Privacy Policy

1. Who we are

Caption Fox is operated by Caption Fox Ltd ("we", "our", "us"). We provide an AI-powered social media content management platform accessible at captionfox.com and related subdomains.

Data controller: Caption Fox Ltd. Contact: privacy@captionfox.com

2. Data we collect

Account data

When you create an account we collect your name, email address, and password (hashed). If you sign in via Google OAuth, we receive your name and email from Google.

Workspace and content data

We store content you create, schedule, or publish through Caption Fox — including captions, media files, campaign details, and social channel access tokens necessary for posting.

Usage data

We collect information about how you use Caption Fox, including pages visited, features used, AI generation history, and error logs. This helps us improve the product.

Payment data

Payments are processed by Stripe. We store your subscription plan and billing history but never see or store your full card number.

Cookies and tracking

We use essential cookies for authentication, and optional analytics cookies. See our Cookie Policy for details.

3. How we use your data

• To provide, operate and improve the Caption Fox service
• To process payments and manage subscriptions
• To send transactional emails (receipts, password resets, notifications)
• To respond to support requests
• To detect and prevent fraud and abuse
• To comply with our legal obligations

We do not sell your personal data to third parties. We do not use your content to train AI models without your explicit consent.

4. Legal basis (UK GDPR)

• Contract: processing your account data to deliver the service
• Legitimate interests: improving the product, preventing fraud, security monitoring
• Consent: marketing emails and optional analytics cookies
• Legal obligation: audit logs, tax records

5. Data sharing

We share data with:

• Supabase — database, auth and storage provider
• Anthropic — AI content generation (prompts and outputs)
• Stripe — payment processing
• Social platforms — for content scheduling (e.g. Meta, TikTok APIs)

All sub-processors are bound by data processing agreements and comply with applicable privacy laws.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days, except where we are required by law to retain it (e.g. financial records, 7 years).

7. Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time

To exercise any right, email privacy@captionfox.com. We will respond within 30 days.

8. Security

We use industry-standard security measures including TLS encryption in transit, AES-256 at rest, row-level security in our database, audit logging, and two-factor authentication. We undergo regular security reviews.

9. International transfers

Your data is stored primarily in the EU (Supabase). Some processing may occur in the US (Anthropic, Stripe). All international transfers are made under appropriate safeguards (Standard Contractual Clauses).

10. Changes to this policy

We may update this policy. We'll notify you via email or in-app notification for material changes. Continued use after the effective date constitutes acceptance.

11. Contact & complaints

Questions: privacy@captionfox.com

You also have the right to lodge a complaint with the ICO (UK): ico.org.uk