Privacy Policy

Who we are

FoxiBoss is operated by [legal entity name], registered at [registered address], Egypt, commercial register number [commercial register number]. In this policy "we", "us" and "FoxiBoss" mean that company.

For questions about this policy or about your personal data, contact us at [privacy contact address] or through the contact form on this site.

Two groups of people, two different roles

FoxiBoss serves two groups, and our responsibilities differ for each.

Businesses that hold a FoxiBoss account — owners and their team members. For their account data we are the data controller: we decide what is collected and why.

Survey respondents — the customers who scan a QR code or open a link and answer a business's survey. For those answers the business is the controller: they design the survey, decide what to ask, and decide what to do with the results. We process that data on their behalf, and we do not use it for our own purposes.

What we collect

From businesses using FoxiBoss:

• A phone number or email address, used to sign you in. FoxiBoss has no passwords — you receive a one-time code each time you log in.
• The organisation, branch and survey information you enter yourself, including branch names, addresses and contact numbers.
• Your subscription and payment history: plan, amount, dates, and the status of each transaction.
• Basic technical records needed to run the service securely, such as rate-limiting counters tied to a phone number or account.

What we collect from survey respondents

Respondents do not create accounts and are not asked to identify themselves. When someone answers a survey we store:

• The answers themselves, and which branch and survey they belong to.
• The time the response was submitted and the language it was answered in.
• A phone number, only where the business has added an optional phone question and the respondent chooses to fill it in. It is never required to submit a response.

Payment data

Card payments are handled entirely by Paymob, a licensed payment service provider in Egypt. Your card number, expiry date, security code and cardholder name are entered on Paymob's systems and are never sent to us.

FoxiBoss does not store card details of any kind. We keep only the record of a payment: its amount, currency, date, method and outcome.

Why we process your data, and on what basis

For businesses, we process personal data to perform the contract between us: creating and securing your account, running the surveys you build, taking payment, and providing support.

For survey respondents, processing rests on consent. Answering a survey is voluntary, no answer is required to receive any service, and providing a phone number is optional even where the question is shown.

We also process a limited amount of data to meet legal obligations, such as retaining accounting records, and to protect the service against abuse — for example, limiting how often a code can be requested.

Who we share data with

We do not sell personal data and we do not share it for advertising. We use a small number of service providers, each processing data only on our instructions:

• Supabase — hosting, database and authentication.
• WasenderApi — delivery of WhatsApp one-time codes and relaying messages sent through our contact form.
• Paymob — processing of card payments.
• We may also disclose data where the law requires it, or to establish or defend a legal claim.

Where data is stored, and transfers outside Egypt

Some of the providers above operate infrastructure outside Egypt, which means personal data may be processed outside the country.

Egypt's Personal Data Protection Law restricts such transfers and requires prior authorisation from the Personal Data Protection Centre. [State here the current authorisation status and the safeguards in place — this must be confirmed before this policy is published as final.]

How long we keep data

We keep personal data only as long as the purpose it was collected for requires.

Account data is kept for as long as the account is active, and for [retention period after account closure] afterwards. Survey responses are kept for as long as the business that collected them keeps its account, or until that business deletes them. Payment records are kept for [retention period for accounting records] to meet accounting and tax obligations.

When a retention period ends, the data is deleted.

Your rights

Under Egyptian data protection law you have the right to:

• Know whether we hold personal data about you, and obtain a copy of it.
• Have inaccurate or incomplete data corrected.
• Have your data erased where the purpose has ended, where you withdraw consent, or where there is no lawful basis to keep it.
• Object to processing, and withdraw consent at any time — withdrawal does not affect processing that already took place.
• Receive your data in a portable form.
• Complain to the Personal Data Protection Centre.

If you answered someone else's survey

Because the business that ran the survey is the controller of those answers, requests about them are usually fastest directed to that business. If you are not sure who they are, or they do not respond, contact us and we will help you reach them or act on their instructions.

How we protect your data

Access to data is restricted at the database level so that each business can reach only its own records. Traffic to the service is encrypted in transit. Sign-in uses one-time codes rather than passwords, which removes an entire category of credential theft. Requests for codes and survey submissions are rate-limited to resist abuse.

No system is perfectly secure. If a breach occurs that puts personal data at risk, we will notify the Personal Data Protection Centre and affected individuals as the law requires.

Cookies

FoxiBoss uses only the cookies needed to keep you signed in and to keep the site working. We do not use analytics, advertising or tracking cookies, and we do not embed third-party trackers.

Children

FoxiBoss is not directed at children and we do not knowingly collect their personal data. If you believe a child's data has reached us, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page. Where a change materially affects how we handle your data, we will make a reasonable effort to tell you directly.