Privacy Policy

1. We do not sell your data

We do not sell your personal information for money or for any other valuable consideration, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act as amended and by comparable laws elsewhere.

We do not rent, trade or licence your personal information to data brokers, advertisers or marketing networks. We do not use your information to build advertising profiles. There is no advertising or analytics tracker in the browser.

The only third parties who receive your information are the service providers listed in Section 13, who process it on our instructions in order to run the Service, and the recipients described in Section 14.

2. Who we are and how to reach us

The controller of your personal information is Omnifox Browser LLC, [ enable JavaScript to view ]. You can reach us about anything in this policy at [ enable JavaScript to view ].

This policy covers the browser, the website and the dashboard. It does not cover the websites you visit using the browser, which are controlled by their own operators under their own policies.

3. What we collect when you sign up

To open an Account we collect your name, email address, phone number and business address. We also record the IP address and browser user agent of the request that created the Account, as the record of who opened it and to detect abuse.

We verify your email address and phone number. Email codes are sent through Resend and stored only as a cryptographic hash, which is destroyed the moment the code is used. SMS codes are issued and checked by Twilio Verify and are never stored by us at all.

If you begin a signup and verify an email address or phone number but do not finish creating an Account, everything captured during that attempt is deleted automatically after three hours. Nothing from an abandoned signup is kept.

4. What we collect for billing

Payments are processed by Stripe. Card numbers, expiry dates and security codes are entered directly into Stripe and never reach our servers. We store only the Stripe identifiers needed to manage your Subscription, together with your plan, Seat counts, invoice history and payment status.

If a payment fails we record that fact and the retry schedule so access can be managed correctly.

5. What the browser sends us

The desktop browser reports only what is needed to operate your licence and keep the Service working. Specifically, it sends the following.

These are sent on a periodic heartbeat while you are signed in, and at sign in and sign out. They are not sent more often in order to build a behavioural profile, and they are never used for advertising.

• Sign in and sign out events, and the licence or Seat the session is using.
• A device identifier, with the operating system, architecture and browser version, so device limits and update eligibility can be applied.
• A count of open tabs, and whether a tab limit was reached, so entitlements can be enforced and capacity understood.
• The public IP address your traffic exits from, resolved through a third party lookup so the correct timezone and locale can be applied to a proxied tab.
• Managed settings applied by your Account Owner, where your Account uses them.

6. Crash reports and diagnostic logs

If the browser crashes it can send a crash report containing the technical state of the application at that moment: a stack trace, the version, the operating system, the list of installed extensions, and an identifier linking it to your Account so we can follow up.

Recent application console logs may be attached to a crash report to make the fault diagnosable. These logs describe the behaviour of the browser itself. They are not a record of the pages you visited, and they are used for nothing other than fixing faults.

You can turn diagnostic log collection off in the browser settings. Crash reports are used only for stability work and are deleted on the schedule in Section 15.

7. Website issue reports

If you choose to report a broken or blocked website, we receive the address of that site, what you told us was wrong, and technical details about the tab, which may include a screenshot if you include one. These reports are sent only when you submit one, and are used to improve compatibility.

8. What stays on your device and never reaches us

The parts of the browser holding the most sensitive material are deliberately local. The following are stored on your own machine, encrypted, and are never transmitted to us. We cannot read them, cannot recover them, and cannot produce them in response to a request from anyone.

Because this data is local, backing it up is your responsibility. The browser can export profiles to an encrypted file that you control with your own passphrase. If you lose the device or the passphrase we cannot help you recover the contents.

• Browsing profiles, and the cookies, localStorage, IndexedDB and cache belonging to each one.
• Saved logins, addresses and payment card details captured by autofill.
• Your browsing history and the content of the pages you visit.
• Proxy credentials held locally by a profile.

9. What we do not collect

We do not collect your browsing history, the addresses of the pages you visit, the content of those pages, your keystrokes, your form entries or your screen. There is no analytics SDK, no session recorder, no advertising pixel and no third party tracker in the browser.

Proxy credentials you save to your Account so the product can use them are encrypted at rest under a per record key. We do not inspect traffic passing through a proxy, and we do not log the destinations you reach through one.

10. Cookies on our website

The website uses only strictly necessary cookies: a session cookie that keeps you signed in, a short lived cookie holding an unfinished signup, and a preference remembering your light or dark theme. There are no advertising or analytics cookies, which is why there is no consent banner to dismiss.

Our website and API sit behind Cloudflare, which sets cookies necessary for security and bot protection when you use the signup or login forms.

