The operator behind the request

01 / Identity

The operator and controller is Moxbey, trading at moxbey.com. Moxby is the public product name used on this website for the team work environment and browser assistant. The operator decides why information submitted through this site is processed and how it is used for the purposes below.

The full postal address is 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. Write to office@moxbey.com or call +1 (656) 555-6275 about this notice.

What reaches the website

02 / Collection

The inquiry form receives your name and consent tick, plus the phone number or email address supplied for a reply. It also receives an address if entered, the inquiry kind, your message and the requested specification. A setup specification records the product areas you select and any notes you choose to send. Neither a street address nor both reply methods are needed.

With an inquiry, the server records the IP address, browser user-agent string and referring URL, together with the moment the form was rendered and the moment it was sent. These records help distinguish an ordinary request from automated abuse and connect a submission with its processing status. A request reference identifies a stored inquiry; it is not a password.

Support chat receives the conversation and the contact details you supply. A token saved in your browser connects you to that conversation when you return. The site also processes necessary server and access-log data when a page or service is requested. Browser storage includes the consent record site_consent_v2 and a support-session token when you start chat.

Advertising links can carry gclid, msclkid or fbclid. These are click identifiers, not fields we ask you to complete. Optional measurement may use cookie or similar identifiers under your choices. There is no account or password collection on this site, and no payment or card data is requested because nothing is sold here.

Each record has a job

03 / Use

We use inquiry details to understand the requested work, ask a relevant follow-up and discuss whether a proposed scope can be agreed. The requested specification helps keep a team workspace inquiry distinct from a browser-action request. We use your reply address for that correspondence. It does not create an account or turn the request into an order.

Chat messages are used to handle the support question and keep the conversation connected. Consent records are used to respect your browser choices. Necessary technical data supports delivery of the website, submission handling and investigation of misuse. Advertising identifiers and optional measurement help attribute a visit or inquiry to a campaign under the choices explained below.

Paid visits carry attribution signals

05 / Advertising

Google Ads, Microsoft Advertising and Meta Ads send traffic here. Google attaches gclid, Microsoft attaches msclkid, and Meta attaches fbclid to advertising links. Campaign attribution uses those identifiers to relate a visit or inquiry to the advertising click that brought it here.

A click identifier can be present in the arrival URL before you choose optional storage. Its arrival is not consent. Attribution identifiers are not persisted in optional browser storage until you allow advertising, and they are not copied into visible internal links or inquiry notes. A technical record of a requested URL or referrer is distinct from an optional advertising store.

Who receives information

07 / Recipients

The operator receives inquiry and support correspondence. The hosting provider serves this site and stores the inquiry database. The mail provider carries notification messages to the operator's inbox. These providers handle information for website operation and correspondence. Contact office@moxbey.com to ask which operational recipient handles a particular record.

  • Google Ireland Ltd / Google LLC receives Google Ads consent signals and permitted measurement information associated with gclid. Read Google's privacy policy.
  • Microsoft Ireland Operations Ltd handles Microsoft Advertising information associated with msclkid. Its independent handling is described in the Microsoft privacy statement at privacy.microsoft.com.
  • Meta Platforms Ireland Ltd handles Meta Ads information associated with fbclid where a campaign runs there. Read Meta's privacy policy.

Disclosure can also be required by a lawful request or be needed to establish or defend legal rights. An advertising provider's own purposes are not the same as the operator's support purpose. Read its policy for the choices and rights that apply to records it controls.

Providers may process across borders

08 / Transfers

This operator is in the United States. A visitor's submission and provider processing can cross the border of the country where the information was collected. Advertising providers also operate internationally. Do not assume that information stays on your device or in your country because the inquiry concerns local browser workflows.

Where European transfer restrictions apply, a transfer must have a lawful route, such as an applicable adequacy decision or appropriate contractual safeguards, including standard contractual clauses where required. The relevant route depends on the recipient and processing involved. This notice does not claim a certification or a particular provider agreement. Ask for information about the safeguards applicable to your data using the contact route below.

Records have stated retention periods

09 / Retention

Inquiries and their email copies are retained for 24 months. Chat transcripts are retained for 6 months. Server and access logs are retained for 90 days. The record of a consent choice is retained for 6 months. These periods distinguish business correspondence from a shorter operational record.

The stated periods apply to the operator's records described here. An advertising provider's retention is governed by its own policy, not by the lifetime of a first-party preference. A deletion request is considered against applicable obligations and exceptions; where a legal requirement prevents deletion of a particular record, the response explains that limitation rather than presenting a browser reset as deletion.

