What we are not
FoxPlug does not hold an ISO 27001 or SOC 2 certificate, and we do not say we are "aligned" with one. Some of the companies that host our data hold their own certificates; those belong to them, and each one is linked below under who we use. This page describes what our code and our database do today.
1. What we ask for in each tool you connect
You choose what to connect. Every connection can be removed from the app (Connections), and from the other tool's own settings.
| Tool | What it is asked for | What FoxPlug uses it for |
|---|---|---|
| GitHub | GitHub's repository permission (it has no narrower read permission for private repositories), plus read of your profile and organisations. | Reading repository names, commit messages, releases, and the titles of merged pull requests and closed issues. It adds one push webhook to a repository so new pushes reach FoxPlug. It never reads your code files and never changes your code. If you name a docs folder and press Check docs, it reads the pages in that folder. If you then press Approve on a drafted edit, it opens a pull request on your repository from a new foxplug/docs branch, only for files in that folder, with your own connection. It never pushes to your main branch and never merges. |
| Stripe | Read-only access. One-click connect also adds a single listener (three payment events) to your Stripe account; or you can paste a restricted read-only key instead. | Reading subscriptions and failed payments to show totals and drafts. It cannot charge, refund or change anything. Disconnecting removes the listener it added. |
| Analytics tools | A read-only key or token you create in that tool. | Reading visit and error counts for your brief. Nothing is written back. |
| Sign-in: your name, photo and email. Posting permission is asked for only when you press "Connect LinkedIn to post". | Publishing a post you previewed, only at the moment you press "Post now". Never on its own, never on a schedule. | |
| Product Hunt | Your own developer token and your own launch address. | Reading the numbers and the first 50 comments of your own launch, only when you press a button: one read every 10 minutes at most, and 6 a day except on your launch day and the 24 hours after it. Comment text and @handles stay in your own private list, never published, shared or exported. It never writes to Product Hunt. |
| Other tools (X, Bluesky, Mastodon, your newsletter tool, work trackers, hosting and error tools) | The access you grant on that tool's own screen. | Only the features you use. See the integrations pages for what each one reads. |
2. What FoxPlug never does
Nothing goes out without you
A post, a reply, an email or a note is a draft until you press send or post. FoxPlug does not post or send on its own, and it does not write drafts for your projects on its own: it only does so when you press "Check for what's new".
It does not touch your money
No charges, refunds or changes in Stripe. It reads, and it lists, and it drafts a note that you send yourself.
It does not read your code
Commit messages, releases and pull request titles, yes. Your source files, no.
It does not sell your data
We do not sell personal data. The providers we use are listed below.
3. Where your data lives, and who we use
Your account, projects, drafts and settings are stored in our database at Supabase, in the Asia Pacific (Mumbai) region. Our site is served by Cloudflare. The companies below handle your data for us; each one's own security page is linked. Their certificates are theirs, not ours. The privacy policy lists every provider, including analytics and logo look-ups.
| Provider | What it does for FoxPlug | Its own security page |
|---|---|---|
| Supabase | Database, sign-in, encrypted secret store, server functions | supabase.com/security |
| Cloudflare | Serves foxplug.com | cloudflare.com/trust-hub |
| Stripe | Payments for FoxPlug plans (we never see a full card number) | stripe.com/docs/security |
| Railway | Runs our video rendering servers | railway.com/legal/privacy |
| Resend | Sends the few emails FoxPlug itself sends | resend.com/security |
| Anthropic | Writes updates and drafts from your project's information | trust.anthropic.com |
| DeepSeek | Writes updates and drafts from your project's information | privacy policy |
| OpenAI | Voice narration for videos | openai.com/security-and-privacy |
| fal.ai | Background images for ads and cards | fal.ai/privacy |
| Vercel | Serves the help chat on foxplug.com (GetFoxChat, our sister product) | vercel.com/security |
| PostHog | Product analytics, only after you accept cookies | posthog.com/security |
4. How it is protected
- In transit. foxplug.com is served over HTTPS; a request to the plain-HTTP address is redirected to HTTPS.
- At rest. Your data sits in Supabase's managed database, which Supabase encrypts at rest; that is their feature, described on their security page above, not something we built.
- Your keys. The access tokens you give us for other tools are kept in Supabase's encrypted secret store (Vault), not in a plain table, and the app cannot read them back. Disconnecting a tool deletes our stored copy at once.
- Who can see your data. Every table in our database has row-level security switched on (214 of 214 on 11 November 2026), so a signed-in account can read only its own rows. Only FoxPlug's founder, and the people he delegates to, have production access.
- Logging. The app records what each connection did (a read, a failure, a disconnect) so a problem can be explained. It does not record your passwords or keys.
- Backups. We have not published a backup or restore-time commitment yet, so we make none here.
5. Keeping and deleting your data
- Disconnect a tool: press Disconnect in the app. Our stored key for it is deleted at once. For Stripe, the listener we added to your account is removed too.
- Try-it results: the "Show me my update" result, its private link and the hash of your IP address are removed after 7 days by a daily cleanup.
- Your account: press Delete my account in the app, under Settings, and type your email to confirm. A paid subscription is cancelled first (if that fails, nothing is deleted); your connected tools' keys are deleted at once; then your account and its data are deleted, with no waiting period. A record of the deletion is kept without your email, only a one-way hash of it. Stripe keeps its own invoices and customer record for tax law, and copies in our database provider's backups age out on its normal schedule. To ask for a copy of your data or a correction, email privacy@mentionfox.com.
6. If something goes wrong
- Contact: privacy@mentionfox.com.
- Our promise: if a problem on our side exposes your data, we tell the people affected by email within 72 hours of confirming it, with what happened and what to do.
- Found a weakness? Please tell us at the address above and give us a reasonable time to fix it before you publish it. We read every report and we reply.
Every statement on this page has a line of proof (a file and line in our code, or a database check) that we keep. Last reviewed 11 November 2026. There is no separate status page yet.