Privacy Policy

Who is responsible for your data

When you visit or sign up on an artist’s page, that artist is the controller of the data you give them (their fan list), and Moxi processes it on their behalf as a service provider. Moxi is the controller for its own platform and account data. If you want your data removed, see Data Deletion or contact us at privacy@moxi.fan.

What we collect

When you visit an artist page:

• Anonymous analytics: page views and which links you tap (for example tapping through to Spotify, or a ticket link).
• An anonymous first-party cookie (moxi_vid) so we can count visits without identifying you.
• Approximate location from your IP address (country, region, city). We do not collect precise GPS location.
• Device type, browser, and the site you came from.

When you join an artist’s list: your email address, and, if you choose to give it, your mobile or WhatsApp number, plus the city and country above.

If you have a creator account: your name, login email, account identifier and page handle; the contact details you choose to add to your page; your country setting; and the text, images, videos and audio you upload or create. We initially suggest your country from your IP address, and you can change it in Settings. We also record which dashboard sections you use and when, linked to your account, to understand how the service is used and improve it.

How we use it

• To run the page and show the artist their own audience analytics.
• To let the artist contact the fans who chose to join their list.
• To send WhatsApp messages to fans who gave their number and opted in, until they choose to stop.
• To keep the service secure and working.

Cookies

We use a small first-party cookie (moxi_vid) to count visits without identifying you, and a sign-in cookie to keep you logged in. On a public artist page where the artist has connected Meta, and on Moxi’s own marketing and sign-up pages, Meta’s pixel cookies (_fbp and _fbc) may be set, with consent where required. You can clear cookies at any time in your browser settings.

The Moxi app

The Moxi app shows the same signed-in artist dashboard as the website, so the data above applies in the app too. In addition:

• Camera and photos. When you choose to add an image (your profile, hero, a release, or a download), the app opens your camera or photo picker so you can select that one image. Moxi only receives the image you choose; it does not read your wider photo library. With your permission the app can also save an image, such as your page QR code, to your photos.
• Audio. If you choose to record or upload audio, we receive that recording to provide the feature you requested. For voice-to-text and assisted writing, recordings and text may be processed by our AI service providers. The app asks for microphone access before you start a recording.
• Notifications. When your device registers for notifications, we store its push token with your account to deliver the notifications you choose. Apple processes notification delivery. Some notifications may initially arrive quietly in Notification Centre. You can change notification types in Moxi Settings, remove a registered device, or turn notifications off in iOS Settings.
• App usage. When you open Moxi while signed in, we record the app version, an opaque installation identifier, notification settings and the choices you make about alerts. We also record successful actions such as saving your page, publishing, sharing a link or handling an order. These records are linked to your account so we can understand adoption and improve Moxi. The installation cookie persists across sign-out and push-token changes; clearing app website data resets it. It is not used for advertising or cross-site tracking. Account-linked records are removed when your account is deleted.
• App lock. Optional Face ID, Touch ID or passcode authentication happens on your device. We do not receive or store your biometric data or device passcode.
• Tracking. Your dashboard does not use third-party advertising or tracking tools. The Meta Pixel described below runs on public artist pages, under the artist’s control, and on our own marketing and sign-up pages on the web, and not in your dashboard.

Meta Pixel and Conversions API

If an artist connects their Meta (Facebook and Instagram) account, Moxi shares certain events with Meta on that artist’s behalf, so they can measure results and run ads. This includes events like page views, sign-ups and link taps, together with technical identifiers (your IP address, browser, and Meta’s own _fbp/_fbc cookies), and, where available, your email or phone number in a hashed (irreversible) form used only for matching. This runs through Meta’s Pixel and Conversions API and is governed by Meta’s own terms. If an artist has not connected Meta, none of this happens on their page.

We also use our own Meta Pixel and Conversions API to measure Moxi’s own advertising. It runs only on our own marketing and sign-up pages on the web, never on an artist’s page, in your dashboard or in the app. It shares five events with Meta: that one of those pages was viewed, that someone started a page by giving us their email, that they got past the first step of making it, that they reached the last step, and that an account was created. Nothing about what you or your page do after your account exists is shared with Meta by us. These events come with the same technical identifiers and, only when you create an account, the email you signed up with in a hashed (irreversible) form used only for matching. The app tells Meta nothing, including whether you have installed it.

WhatsApp messages

If you give an artist your number and opt in, the artist may message you on WhatsApp with things like new releases, shows, and guest list. We only ever message people who gave a number and agreed, and we keep a dated record of that consent. Every marketing message includes a way to leave: reply STOP and you are removed straight away and will not be messaged again. These messages are sent through the WhatsApp Business Platform and are also governed by Meta’s terms. You can ask an artist to remove you at any time, or contact us at privacy@moxi.fan.

Paid campaigns

If you make paid videos in Quests, we keep the links to your videos, the screenshots of their views you send us, and what each one earned. The artist whose campaign it is sees them too. Anthropic reads the number of views off each screenshot for us. To pay you, Stripe checks your identity and holds your bank details; we never see your bank details. We keep your National Insurance or tax number, and report what we pay you to HMRC each year, because UK law requires platforms to. We keep these payment records for as long as tax law requires.

AI assistants you connect

If you have a creator account, you can connect your own AI assistant, such as ChatGPT or Claude, to your Moxi page. When you do, the information that assistant asks Moxi for is sent to the company that runs it (OpenAI for ChatGPT, Anthropic for Claude), under your own account with them and their terms: your page’s content, totals about your audience and sales, and the email drafts you ask it to write. Moxi never sends a connected assistant your fans’ names, email addresses or phone numbers, and an assistant cannot send anything to your fans. You choose how much it can do when you connect it. You can disconnect it at any time in Moxi, under Connect your AI, where everything it changed is listed and can be undone.

Who we share data with

• Meta, as described above: for an artist when they connect their account, and for our own advertising on our marketing and sign-up pages.
• Supabase (database and authentication, hosted in the EU) and Vercel (website hosting), as our infrastructure providers.
• Apple, to deliver app notifications.
• Stripe, to take payments and to pay creators for paid campaigns, including checking their identity.
• HMRC, where the law requires us to report what we pay creators.
• Google and Anthropic, to process recordings, text and other content when you choose transcription or assisted writing features.
• The AI assistant you connect (for example OpenAI or Anthropic), only if you connect one, and only what it asks for about your own page.
• We do not sell your data.

Where your data is stored

Our primary database and authentication service are hosted in the European Union. Hosting, notification, social and AI providers may also process data internationally under their own safeguards.

How long we keep it

We keep your data while the artist’s account is active and you remain on their list, then delete it on request or when the account is closed.

Our legal bases

We process personal data on these bases: to provide the service you or an artist asked for (contract); with your consent (for marketing messages and non-essential cookies, including the Meta pixel where consent is required); and for our legitimate interests in running, securing and improving Moxi. Where we rely on consent, you can withdraw it at any time.

Your rights

You can ask us to:

• give you access to the personal data we hold about you;
• correct it if it is wrong;
• delete it (erasure);
• restrict or object to how we use it, including objecting to direct marketing;
• give you a copy to move elsewhere (portability);
• withdraw your consent where we relied on it.

Email privacy@moxi.fan or use the Data Deletion page. If you joined a list, the artist can also remove you on request. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

Children

Moxi is not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy. We will change the date at the top when we do.

Contact

Artisan Deli Market Limited (Moxi is a trading name of Artisan Deli Market Limited). Company number 13546629, registered in England and Wales. Registered office Preston Park House, South Road, Brighton, East Sussex, BN1 6SB. privacy@moxi.fan