Privacy Policy

When you create an account, we collect:

• Email address: used to identify you and send transactional emails (sign-in links, password resets, notifications)
• Password hash (if using password authentication): stored securely by Supabase; we never see your plaintext password

When you sign in or use the Service, Supabase (our infrastructure provider) automatically logs:

• IP address: captured on authentication events
• Device and browser metadata: included in authentication logs
• Session tokens: stored on your device to keep you signed in

We do not directly access or use this data for any purpose other than security and abuse prevention. It is governed by Supabase's Privacy Policy.

FoxTrack stores the data you create while using the Service:

• Orders, quotes, and invoices
• Customer and contact records (CRM)
• Product and inventory data
• Filament and material records
• Printer configuration and status
• Expenses and financial records
• Workspace and team settings

This data belongs to you. We store it on your behalf and do not use it for any purpose other than providing the Service.

If you upload files to FoxTrack, we store them in Supabase Storage. This includes product images, profile or workspace avatars, and uploaded files (e.g. invoice PDFs, receipt photos, attachments). We store file metadata including file name, size, type, and upload timestamp.

If you use FoxTrack Bridge (our optional companion application for local printer connectivity), we receive and store live printer telemetry, including:

• Printer temperature data (nozzle, bed)
• Print progress and status
• Print history (duration, filament usage)
• AMS/material slot data (for compatible printers)

This data is relayed from your local network to FoxTrack via our secure relay service. It is stored in your workspace and is not used by us for any purpose other than displaying it back to you.

Payments and subscriptions are processed by Polar.sh, our billing provider. We do not store your payment card details. Polar.sh may collect your name and email address, payment method details, and purchase and subscription history. Billing data is governed by Polar.sh's Privacy Policy.

FoxTrack is hosted on Lovable, which provides basic usage analytics. This may include page views, session counts, and general usage patterns. This data is aggregated and not linked to individual users. We use it solely to understand how FoxTrack is being used and to improve the Service.

We use Supabase to send transactional emails (sign-in links, password resets). We also use or plan to use Resend for additional transactional emails such as order and invoice notifications. Before we send any marketing or promotional emails, we will ask for your explicit consent, and you may opt out at any time.

FoxTrack includes an optional AI assistant. It is off by default. To use it, a workspace owner or admin has to configure their own AI provider and API key: OpenAI, Google Gemini, Anthropic, a custom OpenAI-compatible endpoint, or a local model running on their own machine.

When you use the assistant, the following is sent to the provider you configured, at your direction:

• Your chat messages
• Files and images you attach, such as receipt photos
• Workspace data returned by the assistant's read-only tools, such as order, customer, product, expense, or inventory records, depending on which data-sharing toggles are turned on

The assistant can only read. It never writes to your workspace, and it only sees what a tool returned for that request.

Processing by that provider is governed by the provider's own terms and privacy policy. FoxTrack has no relationship with your provider: the account and the agreement are yours, and we cannot control what the provider does with the data you send it. Please read your provider's policy before turning the assistant on.

If you choose a local provider such as LM Studio or Ollama, your browser calls the model server directly and that data never passes through FoxTrack's servers.

API keys are stored server-side and are never sent to the browser or shown to other members. We only ever display a masked hint of the last few characters.

Chat history is stored per member, so each member sees their own conversations. Workspace owners and admins can also view other members' chat history for the workspace. We say this in the chat panel too, before you type. Images you attach are analysed for that request and are not kept in chat history. If you save a receipt as an expense, the file is stored as a normal upload as described in section 2.4.

Under Singapore's Personal Data Protection Act, you have the right to access personal data we hold about you, correct inaccurate personal data, withdraw consent to processing (where consent is the basis), and request deletion of your personal data.

If you are located in the EU or EEA, you also have the right to data portability (receive your data in a machine-readable format), object to or restrict processing, and lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect about you, request deletion of your personal information, and opt out of the sale of personal information (we do not sell personal information).