Last updated: February 2026

Privacy Policy

1. Introduction

Foxlight Technologies Co., Ltd. ("Foxlight", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have. Our mission is to give you complete control over your digital identity — and that starts with being transparent about our own practices.

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name. If you register through a third-party provider (e.g., Google, GitHub), we receive basic profile information from that provider.

Payment Information

Payments are processed entirely by Stripe. We do not store your credit card number, bank account details, or other sensitive payment information on our servers. We receive only a transaction reference and subscription status from Stripe.

Usage Data

We collect aggregate, anonymized analytics about how the Service is used (e.g., page views, feature adoption rates). This data cannot be used to identify individual users. We do not track your browsing activity outside of the Foxlight platform.

Browser Extension Data

The Foxlight browser extension processes your browsing signals (cookies, cache, preferences) to build your personal MCP. This data is encrypted and stored entirely on your device. It is never transmitted to our servers. We have no ability to access, read, or decrypt your MCP data.

3. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process billing and manage your subscription
  • Respond to support requests and communicate service updates
  • Analyze aggregate usage patterns to improve the product
  • Comply with legal obligations

We do not use your data for advertising, profiling, or any purpose unrelated to providing the Service.

4. What We Do NOT Collect

To be explicitly clear, Foxlight does not collect, access, or store:

  • Your browsing history
  • Your cookies or cached data
  • Any personal data processed by the browser extension
  • The contents of your MCP
  • Your interactions with AI agents through the protocol

All of this data remains on your device under your control. This is not a marketing claim — it is an architectural guarantee. The extension is designed so that we cannot access this data even if we wanted to.

5. Data Storage & Security

Account data and service metadata are stored with encryption at rest and in transit. Our infrastructure is hosted on Vercel with industry-standard security practices. We use TLS 1.3 for all data in transit.

Your MCP data is encrypted using keys derived from your credentials and stored exclusively in your browser's local storage. We employ a zero-knowledge architecture — our servers never see your plaintext MCP data.

6. Third-Party Services

We integrate with the following third-party services:

We do not use any advertising networks, data brokers, or analytics platforms that track individual users. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal information from our systems within 30 days, except where retention is required by law (e.g., billing records for tax compliance).

Your local MCP data is controlled entirely by you. Uninstalling the browser extension or clearing your browser data removes it permanently.

8. Your Rights

You have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request correction of inaccurate information
  • Deletion — Request deletion of your account and associated data
  • Portability — Receive your data in a structured, machine-readable format
  • Withdraw Consent — Withdraw consent for any processing based on consent

To exercise any of these rights, contact us at privacy@foxlight.dev. We will respond within 30 days.

9. International Transfers

Our infrastructure is hosted on Vercel, which may process data in multiple regions globally. By using the Service, you consent to the transfer of your account information to servers outside your country of residence. We ensure appropriate safeguards are in place for any such transfers.

10. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@foxlight.dev.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For questions or concerns about this Privacy Policy, contact us: