Privacy Policy
1. Who we are
This website, moxrev.com (the "Site"), and the MoxRev product are operated by EaseHawk Technologies Private Limited, a private limited company incorporated under the laws of India, CIN U62011DL2024PTC427769, with its registered office at [insert full registered office address, Rohini, Delhi] ("EaseHawk", "we", "us", "our"). MoxRev is part of the Moxsuite ecosystem of products.
For personal data collected through this Site, EaseHawk Technologies Private Limited is the data controller (or the equivalent role under your local law, such as "data fiduciary" under India's DPDP Act).
Privacy contact: hello@moxrev.com · Grievance Officer (India DPDP Act): [name and contact of designated Grievance Officer — mandatory for India] · [Counsel: confirm whether a DPO must be appointed under UAE PDPL Art. 10 / KSA PDPL based on processing scale]
2. Scope of this policy
This policy applies to personal data processed when you visit the Site, submit a demo request, or correspond with us about MoxRev. It does not apply to:
- Personal data inside the MoxRev product. When dealerships, rental companies and fleet operators use MoxRev, they process personal data about their own customers, renters, drivers and staff (for example identity documents, driving licences, contracts, payments, vehicle telematics and location data). For that data, the customer is the controller and EaseHawk is a processor acting on documented instructions under a Data Processing Agreement. [DPA and sub-processor register must be finalised before first customer onboarding; renter risk-scoring requires a DPIA under UAE PDPL/GDPR]
- Third-party websites we link to (for example LinkedIn), which have their own policies.
3. Definitions
- Personal data — any information relating to an identified or identifiable natural person.
- Processing — any operation performed on personal data (collection, storage, use, disclosure, erasure, etc.).
- Applicable law — the data protection law that applies to you, which may include: UAE Federal Decree-Law No. 45 of 2021 (PDPL) and, where relevant, DIFC Law No. 5 of 2020 or the ADGM Data Protection Regulations 2021; Saudi Arabia's Personal Data Protection Law (Royal Decree M/19 of 1443H, as amended) and its Implementing Regulations; Qatar Law No. 13 of 2016; the EU General Data Protection Regulation 2016/679 and Spain's LOPDGDD 3/2018; the UK GDPR; and India's Digital Personal Data Protection Act, 2023.
4. Personal data we collect
| Source | Data | Mandatory? |
|---|---|---|
| Demo request form | Name; phone number; dealership / rental company name; city; country; website (optional); free-text message (optional) | Fields marked * are needed to arrange a demo |
| Email & LinkedIn correspondence | Your contact details, message content, and any attachments you choose to send | Voluntary |
| Business development | Publicly available professional information (e.g. your role and company from LinkedIn or your company website) used to prepare for a requested demo | — |
| Technical | The Site sets no cookies and runs no analytics. Web fonts load from Google Fonts, which receives your IP address and browser user-agent to serve the font files (see our Cookie Policy). Standard server logs may record IP address, timestamp and requested URL for security. [confirm hosting provider log practice and retention] | Automatic |
How the demo form works: submitting the form opens a pre-filled email in your own mail application addressed to hello@moxrev.com. Nothing is transmitted to us until you choose to send that email; we receive exactly what you send. [Update this paragraph when the form moves to a hosted backend — the data flow and processors change]
We do not intentionally collect special-category / sensitive personal data through the Site, and we ask that you do not include such data in the free-text message.
5. Purposes and legal bases
| Purpose | Data used | Legal basis (GDPR/PDPL framing) |
|---|---|---|
| Arranging and delivering the demo you requested | Demo form data | Steps at your request prior to entering a contract; consent |
| Answering questions and business correspondence | Correspondence data | Legitimate interests (responding to enquiries) / consent where required [KSA PDPL leans consent-first — counsel to confirm positioning] |
| Preparing a relevant, personalised demo | Form data + public professional data | Legitimate interests |
| Site security, abuse prevention | Server logs | Legitimate interests / legal obligation |
| Establishing, exercising or defending legal claims; compliance with law | As strictly required | Legal obligation / legitimate interests |
| Sending marketing about MoxRev or Moxsuite products | Contact details | Consent (opt-in where required); every message includes an opt-out |
6. Automated decision-making and AI
MoxRev is an AI-powered product; however, this Site makes no automated decisions about you and does not profile visitors. Within the product itself, AI outputs (for example pricing recommendations) are advisory and take effect only after approval by an authorised human user; product-side processing is governed by the customer's agreement and DPA, not this policy.
