1. Introduction
Mox ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. This policy complies with the Privacy Act 2020 (New Zealand) and applies to all users of our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account
- Profile Information: Any additional information you choose to add to your profile
- Store Information: Shopify store URLs you add to track products
- Payment Information: Payment details processed securely through Stripe (we do not store full credit card numbers)
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the Service
- Device Information: Browser type, operating system, IP address
- Cookies and Tracking: We use cookies and similar technologies to maintain your session and improve user experience
2.3 Information from Third Parties
- Authentication Provider (Clerk): Authentication and user management data
- Shopify Stores: Publicly available product information from stores you track
- Payment Processor (Stripe): Payment transaction data and subscription status
3. How We Use Your Information
We use the collected information for the following purposes:
- Provide, operate, and maintain the Service
- Process your subscription payments and manage your account
- Aggregate and display product information from Shopify stores
- Send you service-related notifications and updates
- Respond to your inquiries and provide customer support
- Improve and optimize the Service through analytics
- Detect, prevent, and address technical issues or fraudulent activity
- Comply with legal obligations and enforce our Terms of Service
4. Data Storage and Security
We take data security seriously and implement appropriate technical and organizational measures:
- Database: Your data is stored securely using Supabase with encryption at rest and in transit
- Authentication: User authentication is managed by Clerk with industry-standard security practices
- Payment Processing: Payment information is processed by Stripe, a PCI-DSS compliant payment processor
- Access Controls: We implement strict access controls and regularly review security practices
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who assist in operating the Service (Clerk, Supabase, Stripe, Vercel)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
6. International Data Transfers
Your information may be transferred to and processed in countries other than New Zealand, including the United States and European Union, where our service providers operate. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
7. Your Privacy Rights
Under the Privacy Act 2020 (New Zealand), you have the following rights:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your information
- Withdrawal: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@mox.nz. We will respond to your request within 20 working days as required by New Zealand law.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your login session
- Remember your preferences
- Analyze usage patterns and improve the Service
- Provide personalized content
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.
9. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfil the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or security purposes.
10. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Email: support@mox.nz
Address: New Zealand
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner: www.privacy.org.nz