Privacy policy

• Foxlio has no user accounts and no Foxlio database of your CVs, letters, or applications.
• Your profile, documents, and tracking data are stored in your browser on this device.
• If you use AI drafting, the content you choose to send goes directly from your browser to the AI provider you selected, using your own API key. That provider receives and processes it under its own terms.
• Job searches are fetched through this site's server from Remotive, a third-party job board.
• Foxlio does not use advertising trackers, analytics scripts, or non-essential cookies.

The following is saved in your browser's storage (IndexedDB, with localStorage as a fallback) and is not sent to Foxlio:

• Your profile: name, contact details, summary, experience, education, skills, links, and photo.
• CVs, cover letters, version snapshots, and unsaved editor drafts.
• Job applications, interviews, calendar events, saved jobs, saved agencies, and agency notes.
• Preferences such as theme and AI provider/model choice, and any AI API keys you save.

Because this data lives only in this browser, it does not sync between devices or browsers, and it can be lost if you clear site data, use private browsing, or your browser removes stored data. Foxlio cannot recover it. Use Settings → Local data to download backups.

AI drafting is optional and off until you add your own API key. Nothing is sent to an AI provider until you press Generate (or Test connection / Load models in Settings, which send only your key to check it).

When you generate a cover letter draft, your browser sends directly to the selected provider:

• Your API key, to authenticate the request.
• From your profile: name, headline, summary, experience, education, and skills.
• From the letter: company, role, and recipient name/title, if filled in.
• Any job description and extra guidance you type into the AI panel.
• Instructions written by Foxlio describing how to draft the letter.

Your email address, phone number, postal address, links, and photo are not included. The editor shows the exact list of fields before you generate.

Requests do not pass through a Foxlio server. Each provider handles the data under its own policies, which may include logging, retention, abuse monitoring, or use for improving services depending on your account and plan. Review them before use:

• OpenRouter: privacy · terms
• Google Gemini: privacy · terms
• Anthropic Claude: privacy · terms

OpenRouter forwards requests to the underlying model provider you choose, whose terms also apply.

When you browse jobs, your browser asks this site's server for listings, and the server fetches them from Remotive. Your search terms and filters are sent to Remotive as part of that request; your profile and documents are not. Opening an "Apply" link takes you to the employer or Remotive site, where their own policies apply.

The recruitment agency directory is bundled with the app and loads without contacting a third party.

The site is served by a hosting provider ([To complete: hosting provider name and its privacy policy link]), which may record standard request data such as IP address, user agent, requested URL, and time for security and operations. Foxlio does not add your profile or documents to these requests.

API keys you save are stored unencrypted in this browser's localStorage. Browser storage is not an encrypted secrets vault: anyone with access to this browser profile, or a malicious browser extension, could read them. Keys are never placed in URLs, and they are excluded from backups unless you explicitly choose to include them. Use keys with spending limits and delete them on shared devices.

• Export all of your data as a JSON backup, with API keys excluded by default.
• Import a backup to restore or move your data to another browser.
• Delete an individual API key, or clear all Foxlio data from this browser, in Settings.
• For data held by an AI provider or Remotive, contact that service directly.

Foxlio is intended for job seekers and is not directed at children. [To complete: minimum age, if any, for your jurisdiction]

We may update this policy as the app changes. The date at the top shows the latest revision.

Operator: [To complete: legal name of the person or company operating this site]
Privacy contact: [To complete: email or postal address for privacy requests]
Governing law / supervisory authority: [To complete: jurisdiction, if applicable]

For general help, see Support. Read the Terms of use.