← MECOFOX

MECOFOX — Privacy Policy

Last updated: 2026-09-12

---

1. Who is responsible

Westpalmgolf Inc d/b/a TripleExit (Florida, USA), 8983 Okeechobee Blvd, West Palm Beach, FL 33411, is the controller of personal data described here. Contact: privacy@mecofox.com.

*(GDPR: if you have no EU establishment but serve EU users, you may need an Article 27 representative. Ask counsel.)*

2. What we collect

You give us:

  • Account data — name, email, password hash, organization name
  • Content — anything you or your team upload to the Knowledge Vault, enter as an objective, or
    • store in the CRM (which may include personal data about *your* contacts)
  • Billing data — handled by Stripe. We never receive your full card number.

    • Collected automatically:

  • Usage — runs executed, employees hired, tokens consumed, feature usage
  • Technical — IP address, browser type, timestamps, error logs

    • We do not buy personal data from third parties or run advertising trackers.

    3. Why we use it, and our legal basis

    | Purpose | Legal basis (GDPR) | |---|---| | Providing the Service | Performance of a contract | | Billing and collections | Performance of a contract | | Security, fraud and abuse prevention | Legitimate interests | | Product improvement and aggregate analytics | Legitimate interests | | Service emails (outages, billing, changes) | Performance of a contract | | Marketing emails | Consent — opt out any time |

    4. AI processing — the part that matters

    When an AI Employee runs, the objective you type and the relevant content from your workspace are sent to a third-party AI provider (see SUBPROCESSORS.md) to generate a response.

  • We send only what is needed for that request.
  • We do not use your content to train our own models.
  • Whether the AI provider retains or trains on data is governed by our contract with them, not
    • by their consumer terms. Current position is recorded in SUBPROCESSORS.md.

    Do not put special-category data (health, biometrics, race, religion, political views, sexual orientation), payment card numbers, or government identity numbers into the Service.

    5. Sharing

    We share personal data only with: subprocessors in SUBPROCESSORS.md; professional advisers under confidentiality; authorities where legally required; and an acquirer in a merger or sale (you will be notified). We do not sell personal data.

    6. Retention

  • Account and content: while your account is active
  • After termination: deleted within 30 days, except where law requires longer
  • Billing records: 7 years, as tax law generally requires
  • Backups: purged on the normal backup cycle, up to 35 days

    • 7. Your rights

    Depending on where you live you may have the right to access, correct, delete, port, restrict or object to processing, and to withdraw consent. California residents additionally have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

    Exercise any of these at privacy@mecofox.com. We respond within 30 days. You may also complain to your local data protection authority.

    8. International transfers

    Our providers may process data in the United States and elsewhere. Where required we rely on Standard Contractual Clauses or another lawful transfer mechanism.

    9. Security

    Passwords are hashed (bcrypt). Traffic is encrypted in transit over TLS. Access to production data is limited to those who need it. Tenants are isolated at the application layer and by database row-level security.

    No system is perfectly secure. We will notify you and, where required, regulators of a breach affecting your personal data without undue delay.

    10. Children

    The Service is not for anyone under 18 and we do not knowingly collect their data.

    11. Changes

    Material changes will be notified by email or in-product before taking effect.

    12. Contact

    privacy@mecofox.com · 8983 Okeechobee Blvd, West Palm Beach, FL 33411