In plain words
Privacy
This public website records page views, clicks and session replays so we can see where pages confuse people, with typed input masked. The client portal records none of that. We do not sell data, and we do not identify individual visitors.
This public website
When you visit foxsantiago.com, our analytics provider, Hexclave, records the pages you view, where you click, and a session replay of how the page was used. Anything typed into a form field is masked in replays. A cookie links the visits of one browser together. We use this for one purpose: to see where the site is unclear and make it clearer.
We also use Google Analytics on this public site. It records the pages you view, how you arrived and general information about your device and location, and sets cookies to recognize a returning browser. Google processes this data under its own terms. It does not run on the portal, and it does not load at all if your browser sends Do Not Track or Global Privacy Control.
Telling people from automated traffic
Much of any website's traffic is automated: crawlers, scripts and servers. To count only people, our own server keeps a small record of each page view: the page, the site you came from, campaign tags in the link, your browser's timezone, language and screen size, and the country your connection comes from (as reported by Cloudflare). It does not keep your IP address. It keeps a one-way code made from your address and a value that changes every day and is then deleted, so the code tells us how many different visitors came that day and cannot be turned back into an address or followed across days. A view is marked automated when it comes from a crawler or script, from a data center network, or from a browser whose timezone does not fit its location. These records are deleted after 90 days. If your browser sends Do Not Track or Global Privacy Control, no record is made.
Booking a fit call
When you book a fit call on this site, we keep what you send (your name, company, email, phone if you give it, what you tell us needs fixing and the times that suit you) so we can call you and prepare. It goes to our own platform, not to an analytics service, and we email you a confirmation through Resend. To have it deleted, email [email protected].
The client portal
The portal at app.foxsantiago.com is for the people we work with. Sign-in is provided by Hexclave. The portal does not record page views, clicks or session replays. Every action that touches a client's work, such as a message sent, a file uploaded or an invoice issued, is written to an audit log that the client can read; that log is part of the service, not analytics.
What we do not do
- We do not sell or rent data.
- We do not identify individual visitors or look up the company behind a visit. If we ever add a company lookup for business visitors, it will be described here first, before it is switched on, with a way to clear it.
- We do not use client data to train AI models. Where a client's data reaches an AI model, it does so only through our own platform, using providers named in that client's contract.
Service providers
- Cloudflare carries traffic to our sites.
- DigitalOcean hosts the platform, in its New York data center.
- Hexclave provides sign-in and analytics on this public site.
- Google Analytics provides analytics on this public site.
- Resend carries email.
- Stripe processes client payments.
- OpenAI and Anthropic provide the AI models used for client work in the portal (meeting transcription, specifications, drafts), through their business APIs, which do not train on that data.
Contact
Questions and deletion requests: [email protected].
Questions people ask
Do you record my visit?
On this public site, yes: pages viewed, clicks, and a session replay that shows how the page was used, with anything typed into a form masked. We use it to find what is confusing and fix it.
Does the client portal record me?
No. The portal at app.foxsantiago.com runs with analytics and replays switched off. It is a separate site from this one, so nothing recorded here follows you there.
Do you identify who I am?
No. We do not look up companies or people from visits. If we ever add that, it will be described on this page first, before it is switched on.
What else is recorded when I visit?
A small record of each page view on our own server, used to tell people from automated traffic: the page, the site you came from, campaign tags, your browser's timezone, language and screen size, the country your connection comes from, and a one-way code made from your address that changes every day. Your IP address itself is not stored. Records are deleted after 90 days, and none is made if your browser sends Do Not Track or Global Privacy Control.
Who else handles my data?
Cloudflare carries traffic to the site, Hexclave provides sign-in and public-site analytics, Google Analytics provides public-site analytics, and Resend carries email. Each processes data only to provide that service.
How do I ask you to delete what you have?
Email [email protected] and say what you want removed. Client engagement data is also deleted on the written schedule in each contract when an engagement ends.