Privacy, in specific terms.

Who is responsible

Gatherfox is a Foxden product. Foxden is the controller for organizer accounts, project administration and this website. For contribution content, Foxden processes the recording to provide the project requested by the organizer and also has direct responsibilities for security, transparency and deletion.

Privacy questions and rights requests can be sent to contact@foxdenlabs.com. Include only the project ID or contribution receipt ID when possible; do not attach recordings or private links.

Information we handle

We limit collection to information needed to collect, process and deliver a private montage.

• Organizer details: email address, sign-in and security records, project settings, invitations and support correspondence.
• Contributor details: display name, optional receipt email, language, consent record and the video or audio they submit.
• Project media: original uploads, normalized working copies, thumbnails, waveforms, transcripts, captions, previews and final films.
• Technical details: browser and device class, upload diagnostics, approximate region derived from IP, rate-limit records and security events. We do not retain full IP addresses in product analytics.
• Purchase details: order, price, discount, entitlement and refund status. Paddle handles card and billing details; Gatherfox does not receive full payment-card numbers.

Why we use it

We process account, project and media data to provide the service and perform our contract with the organizer. We use necessary security, abuse-prevention, reliability and minimal product-measurement data for our legitimate interests, balanced against the private nature of the service. We use consent where the law requires it, including a contributor’s explicit agreement before submission and optional non-essential cookies.

We do not train models on recordings, transcripts or project text. We do not sell personal data or use private project content in advertising or marketing.

Contributors and children

A contributor sees the organizer, recipient, prompt, deadline, intended montage use and retention summary before submitting. A private receipt link allows replacement or withdrawal until collection closes.

Contributors must be 13 or older. An adult may submit a recording featuring a younger child only if that adult is the parent, legal guardian or otherwise has authority to consent for the child and every person shown. Gatherfox is not directed to children under 13.

Deletion schedule

The exact original upload is deleted 30 days after it is uploaded. A metadata-stripped normalized copy, poster, waveform and editable transcript expire at the earlier of 30 days after the first complete preview becomes watchable or 90 days after upload. If no preview is made, working media expires 90 days after upload.

An unpaid preview and locked clean master expire 30 days after the first preview. After payment, the final MP4, final caption file and private viewing page remain for 12 months from payment. When working media expires, the paid final can still be watched and downloaded, but it can no longer be rebuilt and individual clips are no longer available.

Organizer deletion or contributor withdrawal revokes access immediately and starts physical deletion, which we complete within 24 hours. Encrypted backups and storage lifecycle rules may retain inaccessible remnants for a limited disaster-recovery period before automatic expiry.

Service providers and locations

We use service providers for EU-region hosting, private object storage, video processing, transcription, email, payments and abuse prevention. Current categories and named providers are listed in our help center and are reviewed before production use.

Where information leaves the EEA or UK, we use an adequacy decision or appropriate contractual safeguards such as Standard Contractual Clauses, plus technical measures where needed. Private media is not sent to a provider until its region, retention and no-training terms are approved.

Cookies and analytics

Strictly necessary cookies keep organizers signed in and protect forms. Optional product analytics contain no names, emails, project text, private URLs, transcripts or media. We ask for consent where required and respect the choice on later visits.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability or an objection, and may withdraw consent without affecting earlier lawful processing. Organizers can export or delete a project from the dashboard. Contributors can use their receipt link or contact us if they no longer have it.

We verify requests without asking for more information than necessary and normally respond within one month. You may complain to your local data-protection authority, including the Turkish Personal Data Protection Authority where applicable.

Security and changes

Private media uses scoped links, encrypted transport, restricted storage access and separated organizer, contributor and viewer tokens. No internet service can guarantee absolute security; if an incident creates a legal notification duty, we will contact affected people and authorities as required.

We will post material changes here and, when they affect an active project, notify the organizer before they take effect whenever practical.