Privacy Policy

1.Who We Are

This Privacy Policy explains how EASEHAWK TECHNOLOGIES PRIVATE LIMITED ("MoxSend", "we", "us") collects and processes personal data in connection with the MoxSend platform, including MoxWarm and MoxCheck.

• Data Controller: For your account, profile, and administrative details, MoxSend acts as an independent data controller.
• Data Processor: For recipient contact lists, leads, and email data you upload for campaigns or verification, we act strictly as your data processor under our Data Processing Addendum.

2.Data We Collect

• Account Data: Full name, work email address, company name, password hash, plan tier, and transaction history (payment card credentials are processed directly by PCI-DSS certified gateways and never stored on our servers).
• Campaign & Recipient Data: Contact names, business email addresses, company names, custom fields, and email sequences uploaded and processed solely on your instructions.
• Verification Data: Email addresses submitted to MoxCheck and generated deliverability signals (such as MX records, SMTP handshake status, catch-all detection, and syntax validation).
• Usage & Device Telemetry: Technical log data, IP addresses, browser specifications, operating system fingerprints, pages visited, and interaction timestamps.
• Support & Communications: Correspondence, ticket inquiries, bug reports, and feedback submitted to our support channels.
• Google Account & Gmail Data:
  • Authorized Scope: When connecting a Gmail sender mailbox, we access your authorized profile information, email headers, messages, labels, and threads necessary for inbox synchronization, sending, and reply categorization.
  • Strict Purpose Limitation: Google data is utilized exclusively to provide features you explicitly activate (syncing incoming replies, sending outreach, and AI-assisted reply drafting).
  • No Advertising or AI Model Training: Google user data is never sold, shared with advertising networks, or used to train generalized public AI/ML foundation models.
  • Data Retention & Sharing: Gmail data is retained only for the duration needed to support your active connected mailbox and shared solely with essential infrastructure subprocessors.
  • Revocation & Disconnection: You may revoke access at any time via your Google Account Security settings or directly disconnect the mailbox inside MoxSend.
  • Google API Limited Use: MoxSend’s use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.Purposes & Legal Bases

4.Regional Compliance

We design and engineer MoxSend to meet strict global data protection standards across our primary operating jurisdictions:

• European Union & United Kingdom: Full adherence to the General Data Protection Regulation (EU GDPR) and UK GDPR / Data Protection Act 2018.
• Kingdom of Saudi Arabia (KSA): Compliance with the Saudi Personal Data Protection Law (PDPL) and its Executive Regulations.
• United Arab Emirates (UAE): Compliance with UAE Federal Decree-Law No. 45/2021 on Personal Data Protection, including applicable DIFC and ADGM regimes.
• India: Compliance with the Digital Personal Data Protection (DPDP) Act 2023.

5.Sharing & Subprocessors

We share personal data only under strict contractual safeguards with the following parties:

• Cloud Infrastructure & Hosting: Secure cloud hosting, database, and content delivery network providers.
• Email Delivery & Verification Nodes: Mail transfer agents and SMTP verification infrastructure.
• Payment Processors: PCI-DSS certified payment gateways for billing and subscription management.
• Professional Advisers: External legal counsel, auditors, and accountants bound by professional confidentiality.
• Legal & Regulatory Authorities: Authorized law enforcement bodies when strictly required by enforceable legal process.
• Corporate Successors: An acquiring entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

MoxSend does not sell or rent personal data to third parties.

6.International Data Transfers

When personal data is transferred across international borders, we implement recognized transfer safeguards, including:

• Standard Contractual Clauses (SCCs): European Commission-approved SCCs incorporated into vendor agreements.
• Adequacy & Cross-Border Safeguards: Data transfer mechanisms satisfying Saudi PDPL and UAE data regulations.
• Technical Encryption: Strict end-to-end and at-rest encryption protocols during transit and storage.

7.Data Retention Schedule

• Account & Profile Data: Retained for the active lifespan of the account and deleted within two (2) months of formal account closure.
• Campaign & Recipient Data: Maintained during your active subscription; permanently deleted or exported within sixty (60) days upon request or workspace cancellation.
• MoxCheck Verification Results: Cached for up to sixty (60) days to prevent double-charging on repetitive verification queries.
• Invoices & Tax Records: Retained in compliance with statutory financial and taxation retention laws.

8.Your Data Protection Rights

Depending on your geographic location, you may exercise the following rights regarding your personal data:

• Right to Access & Portability: Obtain confirmation of data processing and receive an export of your personal information in a structured format.
• Right to Rectification: Update, correct, or complete inaccurate or incomplete personal records.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal retention mandates.
• Right to Restrict or Object: Restrict processing or object to data processing grounded in legitimate interests or direct marketing.
• Right to Withdraw Consent: Revoke previously granted consent at any time without invalidating prior lawful processing.
• Right to Lodge a Complaint: Submit a grievance to your national or regional data protection authority.

To exercise your rights, email us at hello@moxsend.ai. If you received an email from a MoxSend customer, that customer is the data controller — please reach out to them directly, or click the unsubscribe link included in every email.

9.Security & Protection Measures

We maintain comprehensive technical and organizational safeguards to protect customer data:

• Encryption: Industry-standard TLS 1.3 encryption for data in transit and AES-256 encryption for data at rest.
• Access Governance: Strict role-based access control (RBAC), multi-factor authentication, and audited internal access.
• Continuous Monitoring: 24/7 infrastructure telemetry, automated threat detection, and rate-limiting protections.
• Breach Protocol: Documented incident response protocols and prompt notification to affected users and regulators as required by law.

10.Cookies & Tracking

See our full Cookie Policy for complete details on cookies, local storage, and tracking pixels.

11.Children’s Privacy

The Service is designed exclusively as a B2B productivity platform and is not directed at individuals under eighteen (18) years of age.

12.Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legal requirements. The updated date at the top reflects the effective release.

13.Contact Us

For any privacy inquiries, data subject requests, or questions, please contact our data protection team at hello@moxsend.ai.