Privacy policy

Foxquart is a product engineering studio based in India. We build operational software (clinic systems, school and warehouse platforms, automation) and this website is where we describe that work and take enquiries.

This policy covers this website and the enquiries that reach us through it. It does not cover data we handle inside a client project; that is governed by the agreement signed for that project, and is described in section 13.

Nothing you type is transmitted while you type it. When you press send, the form submits what you entered to our own server, which does two things: it stores the enquiry in our database (hosted by Neon) so it cannot be lost, and it emails a copy to our enquiry mailbox (delivered by Resend) so we see it quickly. Both copies contain only what you put in the form.

Alongside the fields you fill in, the server records the time of the submission, your browser’s user-agent string, and a one-way hash of your IP address. The hash is used only to slow down abuse of the form (rate limiting); the IP address itself is not stored.

The enquiry we receive is built from the fields you fill in:

• Your name, and the email address you want a reply at.
• Optionally your company name and a phone number.
• The kind of work you are asking about, a timeline, and your preferred time of day for a call, together with the timezone your browser reports.
• Whatever you write in the message field, usually a description of the process or system you want fixed.

You can also reach us without the form. If you email business@foxquart.com or call one of the numbers on the site, we hold that correspondence and any notes we make about the conversation.

Please do not send us confidential material, patient data, credentials or production exports in a first enquiry. If a project needs that, we will put an NDA and a secure transfer route in place first.

Three things measure or log traffic on this site. None of them shows us who you are, and none of them is an advertising tool.

There is no login, no session recording, no heatmap tool, no advertising pixel and no cross-site tracking on this site.

This site sets no cookies of its own. There is no account, no cart and no preference to remember, and both analytics tools above are cookieless. Storage can still be created in your browser by content we load from other domains:

• Embedded demo sites. Our work section shows live demo websites inside frames so the preview never goes stale. Those sites run in your browser under their own domains and can set their own cookies or local storage, which we cannot see or control.
• Web fonts and imagery. Typefaces are loaded from Google Fonts and some photographs from Unsplash. Requesting a file from another domain sends that provider your IP address and browser details as part of the request.

You can block or clear this storage in your browser settings, or block third-party frames entirely. Doing so may leave the demo previews blank but the rest of the site will work.

We keep the list short on purpose. These are all of them:

We do not sell personal data, we do not share it with advertising networks or data brokers, and we run no retargeting. We disclose information to authorities only where the law requires it.

• To answer your enquiry and prepare a scope or proposal. For visitors in the EEA or UK, the basis is steps taken at your request before entering a contract; under India's Digital Personal Data Protection Act, 2023, it is the purpose for which you voluntarily provided the information.
• To understand which pages are useful and how quickly the site loads. The basis is our legitimate interest in running and improving our own website. The measurement is aggregate and does not identify you.
• To keep the site available and deal with abuse. The basis is our legitimate interest in the security of our systems.
• To keep records of engagements we take on. The basis is legal obligation under tax and company law, and our legitimate interest in being able to answer a dispute.

We do not use enquiry details to build a marketing list. If you write to us once and we do not work together, we do not add you to a newsletter.

• Enquiries (the database record, the email copy and call notes): kept while the conversation is live and for 24 months after the last message, then deleted from both the database and the mailbox.
• If an engagement starts: correspondence and project records are kept for the life of the engagement, then for the period Indian tax and company law require of business records, currently eight financial years for books of account.
• Analytics: aggregate, non-identifying counts held by Vercel for the retention window of our plan. No profile of you is built or stored, and nothing there can be traced back to a person.
• Hosting logs: short-lived, kept by our host for its standard operational window.

You can ask us to delete your enquiry earlier than any of this. See section 10.

Foxquart operates from India. The site is served from Vercel’s global edge network, so your request is usually handled by whichever server is closest to you, which may be outside India. Enquiries are stored with Neon and delivered by Resend, whose infrastructure may also be outside India. Our mailbox is hosted by Google.

Where information about visitors in the EEA or the UK is processed outside those regions, we rely on the standard contractual clauses and transfer terms our providers publish for their services.

Whoever and wherever you are, you can ask us to:

• Tell you what we hold about you and why.
• Correct anything that is wrong.
• Delete it, including deleting an enquiry thread from our mailbox.
• Stop using it for a particular purpose.
• Send you a copy in a portable format.

Write to business@foxquart.com from, or quoting, the email address you contacted us with, so we can be reasonably sure the request is yours. We respond within 30 days. There is no charge and we will not treat you differently for asking.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you rights of access, correction, erasure, grievance redressal and nomination, and the right to escalate to the Data Protection Board of India. If you are in the EEA or the UK, the GDPR and UK GDPR give you access, rectification, erasure, restriction, portability, the right to object to processing based on legitimate interests, and the right to complain to your data protection authority.

Traffic to this site is encrypted in transit over HTTPS, and so is the connection between our server and the enquiry database. There are no visitor accounts; the only personal data the site stores is what you send through the contact form, and that database is not readable from the website itself; it is reachable only with credentials held by the people who answer enquiries. The mailbox that receives enquiries is protected with two-factor authentication.

No system is completely secure. If a breach affects your information we will tell you and the relevant authority within the timeframes the law sets.

This site is aimed at businesses and the people who run them. It is not directed at children and we do not knowingly collect information from them. If you believe a child has sent us personal information, write to us and we will delete it.

During an engagement we often process data belonging to a client’s business: patient records, staff rosters, stock movements, customer lists. In that relationship the client decides what is collected and why; we act on their instructions under the agreement signed for that project, with access limited to the engineers working on it.

If you are a customer, patient or employee of one of our clients, your rights sit with that organisation, not with us. Write to them, and they can instruct us.

The date at the top of this page is the date of the current version. If a change materially affects how we handle enquiry data we will say so on this page, and tell active clients by email.

For any privacy question or request, or to raise a grievance about how we have handled your information, write to business@foxquart.com. Our postal address is available on request. You can also call:

• +91 69095 19692
• +91 87319 53807

If you are not satisfied with our answer, you may escalate to the Data Protection Board of India, or (if you are in the EEA or the UK) to your local supervisory authority.