Security has practical limits

10 / Protection

The public website uses HTTPS. Inquiry handling includes server-side field checks and automated-submission checks, and support messages are treated as text rather than executable page content. The browser stores a session token for chat instead of asking you to create a password for this website.

No internet transmission or storage system is risk-free. A token on a shared device can reconnect a conversation, and a message can expose sensitive details even when the connection is encrypted. Use a device you control and send a non-sensitive description. If you accidentally send confidential information, contact the operator with enough context to identify the message without copying the material again.

European visitors can exercise GDPR rights

11 / European rights

Where the GDPR applies, you can request access to your personal data and information about its processing, rectification of inaccurate or incomplete data, erasure and restriction of processing. You can request portability for qualifying data processed automatically on consent or contract grounds. You may object to processing based on legitimate interest and to direct marketing.

You can withdraw consent without affecting the lawfulness of processing before withdrawal. These rights have conditions and lawful exceptions; erasure does not automatically override a legal duty to retain a specific record. Explain which processing you want reviewed. We will not require you to agree to optional advertising to exercise a privacy right.

US state rights include advertising opt-outs

12 / State rights

US state privacy law applies, including California's CCPA/CPRA and other state laws in force. Subject to the law applicable to your request, you can ask to know or access personal information, correct it, obtain a portable copy and request deletion. You can ask about the categories collected, their sources and the purposes and recipients of disclosure.

California rights include opting out of sale or sharing of personal information and limiting qualifying uses of sensitive personal information. Other state rights can include opting out of targeted advertising or certain profiling, and appealing a denied request. Use the advertising controls and the data-request route to raise these requests. We do not require payment or deny ordinary website reading because you exercise a privacy right; an authorised agent can contact us and explain the authority to act.

A browser opt-out is respected

13 / Global privacy control

Global Privacy Control, including the Sec-GPC header, is honoured as an opt-out without asking again. With this signal enabled, optional storage and advertising use remain declined. It is not treated as an invitation to ask you to reverse the setting before you can use the site.

The signal applies to the browser communicating it. It does not identify every device you use or locate a past inquiry by itself. To request deletion of server-held correspondence as well, use the data-request page or contact the operator directly.

This site is not for children

14 / Intended audience

Moxby is presented for team-work inquiries, not for children. We do not knowingly collect personal information from children or ask them to start support conversations. Do not submit a child's personal data as a workflow example.

If a parent or guardian believes a child has supplied information, contact office@moxbey.com with the relevant message context. We will address removal of information collected from a child rather than ask for more of that child's private details in an initial request.

You can take a concern to an authority

15 / Complaints

You may complain to your state Attorney General. In California, you may also complain to the California Privacy Protection Agency. European visitors covered by the GDPR may lodge a complaint with a competent data protection supervisory authority, including in their place of habitual residence or work.

Contacting the operator first can help resolve a mistaken record or unanswered request, but this notice does not make that a condition of a complaint. Keep a copy of the request and the response so the authority can understand the issue.

Ask for the record you need reviewed

16 / Requests

Use Request access to or deletion of your data, email office@moxbey.com, or write to 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. State whether you want access, a correction, deletion or another right, and identify the reply address or conversation involved. A data request is answered within 7 days.

We may need proportionate verification before disclosing or changing a record. Do not send identity documents or passwords in the initial message. If a request cannot be fulfilled as asked, the answer explains the reason and applicable next steps. An answer within 7 days is not a claim that an external provider erases every record within that period.

Revisions stay visible here

17 / Changes

Changes to this notice are published on this page with a revised effective or last-updated date. A material change in the purpose of processing is described before information is used for that new purpose, and a fresh consent choice is requested where the law requires it.

An updated notice is not permission to turn a previous decline into an allowance. The cookie ledger describes the storage mechanics, while the website terms explain the difference between an inquiry and an agreement for a product scope.

Contact the operator directly

18 / Human contact

Privacy questions reach the operator at office@moxbey.com. You can also call +1 (656) 555-6275 or send post to 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. Say that the question concerns privacy so it is not mistaken for a new workspace inquiry.

For a product discussion, use the separate contact page. For help using a control or reading this notice, see accessibility and getting help. Neither route requires allowing optional advertising storage.

Storage choices

Choose analytics and advertising separately. Declining does not prevent reading the site or sending an inquiry.

Essential operation

We keep your choice under site_consent_v2. A support session you start uses a separate chat token so you can return to the conversation. These are not advertising choices.

Allows optional storage used to understand visits to this website.

Allows optional advertising storage, advertising user data and personalisation. Google Ads and Microsoft Advertising send traffic here; Meta Ads may also send traffic.

You can withdraw an allowance here. Declining returns all four Consent Mode v2 signals to denied. The cookie statement explains the signals and click identifiers.