Privacy Policy

Moxora ("we", "us", or "our") is operated by Moxtech Developers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM platform at moxora.moxtechdevelopers.com (the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

Account Information

When you create an account we collect your name, email address, and a hashed password. We also create an Organisation record linked to your account to support multi-user workspaces.

Contact Data You Import

The Service stores contact records you import or create, including names, email addresses, phone numbers, company details, custom field values, and tags. This data belongs to you. We process it solely to provide the Service.

Usage and Log Data

We automatically collect information about how you interact with the Service: pages visited, features used, IP address, browser type, and timestamps. This helps us improve the product and diagnose problems.

Email Event Data

When you send emails through the Service, we receive delivery, open, click, bounce, and unsubscribe events from our email delivery infrastructure. This data is stored in your account and used to power automation triggers and activity timelines.

AI Interactions

If you use AI-powered features (automation builder, tag suggestions, contact summaries), relevant data such as contact field values and activity descriptions is processed by our AI infrastructure to generate responses. We do not use this data to train AI models, and it is never shared beyond what is necessary to produce your requested output.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process and store the contact data you manage within the Service.
• To send transactional emails (account verification, password reset).
• To power AI features when you choose to use them.
• To detect and prevent fraud, abuse, and security incidents.
• To analyse aggregate usage patterns and improve the product.
• To respond to your support requests.

We do not sell your personal information or your contacts' data to third parties. We do not use your data for advertising purposes.

3. Data Storage and Security

Your data is stored in an encrypted relational database hosted on enterprise-grade cloud infrastructure. All data is encrypted in transit using TLS and at rest using AES-256 encryption. We select infrastructure providers that meet industry-recognized security and compliance standards.

We implement industry-standard security practices including hashed passwords, session tokens, and role-based access controls. No security measure is perfect; we encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access.

The Service is deployed on globally distributed, enterprise-grade hosting infrastructure with built-in DDoS protection, edge caching, and high-availability guarantees. Our infrastructure stack is reviewed and updated as better options become available — we will never be locked into a single provider at the cost of your data's safety.

4. Third-Party Services

To deliver the Service, we engage a small number of carefully vetted technology partners covering areas such as database hosting, application infrastructure, email delivery, workflow scheduling, and AI processing. Each partner is selected based on their security posture, data protection practices, and contractual commitments.

We do not publicly enumerate our technology stack, as these choices evolve over time to ensure the best security and reliability for your data. What does not change is our commitment to:

• Sharing only the minimum data each partner needs to perform their function.
• Ensuring partners are bound by confidentiality and data processing obligations.
• Never selling or licensing your data to any third party for any commercial purpose.
• Reviewing partners regularly and switching when a better or safer option exists.

5. Cookies and Tracking

We use a single session cookie ("next-auth.session-token") to keep you logged in. No third-party advertising or analytics cookies are set. We do not use tracking pixels on our own marketing pages.

Emails sent through the Service may include open-tracking pixels and click-tracking links managed by our email delivery infrastructure. These are disclosed to your contacts via the unsubscribe footer included in every marketing email.

6. Data Retention

We retain your account and contact data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it for longer.

You may export your contact data at any time using the CSV export feature in the Service.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data ("right to be forgotten").
• Object to or restrict processing of your personal data.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@moxtechdevelopers.com. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date, and by sending an email to the address associated with your account at least 14 days before changes take effect.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Moxtech Developers
Email: support@moxtechdevelopers.com