If you find a security problem, please tell us privately: see Security or write to hello@foxora.ai with the subject “Security report”.

10 Your rights

Wherever you live, you can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct, complete or update it;
  • delete it;
  • stop using it, or use it only in limited ways; and
  • give it to you in a portable form.

Where we rely on your consent, as for waitlists, you can withdraw it at any time. This does not affect anything we did before you withdrew it. The laws in section 11 may give you further rights.

10.1How to use your rights

Write to hello@foxora.ai with the subject “Privacy or grievance”. Tell us which right you want to use and the email address you used with us. We may ask you to confirm who you are before we act. We don’t charge for this, and we reply within the time the law that applies to you allows.

11 Laws where you live

11.1India: Digital Personal Data Protection Act, 2023

Where this Act applies, xBesh Labs FZE LLC is the Data Fiduciary and you are the Data Principal.

  • Notice and consent. This notice tells you what we collect and why before you give us anything. For waitlists we ask for your consent, and you can withdraw it as easily as you gave it. When you email us, we use what you send only to answer you, which is the purpose you gave it for.
  • Your rights. You can ask for a summary of the personal data we process about you, and of whom we have shared it with; ask us to correct, complete, update or erase it; have your grievances addressed; and nominate a person to use your rights if you die or cannot act for yourself.
  • Grievances. Write to hello@foxora.ai with the subject “Privacy or grievance”. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
  • Children. We do not knowingly process the personal data of anyone under 18 (section 12).

11.2United Arab Emirates: Personal Data Protection Law

Where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies, you have the right to be told how your data is processed; to access it; to have it transferred to you or to another organisation; to have it corrected or erased; to restrict or stop its processing; and to object to decisions made only by automated processing. We make no such decisions. You can complain to the UAE Data Office. If you are in a free zone with its own data protection law, such as the Dubai International Financial Centre or Abu Dhabi Global Market, that law applies instead.

11.3European Union, EEA and United Kingdom: GDPR and UK GDPR

Where the GDPR or UK GDPR applies, xBesh Labs FZE LLC is the controller. We rely on these legal bases:

  • Legitimate interests (Article 6(1)(f)): delivering this website securely, and answering emails you send us.
  • Consent (Article 6(1)(a)): waitlists.
  • Steps before a contract (Article 6(1)(b)): when you write to us about buying from us.

You have the rights of access, rectification, erasure, restriction, data portability and objection, including the right to object to processing based on legitimate interests, and the right to withdraw consent. You can also complain to the data protection authority where you live or work. In the United Kingdom, that is the Information Commissioner’s Office.

11.4California: CCPA

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies:

  • What we collect. Identifiers (name, email address and IP address) and internet activity (the pages requested), for the purposes in section 2.
  • No sale or sharing. We do not sell or share personal information, as the Act defines those words, and we have not done so in the past 12 months. We do not collect sensitive personal information.
  • Your rights. You have the right to know what we collect, use and disclose; to delete it; to correct it; and not to be treated differently for using these rights. You can use them yourself, as in section 10, or through an agent you authorise.

12 Children

This website and our waitlist are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to hello@foxora.ai with the subject “Privacy or grievance” and we will delete it.

14 Changes to this notice

We may update this notice. When we do, we change the “Last updated” date at the top. If a change affects how we use personal data you have already given us, we will tell you before it takes effect, by email where we have your address.

15 Contact and grievances

xBesh Labs FZE LLC, India.

For any question about this notice, to use your rights or to raise a grievance, write to hello@foxora.ai with the subject “Privacy or grievance”. This is also our grievance contact under the Digital Personal Data Protection Act, 2023.