Privacy
Privacy policy
Short version: we collect what you type into our forms and nothing else, we keep it in a private database we control, we never sell it, and you can have it deleted by emailing us.
Effective September 5, 2026. Operated by Forest Penland trading as Fox Hill AI, Warwick, New York, United States. Questions: hello@foxhill.ai.
What we collect
What you give us
- Contact and onboarding forms — name, email, business name, current website, what you need, your answers to the fit questions, preferred call windows, and everything you enter in the intake (business description, goals, links to brand assets, how your domain and hosting are controlled, social handles, notes).
- Email you send us — messages to hello@foxhill.ai and replies to our messages.
What our systems record
- First-party usage events — page views, button clicks, form starts and onboarding steps, recorded without cookies and without any third-party analytics script. We do not use Google Analytics, advertising pixels, or fingerprinting.
- Server logs — request paths and status codes, and error messages. Logs are written so that they never contain your email address or message text.
- Payment status— when you subscribe, Stripe tells us the subscription and customer identifiers and whether a payment succeeded. Card numbers never touch our systems; they are entered on Stripe's hosted checkout page.
Where it lives
- Form submissions, intakes, usage events and a copy of every email we send you are stored in a private database (Amazon DynamoDB, US East) that only this site's own server function can read. Nothing you type is ever stored in a content-management system or any public dataset.
- Email is sent and received through AgentMail on our own domain. Replies you send land in an inbox read by a person; no automated system acts on inbound email.
- Payments are processed by Stripe under Stripe's own privacy policy.
- If a customer-relationship or project-tracking tool (Attio, Linear) is connected, a copy of your inquiry is filed there so we can follow up. Both are business tools with their own privacy policies; we do not add you to marketing lists.
Cookies
The public site sets no tracking cookies. Two functional cookies can exist: a short-lived preview cookie used only by the site owner to view draft content, and Stripe's own cookies on the checkout page. Your onboarding progress is remembered in your browser's local storage (a lead reference only) so you can resume after checkout; clear your browser storage to remove it.
How we use it
To reply to you, prepare and deliver the work you ask for, run and improve this site, and meet legal and accounting obligations. We do not sell personal information and we do not share it with anyone except the service providers named above, as needed to do those things.
How long we keep it
Inquiries and intakes for as long as we have a business relationship or a reasonable expectation of one, and no longer than 24 months after our last contact unless a contract or the law requires longer. Usage events are aggregated and the raw records deleted within 12 months. Server logs are kept for 30 days.
Your choices
- Email hello@foxhill.ai to see what we hold about you, correct it, or have it deleted. We answer within 10 business days and delete unless a contract or legal obligation prevents it.
- Every message we send is transactional and tied to something you asked for. We do not send newsletters from this site.
Health information
Please do not send us health information about yourself or anyone else. Our forms are not designed for it, and we do not act as a HIPAA business associate.
Children
This site is for businesses and is not directed at children under 16. We do not knowingly collect their information.
Changes
We will update this page and the effective date when anything material changes. The current version is always at foxhill.ai/privacy.