Privacy notice
What this website collects, why we use it and the choices you have. This notice covers foxora.ai and the Runtime waitlist; Studio has its own privacy policy.
In short
15 sections below
Google and Meta measurement is optional and starts only after you allow it.
Waitlist sign-ups are used only to tell you about access.
We don’t sell personal data.
Using Foxora Studio? Read the Foxora Studio privacy policy
01 Who we are and what this covers
xBesh Labs FZE LLC is a company in India. It runs the website at www.foxora.ai. In this notice, “Foxora”, “we” and “us” mean xBesh Labs FZE LLC, and “you” means anyone who visits the website, joins our waitlist or writes to us.
xBesh Labs FZE LLC decides why and how the personal data described here is used. Under India’s Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary; under the GDPR and UK GDPR, the controller.
This notice covers:
- visits to www.foxora.ai;
- the waitlist for Foxora Runtime (section 4); and
- emails you send us.
It does not cover Foxora Studio, our workspace for AI agents. Studio has its own privacy policy and terms of service, which apply on every plan, including the Free plan (section 5).
02 What we collect on this website
This website has no account, no contact form and no comments. We handle personal data only in these cases:
| When you | What is processed | Why | How long |
|---|---|---|---|
| Visit a page | What your browser sends to load a page: IP address, browser and device type, the page asked for and the time. | To deliver the page and protect the website from abuse. | Kept by our hosting provider for a limited period for security and operation, then deleted. |
| Press “Pause motion” | One value in your browser’s session storage. It stays on your device and is never sent to us. | To keep motion paused as you move between pages. | Deleted by your browser when you close the tab. |
| Join a waitlist | Your email address, and your name and a short note if you add them. | To tell you when you can get access. | As long as needed to tell you about access, then deleted. |
| Email us | Your email address, your name and what you write. | To answer you. | As long as needed to answer you, then deleted. |
Visit a page
- What is processed
- What your browser sends to load a page: IP address, browser and device type, the page asked for and the time.
- Why
- To deliver the page and protect the website from abuse.
- How long
- Kept by our hosting provider for a limited period for security and operation, then deleted.
Press “Pause motion”
- What is processed
- One value in your browser’s session storage. It stays on your device and is never sent to us.
- Why
- To keep motion paused as you move between pages.
- How long
- Deleted by your browser when you close the tab.
Join a waitlist
- What is processed
- Your email address, and your name and a short note if you add them.
- Why
- To tell you when you can get access.
- How long
- As long as needed to tell you about access, then deleted.
Email us
- What is processed
- Your email address, your name and what you write.
- Why
- To answer you.
- How long
- As long as needed to answer you, then deleted.
If you allow optional cookies, Google Analytics measures visits and Meta pixels measure advertising performance and may support advertising audiences. We do not send waitlist form fields through this tracking code. Declining optional cookies does not limit access to this website.
04 Waitlist
Foxora Runtime is in development. You can join its waitlist at foxora.ai/runtime-waitlist.
- What we collect: your email address, and your name and a short note if you choose to add them.
- Why: only to tell you when you can get access. If you add a note, we read it for that purpose and nothing else. We do not add you to a newsletter, and we do not share your details with anyone for their marketing.
- Basis: your consent, which you give when you submit the form.
- How long: as long as needed to tell you about access, then deleted.
- Leaving: you can withdraw your consent at any time. Write to hello@foxora.ai with the subject “Privacy or grievance” and we will remove you.
05 Foxora Studio
Foxora Studio is our desktop workspace for AI agents. When you sign up for or use Studio, on the Free plan or a paid one, the Foxora Studio privacy policy and terms of service apply to that use, not this notice.
In short: Studio runs agent work on your computer. Your prompts and files go to Foxora and to the model providers that do the work. We don’t sell your data, and our contracted model providers don’t train on it. Sign-in uses OAuth 2.0 with PKCE, and the apps you choose to connect are linked through Composio. The service providers Studio uses are listed in section 6.
06 Service providers
We use these service providers. They process personal data on our behalf, for the purposes below, under their contracts with us.
| Provider | What they do | For |
|---|---|---|
| Vercel | Hosts this website and serves its pages. | foxora.ai |
| Supabase | Sign-in and database. | Foxora Studio |
| Model providers | Process your prompts and files to do the work you ask for. | Foxora Studio |
| Composio | Connects the apps you choose to link to Studio. | Foxora Studio |
| Stripe and PayPal | Take payments for paid plans. | Foxora Studio |
Vercel
- What they do
- Hosts this website and serves its pages.
- For
- foxora.ai
Supabase
- What they do
- Sign-in and database.
