Privacy Policy

This Privacy Policy describes how Vulpy, Inc. ("Vulpy," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with the Fox in the box website and related marketing at https://foxinthebox.io/ (the "Site"). This policy applies to visitors and subscribers who are consumers or business contacts. It does not apply to third-party sites or services that we do not control.

Effective date: May 2, 2026. We may update this policy from time to time. When we make material changes, we will post the revised policy on the Site and update the effective date. Where required by law, we will provide additional notice or obtain consent.

Vulpy, Inc. is based in the United States and is the controller of personal information described in this policy for the activities covered here. Contact: privacy@foxinthebox.io. Postal address: 8 The Green, Ste D, Dover, DE 19901, United States.

The Site is intended for adult consumers and business contacts, not for children. We do not knowingly collect personal information from anyone under 13. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

Information we collect depends on how you interact with the Site. Categories may include identifiers (such as name and email address if you subscribe), internet or network activity (such as pages viewed and referring URLs), device and browser data (such as device type, operating system, language, and approximate location derived from IP address), and inferences drawn from the above for analytics and advertising measurement.

If you use our email subscribe form, we collect the information you submit (typically email address, and any optional fields shown on the form). That information is transmitted to Intuit Mailchimp (The Rocket Science Group, LLC) so we can send marketing or product messages and manage your subscription in accordance with your choices and applicable law.

We use cookies, pixels, and similar technologies on the Site. These technologies help us operate the Site, understand traffic and campaign performance, measure conversions, and deliver and measure advertising on our behalf and with partners. You can control many cookies through your browser settings and, where we offer them, consent or preference tools. Blocking certain cookies may affect Site functionality.

We use Google Analytics to understand how visitors use the Site (for example, pages visited, general geography, and technical diagnostics). Google's use of information is described in Google's policies. Where available, we may use Google Analytics features related to advertising or measurement in line with your settings and applicable law.

We use Google Ads (including tags and conversion measurement) to advertise our services and to measure whether ads led to visits or actions on the Site. Google may receive information from the Site and combine it with other data according to Google's policies.

We use Meta (Facebook) advertising and measurement tools (such as the Meta Pixel) to deliver and measure ads on Meta services and partner environments, and to build audiences for advertising where permitted. Meta's use of information is described in Meta's policies.

We use the X (formerly Twitter) Pixel and related advertising technologies to measure conversions and deliver or measure ads on X and partner properties. X's use of information is described in X's policies.

We use personal information to provide and improve the Site; to send newsletters and marketing communications when you have subscribed or where otherwise permitted; to personalize content and offers; to measure and optimize advertising campaigns; to detect, prevent, and address fraud, abuse, or security issues; to comply with law; and to exercise or defend legal claims.

If we later offer paid software or services with checkout on the Site, payments will be processed by Stripe, Inc. or its affiliates. We do not store your full payment card numbers on our servers. Stripe collects and processes payment details according to Stripe's privacy notice. We may receive limited information from Stripe to confirm transactions, prevent fraud, provide customer support, and maintain subscription records (for example, payment status, last four digits of a card where shown by Stripe, billing email, and transaction identifiers). When that processing begins, we will update this policy with additional specifics as needed.

We disclose personal information to service providers and partners who perform services on our behalf, such as Mailchimp (email marketing and list management), Google (analytics and ads), Meta (ads and measurement), X (ads and measurement), Stripe (payments, when applicable), and Cloudflare, Inc., which hosts the Site on Cloudflare Pages (static hosting, content delivery, and related network and security processing). We may also use additional security or IT vendors. These recipients are contractually or legally obligated to use information only as instructed or permitted.

We may disclose information if we believe in good faith that disclosure is appropriate to comply with law, regulation, legal process, or governmental requests; to enforce our terms or policies; to protect the rights, property, or safety of Vulpy, our users, or the public; and in connection with corporate transactions such as a merger, acquisition, financing, or sale of assets (with notice where required).

Because we operate globally, your information may be processed in the United States and other countries where we or our vendors operate. Those countries may have different data protection rules than your home country. Where required, we rely on appropriate safeguards such as standard contractual clauses approved by relevant authorities, or other lawful transfer mechanisms.

We retain personal information for as long as needed to fulfill the purposes described in this policy, including satisfying legal, accounting, or reporting requirements. Retention periods vary by context (for example, marketing lists until you unsubscribe plus a short period to process requests, and logs for security in line with internal policies).

We implement reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights regarding your personal information. These can include rights to access, correct, delete, or port your information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority. If you wish to exercise rights, contact privacy@foxinthebox.io. We will respond in accordance with applicable law.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing may include: your consent (for example, certain cookies or marketing where required); performance of a contract or steps prior to contracting; our legitimate interests (such as securing the Site, understanding aggregate usage, and advertising measurement compatible with law), balanced against your rights; and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

If you are a California resident, the California Consumer Privacy Act as amended ("CCPA") may apply. We describe categories of personal information collected and purposes above. We do not "sell" personal information for money. We may "share" personal information with advertising partners for cross-context behavioral advertising as defined under California law. California residents may have the right to know, delete, and correct certain personal information, and to opt out of sale or sharing for cross-context behavioral advertising, among other rights. To submit a request, email privacy@foxinthebox.io. We will verify your request as required by law. You may designate an authorized agent under applicable rules. We will not discriminate against you for exercising CCPA rights.

Residents of other U.S. states with comprehensive privacy laws may have similar rights (for example, access, deletion, correction, and opt-out of targeted advertising or profiling in certain cases). Contact privacy@foxinthebox.io to exercise rights available in your state.

If you are in Brazil, Japan, or other regions with privacy laws, you may have rights under local law (for example, confirmation of processing, access, correction, anonymization, deletion, portability, and information about sharing). Contact privacy@foxinthebox.io and we will respond consistent with applicable law.

Marketing emails: you can unsubscribe using the link in any marketing email or by contacting privacy@foxinthebox.io. Processing necessary to honor your unsubscribe request is not marketing.

The Site may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to read those policies before providing information.

If you have questions about this Privacy Policy or our privacy practices, contact privacy@foxinthebox.io.