Privacy Policy

This policy explains what personal data Foxadi ("we", "us") collects when you use foxadi.com, how we use it, who we share it with, and the rights you have over it. Foxadi is a platform that helps startup founders and contributors find each other based on shared skills.

Data controller: foxadi.com. Contact for any privacy question or request: [email protected].

1. Information we collect

Account information you provide when you register: email address, full name, password (we never store your actual password — only a one-way bcrypt hash of it), and whether you're joining as a founder or contributor.

Profile information you optionally add: a short bio, your skills, location, timezone, GitHub/LinkedIn links, and a profile photo.

Content you create: project listings you post, applications you send, messages you exchange with other users, and any text within them.

Information collected automatically: your IP address and request timestamps, logged briefly for security purposes (rate limiting, abuse prevention). We do not use this for tracking or advertising.

2. How we use your information

• To operate the core service: matching you with relevant projects or contributors based on skills
• To send you account-related emails: email verification and password reset links
• To keep the platform secure: detecting abuse, enforcing rate limits, preventing unauthorized access
• To respond to you when you contact us

We do not use your data for advertising, and we do not sell your data to anyone.

3. Who we share it with

Other users. Your name, bio, skills, location, and avatar are visible to other logged-in users, since that's how matching works. Your email address is only shared with a founder once you apply to their project — it's never visible to founders or contributors you haven't interacted with, and it's never public.

Service providers who process data on our behalf, strictly to run the platform:

• Railway — hosts our backend application and database
• Cloudflare — hosts our frontend, and provides DNS, content delivery, and security filtering
• Resend — delivers our transactional emails (verification, password reset)

These providers may process data outside your country, including in the United States. Each operates under its own privacy and security commitments as a data processor for Foxadi.

We do not share your data with any other third party, and we do not use third-party advertising or analytics trackers.

4. Cookies

Foxadi uses two cookies, both strictly necessary for you to stay logged in: a short-lived session token and a longer-lived, revocable login token. Both are httpOnly (inaccessible to page scripts) and sent only over HTTPS. We do not use tracking, analytics, or advertising cookies — which is also why you won't see a cookie consent banner here: strictly necessary cookies like ours don't require one.

5. Data retention

We keep your account data for as long as your account is active. If you'd like your account and associated personal data deleted, contact us at [email protected] and we'll process the request without undue delay. Self-serve account deletion is on our roadmap.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (most of this you can already edit directly in your profile)
• Request deletion of your data
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at [email protected].

7. Security

Passwords are hashed with bcrypt and never stored in plain text. All traffic to Foxadi is encrypted (HTTPS). Login sessions use httpOnly cookies and are individually revocable. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable, industry-standard measures to protect your data.

8. Children's privacy

Foxadi is not directed at, and should not be used by, anyone under 16 years old.

9. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.

10. Contact

Questions about this policy or your data: [email protected]