Trust Centre
FoxLink is a CRM for small sales teams — and your data is the most valuable thing in it. Here's how we keep it private, secure, and under your control.
Where your data lives
Your account and CRM data are stored entirely in the United Kingdom. Our database, authentication, and file storage run in Supabase's EU West (London) region, our application compute runs in London, and our rate-limiting cache (Upstash) and error monitoring (Sentry) run in the EU. Some data is processed by a limited set of vetted providers outside the UK/EEA under appropriate safeguards: AI features (Anthropic, US), transactional email (Resend, US), inbound email logging (Postmark, US), and payment processing (Stripe, US/EU). See our sub-processor list for the full picture.
How we protect it
Encryption
All data is encrypted in transit (TLS) and at rest (AES-256). Passwords are hashed and never stored in plain text.
Workspace isolation
Database-level Row Level Security isolates every workspace, so your data is never visible to other customers.
Access controls
Role-based permissions (owner, admin, manager, member) govern administrative actions, enforced on the server.
Audit logging
An audit log records who changed what and when across your workspace, retained for 12 months.
Threat monitoring
We automatically watch account activity and logins for suspicious patterns and alert our team, so a possible incident is looked at quickly.
AI without training
AI features use Anthropic's Claude — most when you use them, and a few automatically for paid workspaces (refreshing lead scores, flagging stalled deals, preparing the daily brief). Your data is never used to train AI models.
Your data, your call
Export everything as CSV any time, and permanently erase your account or entire workspace from Settings.
Data protection & GDPR
Polyfox Studio Ltd (company number 17227391) is registered in England & Wales. When you store data about your own contacts in FoxLink, you are the data controller and we are your processor. We support the full set of UK GDPR data-subject rights — access, rectification, erasure, portability, restriction, and objection — with self-service tooling built into the app.
Policies & agreements
Privacy Policy
What we collect, why, and your rights over it.
Read →Terms of Service
The terms that govern your use of FoxLink.
Read →Data Processing Agreement
How we process your contacts' data on your behalf under UK GDPR.
Read →Sub-processors
The trusted providers we use, and where they operate.
Read →Have a security or privacy question, or need a countersigned DPA? Email privacy@foxlink.network, or report a vulnerability to security@foxlink.network.