7. Who we share personal data with
We never sell personal data. We share it only with:
- Our team — EaseHawk personnel who handle sales, demos and support, under confidentiality obligations;
- Service providers (processors) — such as email and hosting infrastructure, engaged under contracts consistent with applicable law [list actual providers and hosting regions before publication — required for KSA PDPL and useful for GDPR transparency];
- Professional advisers — lawyers, accountants and insurers where necessary;
- Authorities — where disclosure is required by law, regulation or enforceable request;
- Corporate transactions — a buyer or successor in a merger, acquisition or asset sale, under confidentiality and subject to this policy.
8. International data transfers
EaseHawk operates from India and serves customers in the GCC, Europe and beyond, so your personal data may be processed outside your country. Where applicable law restricts transfers, we rely on the mechanisms it provides:
- UAE PDPL: transfer to jurisdictions with adequate protection, or safeguards such as contractual clauses / your explicit consent (Arts. 22–23) [counsel: confirm mechanism once UAE Data Office adequacy list and Executive Regulations are settled];
- KSA PDPL: transfers per Chapter on cross-border transfer and its Implementing Regulations (adequacy, appropriate safeguards, or exemptions) [counsel: confirm current SDAIA position];
- EU/Spain & UK: EU/UK Standard Contractual Clauses with transfer impact assessments;
- India DPDP: transfers permitted except to countries restricted by government notification.
9. Retention
| Data | Retention |
|---|---|
| Demo enquiries & sales correspondence | Duration of discussions + [24 months], then deleted or anonymised |
| Contracts and pre-contractual records (if we engage) | Term + limitation period [e.g. 3 years India / as advised per jurisdiction] |
| Server security logs | [e.g. 90 days] |
| Marketing suppression list (opt-outs) | Kept indefinitely so we respect your opt-out |
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access on a need-to-know basis, strong authentication for company systems, and vendor due diligence. [summarise the actual, verified measures before publication — do not overstate] No internet transmission is completely secure; if we become aware of a personal data breach we will notify authorities and affected individuals where applicable law requires (e.g. GDPR 72-hour notification; UAE PDPL and KSA PDPL breach rules; India DPDP notification to the Data Protection Board).
11. Your rights
Subject to your applicable law, you may have the rights to: access your personal data and obtain a copy; correct inaccurate or incomplete data; delete / erase data; restrict or object to processing (including objecting to direct marketing at any time); data portability; withdraw consent at any time without affecting prior processing; and not be subject to solely automated decisions with legal or similarly significant effects. India's DPDP Act additionally provides the rights to grievance redressal and to nominate another individual to exercise your rights in case of death or incapacity.
How to exercise: email hello@moxrev.com with your request. We may need to verify your identity. We respond within the period set by your law [GDPR: 1 month; UAE/KSA/India: per regulations — counsel to confirm], free of charge unless requests are manifestly unfounded or excessive.
Complaints: you may lodge a complaint with your supervisory authority, including the UAE Data Office; the Saudi Data & AI Authority (SDAIA); Qatar's competent authority under Law 13/2016; the Agencia Española de Protección de Datos (AEPD) in Spain or your local EU authority; the UK ICO; or India's Data Protection Board.
12. Children
The Site and product are for businesses and are not directed at anyone under 18. We do not knowingly process children's data; if you believe a minor has provided data to us, contact us and we will delete it.
13. Marketing communications
We send marketing only where permitted and always with a working unsubscribe. Opting out of marketing does not affect service or demo-related communications you have requested.
14. Third-party links
Links to third-party sites (e.g. LinkedIn) are provided for convenience; their privacy practices are their own.
15. Changes to this policy
We will post updates on this page with a new "Last updated" date and highlight material changes. Where law requires, we will seek fresh consent.
16. Contact
EaseHawk Technologies Private Limited · [registered address] · hello@moxrev.com