Privacy Policy

Who is responsible for your data

When you visit or sign up on an artist’s page, that artist is the controller of the data you give them (their fan list), and Moxi processes it on their behalf as a service provider. Moxi is the controller for its own platform and account data. If you want your data removed, see Data Deletion or contact us at privacy@moxi.fan.

What we collect

When you visit an artist page:

• Anonymous analytics: page views and which links you tap (for example tapping through to Spotify, or a ticket link).
• An anonymous first-party cookie (moxi_vid) so we can count visits without identifying you.
• Approximate location from your IP address (country, region, city). We do not collect precise GPS location.
• Device type, browser, and the site you came from.

When you join an artist’s list: your email address, and, if you choose to give it, your mobile or WhatsApp number, plus the city and country above.

If you have a creator account: your name, login email, account identifier and page handle; the contact details you choose to add to your page; your country setting; and the text, images, videos and audio you upload or create. We initially suggest your country from your IP address, and you can change it in Settings. We also record which dashboard sections you use and when, linked to your account, to understand how the service is used and improve it.

How we use it

• To run the page and show the artist their own audience analytics.
• To let the artist contact the fans who chose to join their list.
• To send WhatsApp messages to fans who gave their number and opted in, until they choose to stop.
• To keep the service secure and working.

Cookies

We use a small first-party cookie (moxi_vid) to count visits without identifying you, and a sign-in cookie to keep you logged in. On a public artist page where the artist has connected Meta, Meta’s pixel cookies (_fbp and _fbc) may be set, with consent where required. You can clear cookies at any time in your browser settings.

The Moxi app

The Moxi app shows the same signed-in artist dashboard as the website, so the data above applies in the app too. In addition:

• Camera and photos. When you choose to add an image (your profile, hero, a release, or a download), the app opens your camera or photo picker so you can select that one image. Moxi only receives the image you choose; it does not read your wider photo library. With your permission the app can also save an image, such as your page QR code, to your photos.
• Audio. If you choose to record or upload audio, we receive that recording to provide the feature you requested. For voice-to-text and assisted writing, recordings and text may be processed by our AI service providers. The app asks for microphone access before you start a recording.
• Notifications. When your device registers for notifications, we store its push token with your account to deliver the notifications you choose. Apple processes notification delivery. Some notifications may initially arrive quietly in Notification Centre. You can change notification types in Moxi Settings, remove a registered device, or turn notifications off in iOS Settings.
• App usage. When you open Moxi while signed in, we record the app version, an opaque installation identifier, notification settings and the choices you make about alerts. We also record successful actions such as saving your page, publishing, sharing a link or handling an order. These records are linked to your account so we can understand adoption and improve Moxi. The installation cookie persists across sign-out and push-token changes; clearing app website data resets it. It is not used for advertising or cross-site tracking. Account-linked records are removed when your account is deleted.
• App lock. Optional Face ID, Touch ID or passcode authentication happens on your device. We do not receive or store your biometric data or device passcode.
• Tracking.Your dashboard does not use third-party advertising or tracking tools. The Meta Pixel described above runs only on public artist pages, under the artist’s control, and not in your dashboard.

Meta Pixel and Conversions API

If an artist connects their Meta (Facebook and Instagram) account, Moxishares certain events with Meta on that artist’s behalf, so they can measure results and run ads. This includes events like page views, sign-ups and link taps, together with technical identifiers (your IP address, browser, and Meta’s own _fbp/_fbc cookies), and, where available, your email or phone number in a hashed (irreversible) formused only for matching. This runs through Meta’s Pixel and Conversions API and is governed by Meta’s own terms. If an artist has not connected Meta, none of this happens on their page.

WhatsApp messages

If you give an artist your number and opt in, the artist may message you on WhatsApp with things like new releases, shows, and guest list. We only ever message people who gave a number and agreed, and we keep a dated record of that consent. Every marketing message includes a way to leave: reply STOPand you are removed straight away and will not be messaged again. These messages are sent through the WhatsApp Business Platform and are also governed by Meta’s terms. You can ask an artist to remove you at any time, or contact us at privacy@moxi.fan.

Who we share data with

• Meta, as described above, only when an artist connects their account.
• Supabase (database and authentication, hosted in the EU) and Vercel (website hosting), as our infrastructure providers.
• Apple, to deliver app notifications.
• Google and Anthropic, to process recordings, text and other content when you choose transcription or assisted writing features.
• We do not sell your data.

Where your data is stored

Our primary database and authentication service are hosted in the European Union. Hosting, notification, social and AI providers may also process data internationally under their own safeguards.

How long we keep it

We keep your data while the artist’s account is active and you remain on their list, then delete it on request or when the account is closed.

Our legal bases

We process personal data on these bases: to provide the service you or an artist asked for (contract); with your consent (for marketing messages and non-essential cookies, including the Meta pixel where consent is required); and for our legitimate interests in running, securing and improving Moxi. Where we rely on consent, you can withdraw it at any time.

Your rights

You can ask us to:

• give you access to the personal data we hold about you;
• correct it if it is wrong;
• delete it (erasure);
• restrict or object to how we use it, including objecting to direct marketing;
• give you a copy to move elsewhere (portability);
• withdraw your consent where we relied on it.

Email privacy@moxi.fan or use the Data Deletionpage. If you joined a list, the artist can also remove you on request. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

Children

Moxi is not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy. We will change the date at the top when we do.

Contact

Artisan Deli Market Limited (Moxi is a trading name of Artisan Deli Market Limited). Company number 13546629, registered in England and Wales. Registered office Preston Park House, South Road, Brighton, East Sussex, BN1 6SB. privacy@moxi.fan