Privacy Policy

1. Who we are

Rfox AI (“we”, “us”, “our”) operates the website and the credit-based AI services accessible through it. If you have any privacy question, contact us at [email protected].

2. Data we collect

• Account data — first name, last name, email and hashed password provided at checkout.
• Order & billing data — selected credit pack, currency, applied promo code, payment method (bank transfer), invoice details.
• Usage data — services you run, credits spent, prompts, inputs and generated outputs, kept to deliver the feature and support you.
• Technical data — IP address, browser, device, log timestamps, cookies (see our Cookie Policy).

3. How we use your data

• To create your account and process credit purchases.
• To run the AI services you request and debit the corresponding credits.
• To send transactional emails (order confirmation, bank details, receipts, password reset).
• To secure the platform, prevent fraud and comply with legal obligations.
• To improve our services through aggregated, non-identifying analytics.

4. Legal bases

We rely on the performance of a contract (delivering paid credits and services), our legitimate interests (security, product improvement), your consent (non-essential cookies) and compliance with legal obligations (accounting, tax).

5. Sharing & sub-processors

We only share data with vetted providers strictly needed to operate the service: hosting, email delivery, payment reconciliation and AI model providers powering individual services. We never sell personal data.

6. International transfers

Data may be processed outside your country by our sub-processors. When that happens we rely on Standard Contractual Clauses or an equivalent safeguard.

7. Retention

Account and billing data are kept while your account is active and up to 7 years afterwards to meet accounting duties. Prompts and outputs are retained for up to 12 months unless you delete them earlier.

8. Your rights

You can access, correct, export or delete your personal data, restrict or object to processing, and withdraw consent at any time by writing to [email protected].

9. Security

Passwords are hashed, traffic is encrypted in transit (TLS) and access to production systems is restricted and logged. No system is 100% secure — please use a strong unique password.

10. Changes

We may update this policy. Material changes will be announced on this page and, when required, by email.