11. How we use the information

We use what we collect only for the following purposes.

• To provide the Service, create and manage your Account, and apply your licence and entitlements.
• To take payment, issue invoices and manage your Subscription.
• To verify who you are at signup and at sign in, and to enforce device and session limits.
• To keep the Service secure, and to detect and investigate abuse, fraud and breaches of the Terms.
• To diagnose faults, fix crashes, and improve stability and compatibility.
• To send service messages about your Account, such as billing notices, security alerts and material changes to these documents.
• To comply with legal obligations, and to establish, exercise or defend legal claims.

12. Legal bases for processing

If the General Data Protection Regulation or the UK GDPR applies to you, we rely on the following. Performance of a contract, for everything needed to provide the Service you bought. Legitimate interests, for security, abuse prevention, fault diagnosis and product improvement, balanced against your rights. Legal obligation, for tax, accounting and lawful requests. Consent, only where we ask for it, which you may withdraw at any time without affecting processing already carried out.

13. Who we share it with

We share personal information only with service providers who process it on our instructions under contract, and only as needed to run the Service.

None of them is authorised to use your information for their own purposes.

• Google Cloud Platform, for application hosting and databases, in the United States.
• Cloudflare, for content delivery, DNS, and bot and abuse protection.
• Stripe, for payment processing, subscriptions and invoicing.
• Resend, for transactional email such as verification codes and account notices.
• Twilio, for SMS verification codes.
• An IP geolocation lookup provider, used to resolve the exit country of a proxy so the correct timezone and locale can be applied.

14. Other disclosures

We may disclose information where legally required, in response to a valid legal request, or where we reasonably believe disclosure is necessary to prevent harm, fraud or a violation of our Terms, or to establish or defend legal claims. Where we are permitted to do so, we will make reasonable efforts to notify you first.

If we are involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We will notify you, and any acquirer remains bound by this policy or gives notice before changing it.

We cannot disclose what we do not hold. The locally stored data described in Section 8 is not available to us to disclose to anyone, including in response to a legal request.

15. How long we keep it

We keep information only as long as we need it, on the following schedule.

• Unfinished signups: deleted automatically after three hours.
• Account and billing records: for the life of the Account, and afterwards for as long as tax, accounting and legal obligations require, typically seven years.
• Session, device and sign in records: kept while relevant to security and abuse investigation, then deleted.
• Crash reports and diagnostic logs: kept while a fault is being investigated, then deleted.
• Security and audit logs: kept for as long as needed for integrity and legal defence.

16. International transfers

We operate in the United States, and our providers may process information in the United States and elsewhere. If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to countries whose laws may differ from your own.

Where required, those transfers rely on the European Commission’s Standard Contractual Clauses or another approved mechanism, together with the measures described in Section 17.

17. How we protect it

Data is encrypted in transit and at rest. Secrets are held in a managed secret store rather than in configuration. Credentials you save are encrypted under per record keys. Access to production systems is limited to the people who need it, and is logged.

No system is perfectly secure and we cannot guarantee absolute security. If a breach affects your personal information and the law requires it, we will notify you and the relevant regulator within the required period.

18. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising any of these rights.

To exercise a right, email [ enable JavaScript to view ]. We will verify your identity against your Account before acting, and will respond within the period the applicable law allows. You may use an authorised agent where the law permits.

If you are in the EEA or the UK you may also complain to your local supervisory authority. We would prefer the chance to resolve it with you first.

Some information cannot be deleted on request where we are required to keep it, for example billing records needed for tax. We will tell you when that applies and delete the rest.

19. California residents

In the twelve months before the date of this policy we collected the categories described in Sections 3 to 7: identifiers, customer records, commercial information, internet and device activity relating to the Service, and geolocation inferred from an exit IP address at country level.

WE HAVE NOT SOLD OR SHARED PERSONAL INFORMATION AS THOSE TERMS ARE DEFINED BY THE CALIFORNIA CONSUMER PRIVACY ACT, AND WE DO NOT DO SO NOW. We have not sold or shared the personal information of any person under 16.

We do not use or disclose sensitive personal information for purposes beyond those permitted without a right to limit. California residents have the rights described in Section 18, exercisable at the same address.

20. Children

The Service is sold for business use and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

21. Changes to this policy

We may update this policy. If a change is material we will notify the Account Owner by email or by a notice in the Service before it takes effect. The "Last updated" date at the top shows when this document last changed.

We will not materially reduce your rights under this policy with respect to information already collected without your consent.