FoxLink is a CRM for small sales teams — and your data is the most valuable thing in it. Here's how we keep it private, secure, and under your control.
Your account and CRM data are stored entirely in the United Kingdom. Our database, authentication, and file storage run in Supabase's EU West (London) region, our application compute runs in London, and our rate-limiting cache (Upstash) and error monitoring (Sentry) run in the EU. Some data is processed by a limited set of vetted providers outside the UK/EEA under appropriate safeguards: AI features (Anthropic, US), transactional email (Resend, US), and payment processing (Stripe, US/EU). See our sub-processor list for the full picture.
All data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed and never stored in plain text.
Database-level Row Level Security isolates every workspace, so your data is never visible to other customers.
Role-based permissions (owner, admin, manager, member) govern administrative actions, enforced on the server.
An audit log records who changed what and when across your workspace, retained for 12 months.
We automatically watch account activity and logins for suspicious patterns and alert our team, so a possible incident is looked at quickly.
AI features use Anthropic's Claude on-demand only. Your data is never used to train AI models.
Export everything as CSV any time, and permanently erase your account or entire workspace from Settings.
Polyfox Studio Ltd (company number 17227391) is registered in England & Wales. When you store data about your own contacts in FoxLink, you are the data controller and we are your processor. We support the full set of UK GDPR data-subject rights — access, rectification, erasure, portability, restriction, and objection — with self-service tooling built into the app.
What we collect, why, and your rights over it.
Read →The terms that govern your use of FoxLink.
Read →How we process your contacts' data on your behalf under UK GDPR.
Read →The trusted providers we use, and where they operate.
Read →Have a security or privacy question, or need a countersigned DPA? Email privacy@foxlink.network, or report a vulnerability to security@foxlink.network.