FiveLegFox
English | Magyar
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
FiveLegFox UG (haftungsbeschränkt)
Hausotterweg 8
16548 Glienicke/Nordbahn
Germany
Email: adorjan.portik@fivelegfox.com
This policy explains which personal data we process when you visit fivelegfox.com or use the FiveLegFox application at app.fivelegfox.com, why we do so, who receives it, and what rights you have.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data: email address, name and profile picture provided by the sign-in service, account identifier | Creating and operating your account, signing you in, contacting you about the service | Art. 6(1)(b), performance of the contract |
| Project content: the messages you write to the assistant, the 3D models, project files, uploaded documents and images, and the assistant's replies | Providing the service: generating, storing, displaying, undoing and exporting your models | Art. 6(1)(b) |
| Subscription, credit and payment data: plan, credit balance and usage, payment status and invoices. Card or bank details are entered with the payment provider and are not stored by us. | Billing, credits, accounting | Art. 6(1)(b); Art. 6(1)(c) for statutory retention duties (tax and commercial law) |
| Technical and security data: IP address, browser and device information, time of access, error and usage logs | Operating the service securely, preventing abuse, finding and fixing errors | Art. 6(1)(f), our legitimate interest in a secure and working service |
| Feedback: the thumbs-up or thumbs-down you give to a reply, the reasons and comment you add, and, only if you tick the box, the technical details described in section 4 | Improving the quality of the assistant, fixing the problem you report | Art. 6(1)(f); Art. 6(1)(a) for the technical details you choose to send (consent) |
| Messages to us: what you write when you email us or use the withdrawal function | Answering your request, handling withdrawals and support | Art. 6(1)(b) or 6(1)(f) |
You are not required by law to provide this data. Without it we cannot create an account or provide the service.
Sign-in is provided by Auth0 (Okta) under our own domain, auth.fivelegfox.com. You can sign in with your Google account. If you do, Google shares your name, email address and profile picture with us through Auth0; we receive nothing else from your Google account. Google processes your data for the sign-in under its own privacy policy.
We use a session cookie that is necessary for being signed in. We do not use advertising or tracking cookies.
FiveLegFox lets you describe buildings in natural language. To answer, the text of your request, the relevant parts of your conversation and a description of your current model are sent to a language-model provider. We route these requests through OpenRouter, which forwards them to the model provider you select or that we use. These providers process the content to produce the reply.
Please do not put personal data of third parties, secrets or confidential information into your messages unless you need to.
Your project files, model snapshots and uploads are stored on our servers and in object storage (see section 6) so that you can open, undo, share and export them. We do not use your content to train our own models. We do not control the model providers' own terms; where possible we use settings that exclude your content from their training.
Under each reply you can rate the assistant with a thumbs-up or thumbs-down.
We use the following service providers, who process data on our behalf or for the purposes stated:
| Provider | Purpose |
|---|---|
| Contabo GmbH (Germany) | Server hosting of the application and its database |
| Hetzner Online GmbH (object storage, Falkenstein, Germany) | Storage of model snapshots, project files, uploads and feedback bundles |
| Auth0 / Okta, Inc. (United States, EU region available) | Sign-in and account management |
| Google Ireland Ltd. / Google LLC | Sign-in with Google; business email; the Inter font on this website is loaded from Google Fonts, which transmits your IP address to Google when you open the landing page |
| OpenRouter, Inc. (United States) and the model providers it routes to | Processing your requests to produce the assistant's replies |
| Stripe Payments Europe Ltd. (Ireland) | Payment processing for subscriptions and credit packs |
| GitHub, Inc. (United States) | Private issue tracker for feedback and software development |
| Discord Inc. (United States) | Internal team notification for feedback |
| Cloudflare, Inc. (DNS) and UptimeRobot (availability monitoring) | Name resolution and checking that the service is reachable; they do not receive your project data |
We do not sell your data and we do not use it for advertising. We disclose data to authorities only where we are legally required to.
Some providers above are located in the United States or process data there. Where this happens we rely on an adequacy decision (for example the EU–US Data Privacy Framework, where the provider is certified) or on the EU Standard Contractual Clauses, together with additional safeguards where necessary.
You have the right, under the conditions of the GDPR, to:
To exercise a right, write to adorjan.portik@fivelegfox.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country of your residence or workplace. The authority competent for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.
We protect your data with technical and organisational measures, including encrypted connections (HTTPS), access controls and separated environments. No internet service can be guaranteed to be completely secure.
FiveLegFox is not directed at children under 16, and we do not knowingly collect their data.
We may update this policy when the service or the law changes. The current version is always available at this address, with the date of the last update at the top.