Privacy Policy

Last updated: 18 October 2026

This page explains how Foxinel handles personal data. Foxinel plays two different roles, and we cover them separately below: one for our own customers, and one for the people who visit our customers’ websites.

1. Who We Are

Foxinel is a consent management platform that helps Indian businesses collect, record and manage consent under the DPDP Act, 2023. We are based in Ghaziabad, Uttar Pradesh, India.

2. Foxinel as Data Fiduciary: Our Own Customers

When you sign up for Foxinel, we are the Data Fiduciary for your data under the DPDP Act, 2023. This section covers:

  • Your company account details
  • Names, emails and login sessions for everyone on your team
  • Demo requests you send us
  • Emails you send to our support address

Why we use it. To run the service, to keep it secure, and to contact you when we need to.

How long we keep it. For as long as your account is active. After your account is closed, we delete this data within 90 days, unless the law requires us to keep it longer.

Your rights. You can ask us to:

  • Give you access to the data we hold about you
  • Correct it if it’s wrong
  • Erase it
  • Raise a grievance if you’re unhappy with how we’ve handled any of this
  • Nominate someone else to act on your behalf

To use any of these rights, write to our Grievance Officer (§8 below).

3. Foxinel as Data Processor: Your Website’s Visitors

When one of our customers puts the Foxinel widget on their website, we process their visitors’ consent choices, browser IDs, optional user IDs, and rights-request emails, but only on that customer’s instructions. The customer is the Data Fiduciary for this data, not us.

If you’re a visitor to one of our customers’ websites and have a question about your data, please contact that website first. You’re also welcome to write to us directly, and we’ll help where we can.

4. Security

We protect data with:

  • Encryption for data moving over the internet
  • Hashed passwords: we never store your password in plain text
  • Access limited by role, so teammates only see what they need to

5. If Something Goes Wrong

If we become aware of a data breach, we will tell affected customers without delay.

6. Cookies

The Foxinel dashboard only uses essential cookies to keep you signed in. The Foxinel widget sets a consent cookie on our customer’s website, to remember a visitor’s choice.

7. Where Your Data Is Stored and Processed

We use these service providers to run Foxinel:

  • Render (Singapore): runs our API
  • Supabase (Mumbai, India): holds our database
  • Vercel: runs the dashboard and website
  • Cloudflare: delivers our widget script and handles our DNS
  • Resend: sends our emails

Because of this, some of your data may be processed outside India (currently in Singapore and the United States). The DPDP Act allows this, except for countries the Government of India specifically restricts.

8. Grievance Officer

We reply within 2 working days and resolve grievances within 30 days.

9. Changes to This Policy

If we change this policy, we’ll post the new version on this page with a new “Last updated” date.