Privacy Policy

Welcome to Moxu ("we," "our," or "us"). At Moxu, we respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) or use our services, including our Progressive Web App (PWA) engine, Link in Bio builder, AI Agent capabilities, CRM, and marketing automation tools.

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, including:

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes billing address, email address, and telephone numbers.
• Financial Data: includes payment card details (processed securely via Stripe; we do not store full card details on our servers).
• Transaction Data: includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: includes information about how you use our website, products, and services, such as push notification interaction metrics, PWA installation rates, and widget interactions.
• End-User Data: If you use Moxu to manage your customers (via our CRM or AI Agents), we act as a data processor. You remain the data controller for any customer leads, conversations, or segmentation data collected through your Moxu-powered platforms.

We use different methods to collect data from and about you including through:

• Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you create an account, subscribe to our service, or request marketing to be sent to you.
• Automated technologies or interactions: As you interact with our website and services, we will automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
• Third parties or publicly available sources: We may receive personal data about you from various third parties, such as payment processing data from Stripe or authentication data from Google or Apple if you choose to sign in via SSO.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing PWA hosting, AI Agent infrastructure, and CRM access).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

We use generative AI infrastructure to power our AI Agents. Any prompts or training data you input into your custom AI Agent configuration are processed securely to provide the service and are not used to train global, cross-customer AI models without your explicit consent.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Our databases (hosted via Firebase) are secured by robust authentication protocols and strict read/write security rules. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data (the "right to be forgotten").
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at support@moxu.app.