Privacy Policy

1. Who We Are

FOXTANA AI is operated by JOSFOX SAS de CV, Zapopan, Jalisco, Mexico. This policy covers how we collect, use, and protect your information when you use FOXTANA AI services across all channels (web, voice, Alexa, WhatsApp, SMS, email, mobile apps).

2. What We Collect

• Account information: Name, email address via Google Sign-In or Alexa Account Linking
• Voice interactions: Queries processed through Alexa or voice channels (used to generate AI responses)
• Usage data: Tokens consumed, models used, session duration, cost per turn
• Conversation content: Messages you send to FOXTANA AI (encrypted at rest)
• Usage patterns: Interests, preferences, and behavior inferred from interactions (anonymized, no PII)
• Device data: Browser type, IP address (anonymized in logs)

3. How We Use Your Data

• To provide and improve FOXTANA AI services
• To meter usage and process billing
• To personalize your AI experience across all platforms (Alexa, WhatsApp, Web, mobile apps)
• To create personalized, context-aware responses tailored to your interests — even across different devices, AI providers, and platforms
• To enforce guardrails and quality standards (ATHENA grading)
• To detect and prevent abuse

4. Zero PII Architecture

FOXTANA AI is built with a zero-PII-in-logs architecture:

• Personally identifiable information is never stored in application logs
• All PII is encrypted at rest with tenant-scoped encryption keys
• Not even JOSFOX employees can access your data unencrypted (employee-blind architecture)
• Emergency access (break-glass) requires dual approval and creates an immutable audit trail

5. Data Retention

• Conversation data: 90 days (configurable per tenant on Enterprise plans)
• Billing records: Retained indefinitely (immutable ledger)
• Operational logs: 30 days
• Analytics: 1 year (aggregated, no PII)

6. Your Data Travels With You

FOXTANA AI has no lock-in. Your context, preferences, and conversation history are yours. You can export your data or delete your account at any time. Pay as you go, leave anytime.

7. Third-Party Services

We use the following services to provide FOXTANA AI. All are SOC 2 compliant:

• Google Cloud Platform (infrastructure, authentication)
• OpenAI, Anthropic, Google AI, xAI (AI models via HERMES multi-provider routing)
• Amazon Web Services (Alexa skill hosting)
• Stripe (payment processing — PCI compliant)
• Meta (WhatsApp Business API)
• Twilio (SMS and voice services)

8. Tenant Isolation

All plans include logical tenant isolation — your data is completely separated from other customers. Enterprise plans offer physical isolation: your own dedicated FOXTANA instance with your branding and SSO.

9. Contact

For privacy inquiries: privacy@foxtana.ai

Operator: JOSFOX SAS de CV · Zapopan, Jalisco, Mexico