FoxReach
Privacy

Privacy Policy

Last updated: January 15, 2026

At FoxReach, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cold email outreach platform and related services (the "Service").

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address (via Google OAuth)
  • Google profile picture
  • Billing information (processed by our payment provider)

Email Account Data

When you connect email accounts, we store:

  • Email address of connected accounts
  • App Passwords (encrypted at rest using AES-256)
  • SMTP/IMAP server configuration

Lead Data

When you import leads, we store the data you provide, which may include:

  • Email addresses, names, company information
  • Job titles, phone numbers, custom fields
  • Campaign engagement data (opens, replies, bounces)

Usage Data

We automatically collect:

  • Browser type and version
  • Pages visited and features used
  • Campaign performance metrics
  • IP address and approximate location

2. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Send emails on your behalf through connected accounts
  • Operate the email warmup pool
  • Generate campaign analytics and reports
  • Provide customer support
  • Send service-related notifications
  • Detect and prevent fraud or abuse
  • Improve the Service

3. Email Data Handling

We understand the sensitivity of email data. Here's how we handle it:

  • App Passwords are encrypted at rest using AES-256 encryption and are never exposed in logs or to support staff
  • Email content from your campaigns is stored to enable sequence tracking and analytics
  • Warmup emails are exchanged between accounts in our warmup pool and automatically managed. They do not appear in your regular inbox
  • Reply content is stored for inbox management and AI categorization, processed by our AI models

4. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers who assist in operating the platform (hosting, payment processing, analytics)
  • Legal authorities when required by law or to protect our rights
  • Warmup pool participants: connected email accounts exchange warmup emails with other accounts in the pool (email addresses only, no personal data)

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • Personal data is deleted within 30 days
  • Lead data is permanently removed within 30 days
  • Email account credentials are immediately purged
  • Anonymized analytics data may be retained for product improvement

6. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (right to be forgotten)
  • Export your data in a portable format
  • Object to or restrict processing
  • Withdraw consent

For EU/EEA Residents (GDPR)

We process your data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, or (d) legitimate interests. You may exercise your GDPR rights by contacting us via our contact page.

For California Residents (CCPA)

Under the CCPA, you have the right to know what personal information we collect, request deletion, and opt out of sale (we do not sell personal data). To exercise your rights via our contact page.

7. Security

We implement industry-standard security measures including:

  • TLS encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Regular security audits and penetration testing
  • Role-based access controls for our team
  • SOC 2 compliance (in progress)

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (which you can opt out of) to understand how the Service is used. We do not use advertising or tracking cookies.

9. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights, contact us at: