1. Overview
This Privacy Policy explains how FoxMeld (“we”, “us”, “our”) collects, uses, stores, shares, and protects your information when you visit foxmeld.com or use our image, video and music creation, product image processing, ecommerce insights, and related account services (collectively, the “Service”). Where processing requires consent under applicable law, we will obtain that consent separately; this Policy does not replace it.
2. Information We Collect
- Account information: sign-up email address, password (stored only in hashed form), display name, avatar, and language preference. If you sign in with Google, we receive your email address, name, and avatar from Google.
- Creation and research content: prompts, reference materials, product images and product links you submit, as well as generated outputs, product and review data, research reports, and historical project content, used to complete tasks, save history, and troubleshoot issues.
- Feedback information: the message, optional screenshot, and account identifier you submit, used to handle support requests and improve the Service. Administrators access your account email only when needed to handle feedback.
- Technical, regional, and billing information: timestamps, IP address, country or region inferred from IP or network-edge information, browser type, task parameters and status, credit-ledger records, order and payment identifiers, amounts, currencies, and subscription status. Payment details are entered on Waffo’s checkout page. FoxMeld does not store full card numbers or CVVs or require precise location or national identification numbers. Do not include unnecessary sensitive information in prompts, uploaded materials, or feedback.
- Team space information: membership, roles, invitations and join requests, credit allocations, member allowances, and audit records. Owners and authorized Admins can view information needed to manage the team and its credit ledger. Materials and ecommerce research reports belong to the user account; joining a team does not by itself give other members access to your personal asset library or research history.
3. How We Use Information
We use this information to provide and maintain the Service, perform generation, image processing and ecommerce research, determine model availability for the region of request origin, meter and settle credits, process subscriptions and refunds, authenticate accounts and prevent abuse, maintain account security, respond to support requests, and fulfill legal obligations.
We do not sell your prompts, materials, or research reports or independently use them for public display. To complete tasks you request, we transmit the necessary prompts, reference materials, product images or links, and parameters to the relevant providers. Content moderation may also require transmission of text prompts. Otherwise, we share this content only with your authorization, as required by law, or as described in this Policy.
4. Content Moderation
To enforce content safety rules, when automated moderation is enabled, text prompts for image and video generation are sent to the configured moderation provider for safety screening before generation. Violating requests are blocked. Requests subject to enabled moderation are also temporarily blocked if a decision cannot be confirmed. Moderation results are used for request handling and content safety, not marketing.
5. Service Providers and Cross-Border Transfers
We use the third-party services below and share information as necessary to perform the relevant functions. Data may be processed outside your country or region. Each third party’s role and data handling rules depend on its services and applicable terms. We implement the safeguards required by applicable law for cross-border transfers.
Different models and upstream providers may apply different rules for data retention, logging, content moderation, model improvement, and processing location, and those rules may change over time. Before selecting a model, you should assess it against your own privacy, confidentiality, data-residency, and compliance requirements. Unless we expressly state otherwise, FoxMeld does not promise that any model offers zero data retention, excludes training use, or processes data only in a particular region.
- Waffo: payment and subscription processing and assistance with refunds. Content moderation services (Creem or Waffo, depending on the enabled configuration): automated safety screening of text prompts for image and video generation. Content moderation and payment processing are separate services.
- OpenRouter and its upstream AI model providers: generation tasks and analysis of product information, reviews, or extracted signals for ecommerce research. BRIA: background removal for product images you upload. Bright Data: collection of public product information and reviews based on product links for ecommerce insights.
- Cloudflare: object storage for media files and network infrastructure; Resend: transactional email delivery; Google: OAuth sign-in.
6. Storage and Security
Data in transit is encrypted using TLS. Sensitive fields such as email addresses are stored at rest using envelope encryption (AES-256) with blind-index lookup, and background job payloads are also encrypted. We enforce least-privilege access and maintain audit and incident records. No internet transmission can be guaranteed to be absolutely secure. In the event of a security incident, we will notify affected users as required by law.
7. Retention and Deletion
We retain your account and creation data for as long as your account exists. After account deletion, we will delete or anonymize your personal data within a reasonable period, except for records we are required to retain to comply with law, resolve disputes, or prevent abuse (such as order and refund evidence). Credit expiry does not itself delete your account or associated data.
Submitted feedback messages and screenshots are normally deleted 180 days after submission. Screenshots uploaded without submitting feedback are normally removed after 24 hours. Deleting your account removes associated feedback sooner and schedules screenshot file deletion.
8. Your Rights
Under applicable data protection laws, you may have rights to access, correct, obtain a copy of, or delete personal data, restrict or object to certain processing, and withdraw consent for processing based on consent. You can delete materials in the “Asset library” and request account deletion in “Account settings”. Team space Owners must first transfer ownership. Contact us by email for other requests; we generally respond within 30 days and will comply with applicable statutory deadlines.
9. Cookies and Local Storage
We use essential cookies and browser local storage to maintain your signed-in state, remember your language preference, and protect against cross-site request forgery. We do not use third-party advertising tracking cookies.
10. Minors
The Service is intended for users aged 18 and over and is not directed to minors. We do not knowingly collect personal information from minors. If you believe that a minor has provided us with information, please contact us so that we can delete it.
11. AI-Generated Content
Where required by the laws of your jurisdiction, AI-generated content may need to be labeled as “AI-generated.” When redistributing generated outputs, you are responsible for complying with the disclosure and labeling requirements applicable in your jurisdiction.
12. Changes to This Policy
We may update this Policy as the Service or legal requirements change and will display the updated date on this page. We will communicate material changes through appropriate channels and obtain renewed consent where required by applicable law.
Contact Us
If you have any questions about this document, email us at support@foxmeld.com.