Privacy Policy

MarkedFox (“MarkedFox”, “we”, “us”) is a publishing and messaging-automation tool for creators, available at markedfox.com. This policy explains what data we collect, why, and how to get it deleted. For anything this page does not answer, email support@markedfox.com.

• Account data. Your email address and password (stored as a hash by our authentication provider), and the display name you choose.
• Social account connections. When you connect a social account, the platform sends us an access token, your account's ID and username, and — for some platforms — the list of pages or profiles you manage. We never see or store your social media passwords.
• Content you create. Posts, captions, schedules, automation rules, and any media you upload for publishing.
• Usage records. Counts of actions that have plan limits (posts published, DMs sent), kept to enforce your plan and to bill correctly.
• Messages handled by automations. When you set up comment or DM automation, we process the comments and messages your rules match in order to send the replies you configured.

• Access tokens for your connected accounts are encrypted at rest with AES-256-GCM. They are used only to perform the actions you set up — publishing your posts, reading the comments your rules target, and sending the replies you configured. They are deleted the moment you disconnect the account (the × beside it on your dashboard) or delete your MarkedFox account, and where the platform offers it (X, YouTube, TikTok) we also tell the platform to revoke the access you granted.
• Uploaded media is stored only until it has been published, then deleted from our storage automatically. Uploads never attached to any post are deleted within days.

• We do not sell your data, to anyone, in any form.
• We do not use your data for advertising.
• We do not post, message, or take any action on your social accounts other than the ones you explicitly set up.
• We do not use data obtained from connected platforms to train machine learning or artificial intelligence models.

MarkedFox connects to social platforms through their official APIs, and your use of each platform through MarkedFox is also governed by that platform's own terms and privacy policy:

• Meta (Instagram, Facebook, Threads) — Meta Privacy Policy
• TikTok — TikTok Privacy Policy
• X — X Privacy Policy
• Snapchat — Snap Privacy Policy
• Google (YouTube) — Google Privacy Policy

MarkedFox uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service. You can revoke MarkedFox's access to your Google account at any time via the Google security settings page. MarkedFox's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We run on a small number of infrastructure providers, each processing data only to provide our service: Supabase (database and authentication), Cloudflare (DNS, and temporary media storage on R2), and DigitalOcean (application server). Payment processing, when you subscribe to a paid plan, is handled by Stripe — we never see or store your card number.

• Disconnecting a social account (the × beside it on your dashboard) deletes its stored tokens immediately.
• Deleting your MarkedFox account — Dashboard → Settings → Delete account — immediately removes your account data, workspaces, connected accounts and their tokens, posts, automation rules, usage records, and uploaded media. If you cannot sign in, email support@markedfox.com from your account's email address and we will complete the deletion within 30 days, confirming when it is done.
• Meta users: removing MarkedFox from your Facebook, Instagram, or Threads settings triggers Meta's deauthorization callback, and we delete the stored tokens for those connections automatically. A data-deletion request made through Meta also removes the publishing history we hold for those accounts, and Meta gives you a confirmation code whose status you can check at any time.

MarkedFox uses only the cookies required to keep you signed in. There are no advertising or cross-site tracking cookies, which is why there is no cookie banner.

If this policy changes in a way that matters, we will update the effective date above and, for significant changes, notify you by email before they take effect.