Privacy Policy

This Privacy Policy for Paraflow Inc. ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our website and related services (collectively, "Services"), including when you:

• Visit our website at https://moxt.ai or any website of ours that links to this Privacy Policy.
• Engage with us in other related ways, including any sales, marketing, or events.

Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

Contents

• What information do we collect?
• How do we process your information?
• How your information is shared and disclosed?
• Cookies and similar tracking technologies
• Artificial intelligence
• User rights and choices
• Security
• Data retention
• Cross-border data transfers
• Minors
• Changes to Privacy Policy
• Contact information
• Applicable law and venue
• Supplementary terms

What information do we collect?

Personal information you disclose to us

For purpose of this Privacy Policy, "personal information" (also called personal data) means any information that relates to an identified or identifiable natural person or is reasonably capable of being linked to a particular consumer or household, as set out in the EU GDPR, UK GDPR, Canada's PIPEDA and all applicable U.S. federal or state privacy statutes. Personal data may include, for example, your name, business email address, postal address, telephone number, username, unique device or browser identifiers, Internet-protocol ("IP") address, authentication tokens, usage and telemetry logs, or other information generated through your use of our Services.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include the following:

• Email addresses
• Usernames
• Authentication data
• Passwords

Personal information provided by you

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Account information. We collect information that you provide when you set up, sign in, or manage your account on the Services, such as your name, usernames, passwords, email address, etc.
• Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.
• User content. We collect information that you provided or uploaded for use as inputs on the Services, including the content you provided to the AI chatbot and other features, such as your prompts, the files you upload, user-generated content, and any feedback you provide.
• System performance and interaction logs. We collect user interaction logs related to application errors, exceptions, and system logs, the performance data that may include user activity, and configuration data potentially contained in code repositories.
• Marketing and communication data. We collect marketing and communications data, including your marketing preferences, engagement data (email opens, clicks, forwards, unsubscribes, and device information), responses from onboarding questions, surveys, and any other information you provide in relation to marketing.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. The information we collect includes:

• Technical and device information. We collect details about the device you use to access the Services, including your IP address, browser type and version, operating system, device identifiers, device type, and language settings.
• Log and usage data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports, and hardware settings).
• Cookies and similar technologies. We, along with our service providers, use cookies and other similar technologies to operate the Services, analyze usage, remember preferences, and deliver content.

Information from third party

We receive information from third-party platforms to provide you with certain features.

• Third-party accounts. When you sign in or register using a third-party account, we may receive information that you have authorized the provider to share (e.g., email address). We only receive data you authorize through the third-party login process. We do not retain more data than necessary for account authentication and Services provision. We retain this data for as long as your account is active or as required by law.
• Third-party payment. When you use third-party payment services, we may collect your name, email address, and postal address from the payment processor to process your transaction and complete your order.

How do we process your information?

Purpose

We do not use any of your information to train artificial intelligence or machine learning models. Your information may be used only for the purposes described at the time of collection or for purposes described in this notice, including:

• Account creation, authentication, and user account management. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• Deliver and facilitate the delivery of Services. We may process your information to provide you with the requested Services. We may forward your inputs to our external AI providers to process them and return outputs required to satisfy your requests.
• Respond to user inquiries/offer support. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested Services.
• Send administrative information to you. We may process your information to send you details about our products and Services, changes to our terms and policies, and other similar information.
• Fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, and refunds made through the Services.
• Enable user-to-user sharing. We may process your information if you choose to use any of our offerings that allow for sharing with another user.
• Request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.
• Analytics processing. We may use analytic tools to process logs and user behavior data to analyze performance and usage patterns.
• Send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.
• Deliver targeted advertising to you. We may process your information and create user profiles to develop and display personalized content and advertising tailored to your interests, location, and more.
• Protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• Market research and identify usage trends. We may process information about how you use our Services and create user profiles to conduct market research and to better understand how they are being used so we can improve them.
• Determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
• Save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interests, such as to prevent harm.

Legal basis

We process your information only where a valid legal basis exists under each privacy regime governing our Services. The legal basis we rely on include:

• Performance of a contract. We process your information to provide, maintain, and support the Services you have requested under our Terms of Service or other agreement with you.
• Legitimate interests. We use your information to secure the platform, detect fraud, generate aggregate analytics, and improve AI features where these interests are not outweighed by your privacy rights.
• Consent. We rely on your opt-in consent for non-essential cookies, marketing e-mails, and any other processing that requires consent under applicable law. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligations. We retain and disclose information as necessary to comply with bookkeeping rules, export-control and sanctions regulations, court orders, or other legal duties.
• Protection of vital interests. In rare cases, we may process data to protect an individual's vital interests, such as preventing serious harm or responding to an emergency.

How your information is shared and disclosed?

Vendors, consultants, and other third-party service providers

We will only share your personal information to a third party when necessary. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. For example, our service relies on the execution environment provided by E2B Firecracker micro virtual machines. Therefore, we engage third-party cloud providers to process your files, code, and conversations.

The categories of third parties we may share personal information with are as follows:

• Cloud computing services
• AI service providers
• Data analytics services
• Data storage service providers
• Payment processors
• Order fulfillment service providers
• Performance monitoring tools
• User account registration & authentication services
• Development and operations tools

Affiliated entities

We share your information within our corporate organization. Part of the Services you access and use may be supported by certain entities within our corporate organization. We may share the information we collect with members, a parent company, subsidiaries or other corporate affiliates of our corporate group as required to provide critical functions, such as storage, delivery and security.

Competent authorities

We may disclose any information we collect in response to subpoenas, court orders or demands, legal processes, enforcement requests, legal claims or government inquiries, and protect and defend our rights, interests and security. We may also share any information we collect to fulfill requirements of any applicable laws, exercise or defend any legal claims, and comply with any applicable laws.

Others

Upon your permission, we may share your personal information with other third party.

Cookies and similar tracking technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

You can review our Cookies Policy and find further details on our use of cookies and your choices.

Artificial intelligence

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Policy govern your use of the AI Products within our Services.

Use of AI technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic (