Privacy / The data ledger
Privacy for your Moxby workspace inquiry.
An inquiry about Moxby workspace software is correspondence, not an account signup. This notice explains the information received when you ask about a team workspace setup or browser assistant for teams, and the choices attached to a paid visit.
The operator behind the request
01 / IdentityThe operator and controller is Moxbey, trading at moxbey.com. Moxby is the public product name used on this website for the team work environment and browser assistant. The operator decides why information submitted through this site is processed and how it is used for the purposes below.
The full postal address is 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. Write to office@moxbey.com or call +1 (656) 555-6275 about this notice.
What reaches the website
02 / CollectionThe inquiry form receives your name and consent tick, plus the phone number or email address supplied for a reply. It also receives an address if entered, the inquiry kind, your message and the requested specification. A setup specification records the product areas you select and any notes you choose to send. Neither a street address nor both reply methods are needed.
With an inquiry, the server records the IP address, browser user-agent string and referring URL, together with the moment the form was rendered and the moment it was sent. These records help distinguish an ordinary request from automated abuse and connect a submission with its processing status. A request reference identifies a stored inquiry; it is not a password.
Support chat receives the conversation and the contact details you supply. A token saved in your browser connects you to that conversation when you return. The site also processes necessary server and access-log data when a page or service is requested. Browser storage includes the consent record site_consent_v2 and a support-session token when you start chat.
Advertising links can carry gclid, msclkid or fbclid. These are click identifiers, not fields we ask you to complete. Optional measurement may use cookie or similar identifiers under your choices. There is no account or password collection on this site, and no payment or card data is requested because nothing is sold here.
Each record has a job
03 / UseWe use inquiry details to understand the requested work, ask a relevant follow-up and discuss whether a proposed scope can be agreed. The requested specification helps keep a team workspace inquiry distinct from a browser-action request. We use your reply address for that correspondence. It does not create an account or turn the request into an order.
Chat messages are used to handle the support question and keep the conversation connected. Consent records are used to respect your browser choices. Necessary technical data supports delivery of the website, submission handling and investigation of misuse. Advertising identifiers and optional measurement help attribute a visit or inquiry to a campaign under the choices explained below.
The basis follows the purpose
04 / Legal groundsWhere the GDPR applies to a visitor from Europe, we distinguish consent from steps toward a contract and from legitimate interest. A checkbox does not turn every form of processing into consent-based processing. The table identifies the purpose and its basis; an applicable legal obligation can also require a limited record to be kept or disclosed.
| Purpose | Information used | Legal basis |
|---|---|---|
| Discuss a requested setup | Contact details, message and the requested specification. | Contract: steps at your request before a possible agreement. Consent covers processing you expressly request outside that basis. |
| Handle support | Messages and the session token that connects the conversation. | Legitimate interest in answering support, or contract where the question concerns an agreed service; consent for optional details you choose to supply. |
| Operate and protect the site | Connection logs, submission timing and browser information. | Legitimate interest in reliable delivery and preventing misuse, balanced against visitors' rights. |
| Respect storage decisions | Saved analytics and advertising choices. | Legal obligation where consent rules require a record, and legitimate interest in applying the choice you made. |
| Optional measurement and advertising | Permitted storage and attribution identifiers. | Consent for optional analytics and advertising storage or use, with separate controls. |
Paid visits carry attribution signals
05 / AdvertisingGoogle Ads, Microsoft Advertising and Meta Ads send traffic here. Google attaches gclid, Microsoft attaches msclkid, and Meta attaches fbclid to advertising links. Campaign attribution uses those identifiers to relate a visit or inquiry to the advertising click that brought it here.
A click identifier can be present in the arrival URL before you choose optional storage. Its arrival is not consent. Attribution identifiers are not persisted in optional browser storage until you allow advertising, and they are not copied into visible internal links or inquiry notes. A technical record of a requested URL or referrer is distinct from an optional advertising store.
Optional storage starts denied
06 / Consent modeConsent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until you allow the corresponding storage or use. Analytics is a separate choice from advertising. The advertising control covers the three advertising signals; the analytics control covers analytics_storage.
Declining or withdrawing an allowance sets all four signals back to denied immediately. Saving a new partial choice allows only the selected category. Denied consent signals restrict storage and personalisation; they do not mean that the site has no advertising or that a tag never loads. Providers can process limited signals under their own policies, including in a denied state.

Who receives information
07 / RecipientsThe operator receives inquiry and support correspondence. The hosting provider serves this site and stores the inquiry database. The mail provider carries notification messages to the operator's inbox. These providers handle information for website operation and correspondence. Contact office@moxbey.com to ask which operational recipient handles a particular record.
- Google Ireland Ltd / Google LLC receives Google Ads consent signals and permitted measurement information associated with
gclid. Read Google's privacy policy. - Microsoft Ireland Operations Ltd handles Microsoft Advertising information associated with
msclkid. Its independent handling is described in the Microsoft privacy statement at privacy.microsoft.com. - Meta Platforms Ireland Ltd handles Meta Ads information associated with
fbclidwhere a campaign runs there. Read Meta's privacy policy.
Disclosure can also be required by a lawful request or be needed to establish or defend legal rights. An advertising provider's own purposes are not the same as the operator's support purpose. Read its policy for the choices and rights that apply to records it controls.
Providers may process across borders
08 / TransfersThis operator is in the United States. A visitor's submission and provider processing can cross the border of the country where the information was collected. Advertising providers also operate internationally. Do not assume that information stays on your device or in your country because the inquiry concerns local browser workflows.
Where European transfer restrictions apply, a transfer must have a lawful route, such as an applicable adequacy decision or appropriate contractual safeguards, including standard contractual clauses where required. The relevant route depends on the recipient and processing involved. This notice does not claim a certification or a particular provider agreement. Ask for information about the safeguards applicable to your data using the contact route below.
Records have stated retention periods
09 / RetentionInquiries and their email copies are retained for 24 months. Chat transcripts are retained for 6 months. Server and access logs are retained for 90 days. The record of a consent choice is retained for 6 months. These periods distinguish business correspondence from a shorter operational record.
The stated periods apply to the operator's records described here. An advertising provider's retention is governed by its own policy, not by the lifetime of a first-party preference. A deletion request is considered against applicable obligations and exceptions; where a legal requirement prevents deletion of a particular record, the response explains that limitation rather than presenting a browser reset as deletion.
Security has practical limits
10 / ProtectionThe public website uses HTTPS. Inquiry handling includes server-side field checks and automated-submission checks, and support messages are treated as text rather than executable page content. The browser stores a session token for chat instead of asking you to create a password for this website.
No internet transmission or storage system is risk-free. A token on a shared device can reconnect a conversation, and a message can expose sensitive details even when the connection is encrypted. Use a device you control and send a non-sensitive description. If you accidentally send confidential information, contact the operator with enough context to identify the message without copying the material again.
European visitors can exercise GDPR rights
11 / European rightsWhere the GDPR applies, you can request access to your personal data and information about its processing, rectification of inaccurate or incomplete data, erasure and restriction of processing. You can request portability for qualifying data processed automatically on consent or contract grounds. You may object to processing based on legitimate interest and to direct marketing.
You can withdraw consent without affecting the lawfulness of processing before withdrawal. These rights have conditions and lawful exceptions; erasure does not automatically override a legal duty to retain a specific record. Explain which processing you want reviewed. We will not require you to agree to optional advertising to exercise a privacy right.
US state rights include advertising opt-outs
12 / State rightsUS state privacy law applies, including California's CCPA/CPRA and other state laws in force. Subject to the law applicable to your request, you can ask to know or access personal information, correct it, obtain a portable copy and request deletion. You can ask about the categories collected, their sources and the purposes and recipients of disclosure.
California rights include opting out of sale or sharing of personal information and limiting qualifying uses of sensitive personal information. Other state rights can include opting out of targeted advertising or certain profiling, and appealing a denied request. Use the advertising controls and the data-request route to raise these requests. We do not require payment or deny ordinary website reading because you exercise a privacy right; an authorised agent can contact us and explain the authority to act.
A browser opt-out is respected
13 / Global privacy controlGlobal Privacy Control, including the Sec-GPC header, is honoured as an opt-out without asking again. With this signal enabled, optional storage and advertising use remain declined. It is not treated as an invitation to ask you to reverse the setting before you can use the site.
The signal applies to the browser communicating it. It does not identify every device you use or locate a past inquiry by itself. To request deletion of server-held correspondence as well, use the data-request page or contact the operator directly.
This site is not for children
14 / Intended audienceMoxby is presented for team-work inquiries, not for children. We do not knowingly collect personal information from children or ask them to start support conversations. Do not submit a child's personal data as a workflow example.
If a parent or guardian believes a child has supplied information, contact office@moxbey.com with the relevant message context. We will address removal of information collected from a child rather than ask for more of that child's private details in an initial request.
You can take a concern to an authority
15 / ComplaintsYou may complain to your state Attorney General. In California, you may also complain to the California Privacy Protection Agency. European visitors covered by the GDPR may lodge a complaint with a competent data protection supervisory authority, including in their place of habitual residence or work.
Contacting the operator first can help resolve a mistaken record or unanswered request, but this notice does not make that a condition of a complaint. Keep a copy of the request and the response so the authority can understand the issue.
Ask for the record you need reviewed
16 / RequestsUse Request access to or deletion of your data, email office@moxbey.com, or write to 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. State whether you want access, a correction, deletion or another right, and identify the reply address or conversation involved. A data request is answered within 7 days.
We may need proportionate verification before disclosing or changing a record. Do not send identity documents or passwords in the initial message. If a request cannot be fulfilled as asked, the answer explains the reason and applicable next steps. An answer within 7 days is not a claim that an external provider erases every record within that period.
Revisions stay visible here
17 / ChangesChanges to this notice are published on this page with a revised effective or last-updated date. A material change in the purpose of processing is described before information is used for that new purpose, and a fresh consent choice is requested where the law requires it.
An updated notice is not permission to turn a previous decline into an allowance. The cookie ledger describes the storage mechanics, while the website terms explain the difference between an inquiry and an agreement for a product scope.
Contact the operator directly
18 / Human contactPrivacy questions reach the operator at office@moxbey.com. You can also call +1 (656) 555-6275 or send post to 26 Mill Street, Werkstatt 2, Austin, Texas 12918, Austin, Texas, United States. Say that the question concerns privacy so it is not mistaken for a new workspace inquiry.
For a product discussion, use the separate contact page. For help using a control or reading this notice, see accessibility and getting help. Neither route requires allowing optional advertising storage.