Privacy policy

Datenschutzerklärung · Last updated: 14 September 2026

This English text is a translation for your convenience. The German version is the binding one.

1. Controller

FOXI is operated by a sole trader (Einzelunternehmer). The controller's name and address are on the Impressum page. Email: hello@foxisocial.com. No Data Protection Officer is appointed; at this size and scope of processing, German law does not require one.

2. What this website collects

This marketing website does not set advertising or tracking cookies, and uses no third-party analytics service. Fonts are served from our own servers, so no font data is sent to third parties. Our hosting provider processes server log data (IP address, browser, time of request) to deliver the site securely, on the legal basis of legitimate interest (Art. 6(1)(f) GDPR). We do count page views ourselves, without cookies and without identifying anyone; section 2a says exactly how.

2a. The page counter

We count how many times each page of this site is opened, so we know which pages people read. The counter is our own and runs on our own servers. It sets and reads no cookies and stores nothing at all on your device, so no consent banner is needed for it.

When a page loads, it sends us three facts about the page: which page it is, the website that linked you here (the site name only, for example google.com, never the full address and never any search words), and the time-zone name your browser reports, for example Europe/Berlin. We turn the time zone into a two-letter country and keep only that. Nothing is stored that could identify you: no IP address, no browser fingerprint, no visitor or session identifier of any kind.

What we keep is a single counter per day, page, country and referring site: a number, not a record of a visit. Because there is no identifier, we cannot tell one person's five pages from five people's one page each, and we cannot link any page view to you. The legal basis is our legitimate interest in knowing which pages are read (Art. 6(1)(f) GDPR). There is no personal data here to request, correct or delete, because none is created.

2b. The waiting list

FOXI has not opened yet. Every purchase button on this site opens a short form instead. If you fill it in, we store your name, your email address, which plan button you pressed, which page you pressed it on, and the country your request came from, on the legal basis of your consent (Art. 6(1)(a) GDPR). Your IP address is not stored: the country is read from the request and reduced to two letters before anything is written. Two small notes are stored in your browser: one when the form is first shown to you, so it is not shown to you again, and one if you join, so you are not asked twice. Neither is a cookie, neither is sent anywhere, and both disappear when you clear your browser data. The list is used for one thing, telling you when FOXI opens, and it is never sold or passed on. Entries are deleted once FOXI has opened and you have been told, and in any case no later than 24 months after you joined. Write to the address in section 1 at any time and your entry is deleted sooner. Withdrawing your consent is free and has no consequence for you.

2c. The contact form

The “Contact” link in the footer of every page opens a form. If you send it, we receive your name, your email address and the message you wrote, together with the page you wrote from. We use it for one thing: to read what you wrote and answer you. The legal basis is Article 6(1)(b) GDPR where your message concerns a possible contract with us, and otherwise our legitimate interest in answering people who write to us (Art. 6(1)(f) GDPR). Messages are kept for as long as the matter is open and then deleted, at the latest 12 months after the exchange ends, unless we are required to keep them longer. Nothing you write here is used to advertise to you and nothing is passed on.

3. Processors we use

Website hosting: Cloudflare (Cloudflare Pages), a United States company, which serves the pages you are reading and keeps short-lived server logs.
Application hosting and database: Railway, a United States company. The waiting-list form, the contact form and the page counter all send to our own application there, so this is where a name, an email address or a message you send us is actually stored.
AI content generation: one or more AI language and image model providers, reached through a routing layer inside FOXI rather than a single provider, each processing only the brand data needed to generate a draft.
Payment processing: a third-party payment provider, named here once checkout is live.
Each of these acts only on our instructions under a data processing agreement (Art. 28 GDPR). Where a processor is located outside the EU, the EU Standard Contractual Clauses are the safeguard used for the transfer.

4. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. You may lodge a complaint with a supervisory authority. For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin. You may also complain to the authority where you live or work.

We do not use your data for automated decision-making or profiling in the sense of Article 22 GDPR. No decision with legal or similarly significant effect on you is taken by a machine here.

5. AI-generated content

The posts, captions and images FOXI produces are generated by artificial intelligence, not written by a person. We say so here because Article 50 of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) requires it to be stated plainly. Nothing is published to your accounts until you have seen it and approved it.

6. Contact

hello@foxisocial.com · postal address on the Impressum page