Information you provide
We process the name, email address, and service details you give us, including domain names and mailbox addresses. We store password hashes rather than your account password in readable form. Email verification and password-reset links use one-time token hashes.
Account and security information
To protect accounts and operate sign-in, we process session and security-token hashes, verification state, authentication attempts, hashed IP-related security data, and timestamps. We use this information for account access, authentication, abuse prevention, troubleshooting, and service security.
Service and billing information
We process domain ownership challenges, DNS setup and check results, mailbox addresses and service status, plans, purchased capacity, orders, subscriptions, and quota information. Billing records include Stripe customer and subscription identifiers, invoice or payment-status identifiers, and payment-attention state. Web Services does not provide a raw payment-card entry form; payment is completed through Stripe.
We also maintain transactional notification records, provider operation and job records, audit records, and related timestamps to operate and troubleshoot the service.
How information is used and shared
We use these categories to provide accounts and hosted email, verify domains, process subscriptions, send service notices, respond to support requests, and investigate operational or security issues.
Services involved include Stripe for payment and subscription processing, OpenSRS Hosted Email for mailboxes, Resend for transactional email delivery, Vercel for application hosting, and PostgreSQL for application data storage. These services process information needed for their functions. This page does not describe separate FoxCreek Domains storefront practices.
Cookies and communications
Web Services uses host-scoped authentication/session cookies for customer and staff sign-in. They are HttpOnly, SameSite Strict, and normally Secure; the Secure attribute can be disabled for a development or configured environment. Sessions have an eight-hour maximum age. The current application has no advertising cookies or application analytics system.
We send transactional messages such as account verification, password reset, payment and recovery notices, provisioning and DNS updates, cancellation, retention warnings, cleanup confirmation, and mailbox-password security notices. The current application has no marketing-email workflow.
Retention and account requests
After Professional Email service terminates, its mailbox service enters a read-only retention state for up to 30 days. Hosted mailbox resources may be removed after that period when cleanup is authorized and confirmed. Account, domain, DNS, billing, security, audit, and service-history records may remain where reasonably needed for billing, fraud prevention, security, audit, legal or compliance, disputes, or legitimate business purposes. Provider backups and other copies may follow separate operational schedules; we do not promise erasure exactly on day 30.
There is no self-service account deletion tool. For account assistance or a deletion request, email support@foxcreektechnologies.com. See the Billing Policy for service-end and retention details.
Security and contact
Account passwords are hashed and account sessions use protected cookies. No system can promise absolute security. Please tell us if you suspect unauthorized account access. Web Services support is support@foxcreektechnologies.com.