Privacy Policy
How MOJO HQ collects, uses and protects information about the people who visit this site and use the service.
1. Who we are
MOJO HQ (the "Service") is operated by [eWiring LLC — legal name to be confirmed] ("we", "us"), [entity type and state of formation], with its principal place of business at [street address, city, state ZIP]. Our website is mojohq.app and the Service is available at app.mojohq.app and customer-specific addresses.
2. Scope and roles
This policy covers (a) visitors to mojohq.app and (b) people who use the Service as members of a customer's workspace. When you use the Service as a member of a workspace, the company that set up that workspace (the "Customer") decides what is collected, who can see it, and how long it is kept. In that relationship the Customer is the controller of workspace content and we process it on the Customer's behalf under our agreement with them. Questions about a specific workspace should go to that workspace's administrator first.
3. Information we collect
Account information
Name, work email address, role or title, profile avatar, and a password hash. When a Customer connects a CRM, accounts may be created from the Customer's CRM user directory (name, email, title, department, active status).
Workspace content
Messages, threads, reactions, files, channel and room names and descriptions, and other content members post. Where a Customer has connected a CRM, this includes CRM content that the connector posts into rooms: record names and fields the Customer chooses to show (for example stage, close date, owner), notes written on records, case and task summaries, and link previews.
Usage and device information
Sign-in events, session identifiers, IP address, browser and device type, approximate time zone, pages and features used, and error logs. Administrators of a workspace can see sign-in and access logs for their workspace.
Notifications
If you enable push notifications, your browser or device gives us a push subscription token that we use only to deliver notifications you have asked for.
Website and demo requests
If you submit the demo request form we collect what you enter (name, work email, company, team size, CRM, message) and use it to reply. [If analytics are added to the website, describe the provider and what it collects here.]
4. How we use information
- To provide, operate and secure the Service, including delivering messages, files and notifications.
- To create and maintain accounts, including from a Customer's connected CRM.
- To apply the Customer's settings, such as retention periods, Do Not Disturb hours and permissions.
- To respond to support and demo requests.
- To monitor performance, diagnose problems and prevent abuse.
- To comply with law and enforce our terms.
We do not sell personal information, and we do not use workspace content to build advertising profiles or to train models unrelated to providing the Service to that Customer.
5. How we share information
- Within your workspace. Your name, avatar and the content you post are visible to other members according to the workspace's channel and room membership. Administrators can see email addresses if the workspace setting allows it, and can read any room.
- Service providers. We use third parties to host and run the Service: [hosting provider, e.g. Railway] for application and database hosting, [email provider] for transactional email, and [push service providers, e.g. browser vendors' push services] for notifications. They process data only on our instructions.
- Your CRM. When a Customer connects a CRM, messages posted from inside the CRM record page are sent to the Service, and information from the CRM is posted into the Service, as described in section 6.
- Legal. We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply.
6. CRM connections
The Customer's administrator chooses whether to connect a CRM, which objects and stages open rooms, which role fields determine membership, and which events (stage changes, notes, cases, tasks, watched fields) are posted. The connector reads from the CRM with credentials the Customer provides and writes only what the Customer has configured. Disconnecting the CRM stops new synchronization; content already posted into rooms remains subject to the workspace's retention settings.
7. Retention
Workspace content is retained according to the Customer's settings: administrators can keep messages and files indefinitely or have them deleted automatically after a set number of days. Account information is retained while the account exists and for [N days] after deactivation. Logs are retained for [N days]. Demo request information is retained for [N months]. When a Customer's agreement ends we delete or return workspace data within [N days], except where retention is required by law.
8. Security
Each Customer's workspace runs as a separate, single-tenant deployment with its own database, hosted in the United States. Data is encrypted in transit. Passwords are stored as salted hashes. Sessions expire after a period the Customer's administrator sets, and administrators can end all sessions at once. No method of transmission or storage is completely secure; if we learn of a breach affecting your information we will notify affected Customers [within N hours/days] and as required by law.
9. Your choices and rights
You can update your profile and notification preferences inside the Service. Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to or restrict certain processing. If you are a member of a Customer's workspace, please direct requests to your workspace administrator; we will assist them. Otherwise, contact us at [privacy@mojohq.app]. We will not discriminate against you for exercising your rights.
[Add region-specific disclosures as applicable: California (CCPA/CPRA) categories and "Do Not Sell or Share" statement; EU/UK GDPR lawful bases, data transfer mechanism and representative details; other state laws.]
10. Cookies and local storage
The Service uses a session cookie to keep you signed in and browser storage for conveniences such as drafts, your chosen theme and collapsed sidebar sections. This website uses browser storage only to remember your light/dark preference. [If analytics or marketing cookies are added, list them here with a consent mechanism where required.]
11. Children
The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from children.
12. International visitors
We are based in the United States and process information there. If you access the Service from elsewhere, you understand that your information will be transferred to and processed in the United States. [Describe transfer safeguards if serving EU/UK customers.]
13. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date and, for material changes, notify Customers' administrators by email or inside the Service.
14. Contact
[eWiring LLC — legal name to be confirmed]
[street address, city, state ZIP]
[privacy@mojohq.app]