Privacy Policy

Last Updated: Dec 20, 2025

  1. 1. Introduction

    This Privacy Policy describes how Moby, Inc. ("Moby," "we," "us," or "our") collects, uses, discloses, and protects personal data when individuals interact with the Moby platform, including our website, chat interface, Walkie Talkie feature, dashboards, QR or NFC deployments, widgets, kiosks, and related services (collectively, the "Services").

    We are committed to complying with applicable privacy laws, including:

    • The EU General Data Protection Regulation (GDPR)
    • The UK GDPR
    • The California Consumer Privacy Act (CCPA/CPRA)

  2. 2. Company Information

    Legal Entity: Moby, Inc.
    Incorporation: Delaware, United States
    Registered Agent:
    Legalinc Corporate Services Inc.
    131 Continental Dr, Suite 305
    Newark, DE 19713, USA
    Privacy Contact:
    📧 hey@moby.host

  3. 3. Definitions

    For purposes of this Privacy Policy:

    • "Client" means any individual or entity that licenses, deploys, or uses Moby in connection with their business, organization, property, facility, website, or services.
    • "End User" means any individual who interacts with Moby through any interface, whether on-site or remotely.
    • "Personal Data" means any information relating to an identified or identifiable individual.

  4. 4. Roles Under Data Protection Law

    • Moby acts as a data processor when processing End User data on behalf of a Client.
    • Moby acts as a data controller for data related to Client accounts, billing, and platform operations.
    • Clients act as data controllers for End User data collected through their deployment of Moby.

  5. 5. Personal Data We Collect

    5.1 End Users
    End Users are not required to create accounts.

    We may collect:

    • Chat transcripts
    • Information voluntarily provided by End Users during conversations (such as name, email, or phone number)
    • Approximate location related to the Client's deployment
    • IP address where technically required for security or service delivery

    We do not:

    • Record or store voice audio
    • Collect biometric identifiers
    • Perform device fingerprinting

    5.2 Clients
    We collect:

    • Name
    • Email address
    • Phone number
    • Business or organization details
    • Property or facility addresses
    • Billing and subscription information

    Payment processing is handled by third-party processors (e.g., Stripe). Moby does not store full payment card information.

  6. 6. How We Use Personal Data

    We process personal data to:

    • Provide, operate, and maintain the Services
    • Display conversation logs to Clients
    • Improve system performance and AI response quality
    • Ensure security and prevent misuse
    • Comply with legal obligations

    End User conversations may be used to improve the Services, unless contractually disabled for a specific Client.

  7. 7. Legal Bases for Processing (GDPR)

    We process personal data based on:

    • Consent (interaction with Moby)
    • Legitimate interests (service improvement, security, analytics)
    • Contractual necessity (Client accounts and subscriptions)
    • Legal obligations

  8. 8. AI and Automated Processing

    Moby provides automated, AI-generated responses for informational purposes only.

    • Moby does not make decisions that produce legal or similarly significant effects on individuals
    • Responses may be inaccurate, incomplete, or outdated
    • End Users should verify information independently

  9. 9. Data Retention

    • End User conversations may be stored temporarily or longer as required for service functionality, quality assurance, or compliance
    • Clients may access conversation logs via the dashboard
    • Data is deleted, anonymized, or aggregated when no longer necessary

  10. 10. Cookies and Analytics

    We use:

    • Google Analytics (configured to limit data collection)
    • Essential cookies required for basic functionality

    We do not use advertising or behavioral marketing cookies.

    Where required by law, users are presented with a cookie consent notice.

  11. 11. Data Sharing

    We do not sell personal data.

    Personal data may be shared with:

    • Hosting and infrastructure providers
    • Payment processors
    • Legal or regulatory authorities when required

    We do not share data with third-party AI model providers.

  12. 12. International Data Transfers

    Personal data may be processed in the United States or other jurisdictions. Appropriate safeguards are used for international transfers, including Standard Contractual Clauses where required.

  13. 13. Your Rights

    GDPR and UK GDPR
    You have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Request deletion
    • Restrict or object to processing
    • Data portability
    • Withdraw consent

    California (CCPA/CPRA)
    You have the right to:

    • Know what personal data is collected
    • Request deletion
    • Opt out of sale or sharing (we do not sell data)
    • Non-discrimination for exercising your rights

    Requests may be submitted to hey@moby.host.

  14. 14. Children's Privacy

    The Services are intended for individuals 16 years of age or older. We do not knowingly collect personal data from children under 16.

  15. 15. Security

    We implement reasonable technical and organizational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

  16. 16. Changes to This Policy

    We may update this Privacy Policy from time to time. Changes become effective upon posting the updated policy.

  17. 17. Contact Us

    For questions or requests regarding this Privacy Policy, contact:
    📧 hey@moby.host