Back to MoyaTerms of Service

Privacy Policy

Effective Date: August 24, 2026  ·  Version 1.2

Moya Tech LLC ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trade compliance and classification platform ("Service"). By using our Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, name, and password for user authentication.
  • Product Data: Product descriptions, attachments, messages, and HTS codes submitted for classification.
  • Payment Information: Credit card details processed securely via Stripe — we do not store card numbers.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, and session duration for service improvement.
  • Device Information: Browser type, operating system, and IP address for security and analytics.
  • Log Data: Access times, error logs, and API calls for troubleshooting.

1.3 Information from Third Parties

We may receive information from authentication providers (if using SSO), payment processors (Stripe), and analytics services.

2. How We Use Your Information

  • Provide Services: Process classifications and manage your account.
  • Improve Services: Analyze usage patterns and develop new features.
  • Communication: Send service updates and respond to inquiries.
  • Security: Detect fraud, prevent abuse, and ensure platform integrity.
  • Legal Compliance: Meet regulatory requirements and respond to legal requests.

3. Data Storage and Security

3.1 Storage Location

  • User credentials: PostgreSQL (US-West), passwords stored as bcrypt hashes.
  • Account and session data: Hosted databases in the United States with provider-managed encryption at rest.
  • Attachments: Processed to provide the requested analysis; temporary files are not intended as permanent document storage.
  • Reference data and embeddings: Hosted infrastructure used to search customs and compliance sources.

3.2 Security Measures

  • Encryption in transit and provider-managed encryption at rest.
  • Role-based access control following the principle of least privilege.
  • Access controls, rate limits, and monitoring intended to reduce unauthorized access and abuse.
  • Rate limiting and WAF protection against abuse and DDoS.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Infrastructure and payment processing partners, as necessary to operate the Service.
  • AI Service Providers: Product descriptions, messages, and attachments may be sent to third-party AI providers as needed to generate classifications and related analysis. Their processing locations and practices may differ from ours.
  • Legal Authorities: When required by law, court order, or to protect rights and safety.
  • Business Transfers: In the event of a merger, acquisition, or reorganization (with prior notice).

As of this policy's effective date, production text classification may be processed through the official DeepSeek API operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. DeepSeek states that it processes and stores personal data in the People's Republic of China and may use personal data, including user input, to develop and improve its services and models, subject to available opt-out rights. Image and audio processing continue to use Google Cloud Vertex AI and Gemini. See the DeepSeek Privacy Policy.

5. Data Retention

  • Account and classification data: Retained while your account is active and deleted when you delete your account, subject to limited backup, fraud-prevention, and legal requirements.
  • Payment records: Retained as needed for accounting, dispute handling, and legal compliance. Payment card numbers remain with Stripe.
  • Attachments: Processed for the requested analysis and not used as permanent file storage.
  • Operational logs: Retained only as reasonably needed for security, reliability, troubleshooting, and legal obligations.

Do not submit sensitive personal information or information that you are not authorized to provide. Product and supplier information needed for a classification may be included, but you should remove unrelated personal data and unnecessary confidential details.

6. Your Rights

6.1 All Users

  • Access: Request a copy of your personal data.
  • Correction: Update inaccurate information.
  • Deletion: Request deletion of your account and data.
  • Portability: Request a portable copy of eligible personal data where required by law.

6.2 California Residents (CCPA)

  • Right to know what personal information we collect.
  • Right to delete personal information.
  • Right to opt-out of sale (we do not sell your data).
  • Right to non-discrimination for exercising CCPA rights.

6.3 EU Residents (GDPR)

  • Rights to access, rectification, and erasure.
  • Right to data portability.
  • Right to restrict or object to processing.
  • Right to withdraw consent at any time.

To exercise these rights, contact us at privacy@moyatech.ai.

7. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. International Data Transfers

We operate our primary application infrastructure in the United States. Production text classification may be processed in the People's Republic of China by DeepSeek, while other providers may process data in countries where they or their subprocessors operate. We provide notices and safeguards required by applicable law and update this policy when production processing locations materially change.

9. Cookies and Tracking

  • Essential cookies: Authentication and security (session duration).
  • Functional cookies: Language preferences (1 year).
  • Analytics cookies: Usage statistics (1 year).

You can control cookies through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email notification or a prominent notice on our Service. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@moyatech.ai

Mailing address: Moya Tech LLC, 2010 El Camino Real #1487, Santa Clara, CA 95050, United States.