Privacy Policy

xBesh Labs, LLC ("xBesh Labs", "we", "us", or "our") is the legal entity behind Foxora AI. We operate the website at foxora.ai and the Foxora AI platform, including its API, agent runtime, dashboard, and all related services (collectively, the "Service").

xBesh Labs, LLC is incorporated in Delaware, United States. Our registered address is 8 The Green, Dover, Delaware, United States 19901.

This Privacy Policy describes how we collect, process, store, share, and protect personal information when you use the Service, and explains the choices available to you regarding your personal data.

We collect information in the following categories:

We use the information we collect to:

• Provision, operate, and maintain the Service and its features
• Process billing, manage subscriptions, and prevent fraud
• Enforce plan limits, rate limits, and acceptable-use policies
• Send transactional emails (account confirmation, invoices, password reset, usage alerts)
• Provide customer support and resolve technical issues
• Monitor and improve reliability, performance, and security
• Generate aggregated, anonymized analytics about service usage
• Comply with legal obligations and respond to lawful requests

We do not sell, rent, or trade your personal information. We may share data with third parties only in these limited circumstances:

We retain personal data for as long as your account is active and as necessary to provide the Service, meet legal obligations, resolve disputes, and enforce agreements.

• Account data is retained while your account is active and for up to 90 days after deletion, then permanently purged
• API usage logs are retained for up to 13 months for billing reconciliation and abuse detection
• Payment records are retained for 7 years as required by financial regulations
• Support communications are retained for 3 years

We protect your data using:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive values at rest (e.g., API keys)
• Row-level security and role-based database access controls
• Multi-factor authentication requirements for infrastructure access
• Regular security reviews and dependency audits

We use essential cookies and browser storage to operate the Service. These include:

• Session tokens and authentication state managed by Supabase Auth
• Dashboard theme preference stored in localStorage
• Affiliate tracking cookies (30-day window) to credit referral commissions
• CSRF protection tokens

We do not run third-party advertising networks or cross-site behavioral tracking. You can manage cookies in your browser settings, though disabling essential cookies will prevent login.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: update inaccurate or incomplete profile information via dashboard settings
• Deletion: request permanent deletion of your account and associated data
• Portability: export your usage data and account information
• Restriction: object to certain processing activities
• Opt-out of marketing: unsubscribe from non-transactional emails at any time

To exercise these rights, contact us at privacy@foxora.ai or use the account settings in your dashboard. We respond to all requests within 30 days.

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that a child has provided us with personal data, we will delete it promptly. If you believe a child has provided us with data, contact privacy@foxora.ai.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of the Service after notification constitutes acceptance of the updated policy.

For privacy-related questions, data requests, or to report a concern, contact us at: