Privacy Policy
Last updated: April 2, 2026
Effective date: April 2, 2026
FOX Digital ("we", "us", "our") operates FoxShield AI, an AI-powered code review service accessible at foxshield.centralfox.online and via GitHub App integration.
This Privacy Policy describes how we collect, use, and protect your information when you use FoxShield.
Table of Contents
1. Information We Collect
1.1 Account Information
When you sign up or install the GitHub App, we collect:
- GitHub username and user ID
- Email address (from your GitHub profile)
- Organization name (if applicable)
1.2 Code Review Data
When FoxShield reviews a pull request, we temporarily process:
- Pull request diff content (changed lines only, not full repository)
- File paths and names mentioned in the diff
- Commit metadata (SHA, author, timestamps)
- Repository name and organization
Important: We process PR diffs in memory during the review. We do not clone your repository or access your full source code. Only the diff content provided by the GitHub API is processed.
1.3 Usage Data
- API request logs (endpoint, timestamp, response status)
- Feature usage metrics (reviews completed, agents used)
- Error logs for debugging (no code content included)
1.4 Payment Information
Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers. We receive only:
- Stripe customer ID
- Subscription tier and status
- Billing email address
2. Information We Do NOT Collect
- Passwords or authentication tokens
- Full repository source code
- Private SSH keys or secrets (our agents detect these but do not store them)
- Browsing history or third-party tracking data
3. How We Use Your Information
We use the information we collect to:
- Provide and operate the FoxShield code review service
- Process PR diffs and return review findings
- Manage your account and subscription
- Send service-related communications (outage notices, security alerts)
- Improve our service through aggregated, anonymized usage analytics
- Respond to support requests
We do not sell your personal information to third parties.
4. Data Retention
4.1 PR Diff Content
PR diff content is processed in memory and discarded after the review is complete. We do not persist raw code in our database.
4.2 Review Results
Review findings (severity, category, file path, line number, description) are retained for the duration of your subscription to power dashboard analytics and the AutoDream learning engine. These contain finding metadata, not your source code.
4.3 Learning Data
Our AutoDream engine consolidates review patterns into aggregated insights (e.g., "this repository frequently has SQL injection patterns in route handlers"). These insights contain no raw code -- only patterns and categories.
4.4 Account Data
Account information is retained for the duration of your account. Upon account deletion, we remove your data within 30 days.
5. Self-Hosted Deployments
If you use FoxShield in self-hosted mode (Enterprise tier):
- Zero data leaves your infrastructure. All processing happens on your servers.
- We do not receive code, diffs, findings, or usage data from self-hosted instances.
- The only communication with our servers is license key validation (which transmits only the license key and machine identifier, no code or review data).
6. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| GitHub | Source code platform integration | OAuth tokens, webhook payloads |
| OpenRouter | LLM inference for code analysis | Anonymized code snippets for review |
| Stripe | Payment processing | Email, subscription tier |
Each third-party service has its own privacy policy. We encourage you to review them.
Regarding LLM providers: When we send code snippets to LLM providers for analysis, we use providers that do not train on customer data. Code snippets are sent ephemerally for inference only.
7. Data Security
We implement the following security measures:
- Encryption in transit: All communications use TLS 1.3
- Encryption at rest: Data stored in our databases is encrypted using AES-256
- Access controls: Role-based access, principle of least privilege
- Infrastructure isolation: Services run in isolated Docker containers
- Dependency scanning: Automated vulnerability scanning of our own dependencies
- Incident response: Documented incident response process with 72-hour breach notification
8. Your Rights (GDPR and Similar Regulations)
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Restriction: Request that we limit processing of your data
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@foxshield.centralfox.online. We will respond within 30 days.
9. Cookies
FoxShield uses minimal cookies:
- Session cookies: Required for authentication (expire when you close your browser)
- Preference cookies: Remember your dashboard settings
We do not use:
- Third-party tracking cookies
- Advertising cookies
- Analytics cookies that track you across websites
10. Children's Privacy
FoxShield is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Our servers are located in the European Union (Germany). If you access FoxShield from outside the EU, your data will be transferred to and processed in the EU. We rely on the adequacy of EU data protection standards for these transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will:
- Notify you via email at least 30 days before the changes take effect
- Update the "Last updated" date at the top of this page
- Display a notice in the FoxShield dashboard
Your continued use of FoxShield after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices:
- Email: privacy@foxshield.centralfox.online
- Website: https://foxshield.centralfox.online
- GitHub: https://github.com/PauloFox0105/foxshield-ai
FOX Digital
https://centralfox.online