Version: 4 September 2026
Our website privacy policy addresses people who visit moxii.ai. This notice addresses people who talk to MOXii over a messaging channel: WhatsApp, RCS, SMS or web chat.
MOXii is a trading name of iiNDYVERSE Ltd., registered in England and Wales under company number 13565008, with registered office at 86-90 Paul Street, 3rd Floor, London, EC2A 4NE, United Kingdom.
For everything in this notice, we are the data controller. Contact: privacy@moxii.ai.
Some conversations ask about ethnicity. Answering is always optional and we record it only if you choose to tell us. We ask because findings are weaker, and less useful to the communities they describe, when whole groups are invisible in them. Skip the question and carry on if you would rather not.
We do not ask about health, political or religious views, or sexuality. If you volunteer any of it in a message we will hold it as part of that message, so please share only what you are comfortable sharing.
| What we do | Why | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Run the conversation and answer you | To deliver what you opted into | Contract, Art. 6(1)(b) |
| Record and analyse your answers | To produce research findings for our clients | Legitimate interests, Art. 6(1)(f) |
| Transcribe and translate voice notes, describe images | So your answer can be understood and included | Legitimate interests, Art. 6(1)(f) |
| Send you messages in a conversation | You opted in | Consent, Art. 6(1)(a) |
| Keep records of consent and opt-out | To prove we honoured your choice | Legal obligation, Art. 6(1)(c) |
| Protect the service from abuse | To keep it working for everyone | Legitimate interests, Art. 6(1)(f) |
| Record your ethnicity, if you choose to give it | So findings represent everyone | Explicit consent, Art. 9(2)(a), optional and withdrawable |
| Consider you for future conversations, based on what you have told us | So we invite the right people rather than everyone | Legitimate interests, Art. 6(1)(f). You can object at any time and we will stop |
Where we rely on consent you can withdraw it at any time; see section 07. Where we rely on legitimate interests you can object, and we will stop unless we have compelling grounds not to.
In the United States we follow the federal and state privacy laws that apply to you. You keep every right your state gives you, plus the rights in section 07. We never sell or share your personal data for advertising.
Running a conversation means other companies handle parts of it. Each is bound by contract to process it only on our instructions, and none may use it for their own purposes.
| Category of recipient | What they handle |
|---|---|
| Messaging platforms | Delivering messages to and from your app |
| AI providers | Generating and validating replies, transcribing and translating voice notes, describing images |
| Cloud storage and hosting | Storing media and running our services |
| Research tooling | Holding conversation records and findings |
| Payment services | Paying incentives to the address you give us |
We keep a current list of the named companies behind these categories and will send it to you on request: email privacy@moxii.ai.
Where your information goes. Almost everything stays in the UK/EU. Our platform, your messages, your media, and the AI that reads and replies to them all run in the UK/EU.
Not everything we do uses AI. Some questions are simple rules, and sometimes AI only steps in where a rule cannot make sense of an answer. Where we do use it:
We do not use your messages, voice notes, photos or videos to train AI models, and neither do the providers we use. The companies behind the categories in section 04 are contractually barred from training their models on the content we send them. We rely on their contractual commitments here, as we do for everything else they handle on our behalf.
We do not share your name, number, or any other contact information belonging to you without telling you. Under our standard terms the brand receives aggregated findings.
They do see the display name or alias you use, and any profile picture you shared with us, where a conversation is part of a community rather than an anonymous survey. If you would rather they did not, change your display name or use a picture that does not identify you.
Where a conversation needs the brand to know who you are, to send you something or invite you somewhere, we will tell you when you opt in.
We never sell your personal data.
To opt out of receiving messages, reply LEAVE or STOP at any time, or send /stop. We will not message you again on any of our conversations. If you change your mind, send JOIN.
What happens to what you already told us. We stop contacting you and we keep the answers you already gave. They form part of research that has usually been analysed and reported already, and quietly removing one voice after the fact would misrepresent it. If you want those answers deleted too, just ask; see your rights below.
You also have the right to:
Email privacy@moxii.ai. We will respond within one month.
We keep things only as long as we need them for the purpose we collected them for, then delete them.
| What | Kept for |
|---|---|
| Your messages, transcripts and media | While we are running conversations for that client, and afterwards while we may still invite you to things, deleted once you have not taken part in anything for 3 years |
| Answers used in a report | As long as the report is in use by the client |
| The record that you opted in or out | While you are opted in, and for 6 years after, so we can show we honoured your choice. It is held against a code derived from your number, not the number itself |
| Anything you ask us to delete | Removed on request, see section 07 |
We also keep what you told us so we can work out whether you are a good fit for other projects. When a new piece of research comes up, we look back at what people have said, your interests, where you are and what you know about, to decide who to invite. That is why you get asked about things you actually care about, rather than everything.
This means we keep your answers after a project ends, and that a person at MOXii may look at them when deciding who to approach next. We do not sell this to anyone, and we do not share it with clients beyond what section 06 describes.
We do not keep it forever. If you have not taken part in anything for 3 years, we delete what we hold about you, your messages, transcripts and media, without you having to ask. All we keep after that is the record that you opted in or out, for the reason in the table above.
You can tell us to stop considering you and stay with us anyway: email privacy@moxii.ai. Opting out of messages altogether also stops it.
Your media is held encrypted in our UK/EU storage. Deletion is carried out manually or in batches when required, rather than automatically.
If you are 16 or over you can take part and give consent yourself. Data protection law often allows younger, 13 in the UK and between 13 and 16 across the EU, but 16 is the bar we hold ourselves to in every country, in line with market research industry rules.
Under 16, a parent or guardian must give consent first, and we keep a record of it. Where a young person takes part we also ask for their own agreement alongside their parent's, and we give them an age-appropriate explanation of what taking part involves. Any incentive is paid to the parent or guardian.
Some countries set the bar higher than 16, and there local law wins. If you are in India, Mexico, the United Arab Emirates or Taiwan, a parent or guardian must give consent for anyone under 18.
If you are a parent or guardian: you can run the conversation on your own phone or watch it on your child's, you can ask us for the chat log at any time, and you can withdraw consent by emailing privacy@moxii.ai.
Anyone can end a conversation at any point by saying stop or leave, and we will not press on.
We will post changes here and, if they matter, tell you in the channel you use.