- For
- Foxora Studio
Model providers
- What they do
- Process your prompts and files to do the work you ask for.
- For
- Foxora Studio
Composio
- What they do
- Connects the apps you choose to link to Studio.
- For
- Foxora Studio
Stripe and PayPal
- What they do
- Take payments for paid plans.
- For
- Foxora Studio
08 How long we keep data
Our rule is simple: we keep personal data only as long as we need it for the purpose you gave it for, and then we delete it.
- Emails: as long as needed to answer you, then deleted.
- Waitlist sign-ups: as long as needed to tell you about access, then deleted.
- Request logs: kept by our hosting provider for a limited period for security and operation, then deleted.
- The motion value: deleted by your browser when you close the tab.
We may keep a record for longer only where the law requires it, and only for as long as it does.
09 Security
This website is served only over HTTPS. We take reasonable steps to protect the personal data we hold, but no way of sending or storing data is completely secure. If you find a security problem, please tell us privately: see Security or write to hello@foxora.ai with the subject “Security report”.
10 Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- delete it;
- stop using it, or use it only in limited ways; and
- give it to you in a portable form.
Where we rely on your consent, as for waitlists, you can withdraw it at any time. This does not affect anything we did before you withdrew it. The laws in section 11 may give you further rights.
10.1How to use your rights
Write to hello@foxora.ai with the subject “Privacy or grievance”. Tell us which right you want to use and the email address you used with us. We may ask you to confirm who you are before we act. We don’t charge for this, and we reply within the time the law that applies to you allows.
11 Laws where you live
11.1India: Digital Personal Data Protection Act, 2023
Where this Act applies, xBesh Labs FZE LLC is the Data Fiduciary and you are the Data Principal.
- Notice and consent. This notice tells you what we collect and why before you give us anything. For waitlists we ask for your consent, and you can withdraw it as easily as you gave it. When you email us, we use what you send only to answer you, which is the purpose you gave it for.
- Your rights. You can ask for a summary of the personal data we process about you, and of whom we have shared it with; ask us to correct, complete, update or erase it; have your grievances addressed; and nominate a person to use your rights if you die or cannot act for yourself.
- Grievances. Write to hello@foxora.ai with the subject “Privacy or grievance”. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
- Children. We do not knowingly process the personal data of anyone under 18 (section 12).
11.2United Arab Emirates: Personal Data Protection Law
Where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies, you have the right to be told how your data is processed; to access it; to have it transferred to you or to another organisation; to have it corrected or erased; to restrict or stop its processing; and to object to decisions made only by automated processing. We make no such decisions. You can complain to the UAE Data Office. If you are in a free zone with its own data protection law, such as the Dubai International Financial Centre or Abu Dhabi Global Market, that law applies instead.
11.3European Union, EEA and United Kingdom: GDPR and UK GDPR
Where the GDPR or UK GDPR applies, xBesh Labs FZE LLC is the controller. We rely on these legal bases:
- Legitimate interests (Article 6(1)(f)): delivering this website securely, and answering emails you send us.
- Consent (Article 6(1)(a)): waitlists.
- Steps before a contract (Article 6(1)(b)): when you write to us about buying from us.
You have the rights of access, rectification, erasure, restriction, data portability and objection, including the right to object to processing based on legitimate interests, and the right to withdraw consent. You can also complain to the data protection authority where you live or work. In the United Kingdom, that is the Information Commissioner’s Office.
11.4California: CCPA
Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies:
- What we collect. Identifiers (name, email address and IP address) and internet activity (the pages requested), for the purposes in section 2.
- No sale or sharing. We do not sell or share personal information, as the Act defines those words, and we have not done so in the past 12 months. We do not collect sensitive personal information.
- Your rights. You have the right to know what we collect, use and disclose; to delete it; to correct it; and not to be treated differently for using these rights. You can use them yourself, as in section 10, or through an agent you authorise.
12 Children
This website and our waitlist are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to hello@foxora.ai with the subject “Privacy or grievance” and we will delete it.
13 Other websites
This website links to other websites, including other Foxora sites such as our community and our work gallery, and to third parties. This notice does not cover them. Please read the privacy notice on each site you visit.
14 Changes to this notice
We may update this notice. When we do, we change the “Last updated” date at the top. If a change affects how we use personal data you have already given us, we will tell you before it takes effect, by email where we have your address.
15 Contact and grievances
xBesh Labs FZE LLC, India.
For any question about this notice, to use your rights or to raise a grievance, write to hello@foxora.ai with the subject “Privacy or grievance”. This is also our grievance contact under the Digital Personal Data Protection Act, 2023.