Privacy, plainly.

What we collect, and why

• Access requests. Name, work email, organization, and the optional fields you fill in (role, states, pipeline size, a note). Used to review your request, reply to you, and — if approved — issue a preview invite. Nothing else.
• The interest instrument. Your forced-choice trials (which pair was shown, what you chose, which side it was on, response latency), your three social-validity answers, and — only if you tick the consent box — your cost-worksheet inputs. All of it is stored under a random session identifier that exists only in your browser tab. It is not linked to your name or email, and we could not link it to you afterward if we wanted to.
• The 2027 transition check. Nothing you enter is stored. The server computes the result in memory and logs one anonymous counter line (pathway and verdict only) so we know the tool is used.
• Operational logs. Our CDN and API keep standard access logs (IP address, user agent, timestamp) for security and rate-limiting. They are retained for 30 days and then deleted automatically.
• Confirmation email. If you request access we send one transactional confirmation to the address you gave. No marketing list, no drip sequence, no resale — ever.

What we deliberately don't do

• No cookies, no analytics scripts, no pixels, no third-party trackers.
• No pre-filled "industry average" numbers in the worksheet — and no storage of it without the consent box.
• No selling, renting, or sharing of your information with anyone for their own use.
• No automated processing of email you send us — a person reads it.

Where it lives, and who touches it

Submissions are stored in Amazon Web Services (US regions), isolated from FoxHill's product databases. Two subprocessors are involved in running this site: AWS (hosting and storage) and AgentMail (transactional email delivery from mail.foxhill.works). This marketing site holds no health information of any kind, and no data about anyone's clients or patients.

Retention and deletion

Access requests are kept while the preview program runs, so we can honor the request and the conversation that follows. Instrument responses are kept in anonymous form for product planning. Operational logs expire after 30 days.

To have your access request deleted, email hello@mail.foxhill.works from the address you registered — we delete the record and confirm in writing, normally within 7 days. Anonymous instrument rows can be deleted too if you send the session id (shown in your browser's session storage as foxhill_session) while the tab is still open; without it, they are not linkable to you.

Changes and contact

If this policy changes, the effective date above changes with it, and material changes will be noted plainly on this page. Questions: hello@mail.foxhill.works.