Privacy policy

Last updated 2 October 2026

This policy explains what personal data FactoryFox processes, why, and the choices you have. It covers the website getfactoryfox.com, its API, the FactoryFox MCP server and the FactoryFox plugins for AI assistants.

Who is responsible

Monemetrics OÜ, Sepapaja 6, 15551 Tallinn, Estonia, is the controller. Contact us about anything in this policy at privacy@getfactoryfox.com.

What we process and why

Visiting the site

Our servers receive your IP address, browser user agent, the pages you request and the time. We use this to deliver the site, keep it secure and fix problems (legitimate interest, GDPR Art. 6(1)(f)), and keep it only as long as needed for those purposes.

Analytics

We use PostHog, hosted in the EU, to count visits and understand how the site is used. By default this runs without cookies and without identifying you (legitimate interest). If you choose Allow in the notice at the bottom of the page, PostHog may also set cookies, link your visits, and record your session with all form inputs masked (consent, Art. 6(1)(a)). You can withdraw consent at any time from the same notice.

Searches and conversations

When you search or chat, we store your query, the results we showed and the conversation, linked to your account if you are signed in. We use them to answer you, keep your history and improve search quality. Please don't put personal data in queries; they are sent to the AI providers listed below to be processed.

Accounts

If you sign in, we store your email address and display name, and which sign-in method you used: a one-time link sent by email, or Google (which shares your name, email address and profile basics). A cookie keeps you signed in for up to 30 days. This is needed to provide the account (contract, Art. 6(1)(b)).

Claiming and editing a company profile

When you claim a profile we store your work email, job title, the claim and the date you accepted the supplier terms, and we check your email domain against the company's website or review the claim by hand. Changes you make to a profile are recorded with your account. If you opt in to emails from us, we record that choice; you can unsubscribe at any time.

Website audits

When you request an audit of a website, we fetch that site's public pages and store the report, which is available to anyone with its private link.

AI assistants, the API and MCP

Requests to our API, MCP server or plugins (for example a search query or a company name) are processed and logged like searches on the site. They need no account. Your AI assistant's provider decides what it sends us; their privacy policy covers your conversation with them.

Information about companies

Supplier profiles are built from public sources: companies' own websites, trade fair exhibitor lists and similar listings, which we collect and summarise with automated tools. We publish company contact channels such as a general sales address or main phone number. We don't publish named people's contact details unless they gave them to us for that purpose. We process this information to run a business directory (legitimate interest). If a profile includes data about you, you can ask us to correct or remove it, or object, at privacy@getfactoryfox.com; companies can also claim their profile and edit it.

Who receives data

Our servers and database are in the European Union. We use these service providers, under data processing terms, only for the purposes above:

PostHog (EU cloud): product analytics.
Mailgun (EU region): sending sign-in and service emails.
Google: sign-in, only if you choose it.
OpenRouter, and the AI model providers it routes to, and TypeSafe: interpreting searches, writing answers and extracting information from public company pages.
Cloudflare: DNS and network delivery.

Some of these providers process data outside the EU/EEA, mainly in the United States. Those transfers rely on an adequacy decision such as the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses. We don't sell personal data.

How long we keep it

Account data is kept while your account exists and deleted when you ask us to close it, except what we must keep by law. Searches and conversations are kept while useful for your history and for improving search, and deleted with your account on request. Analytics data follows PostHog's retention settings for our project. Records of claims, consents and profile changes are kept as long as needed to show who made a change and on what basis.

Cookies and local storage

Sign-in cookie: keeps you signed in. Necessary, set only when you sign in.
Your analytics choice and your saved suppliers: stored in your browser's local storage, not sent to us.
PostHog cookies: only after you allow analytics.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time. Write to privacy@getfactoryfox.com; we answer within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the authority where you live.

Children

FactoryFox is a business service and isn't meant for anyone under 16.

Changes

We'll update this page when our processing changes and change the date above. For significant changes affecting account holders, we'll also tell you by email.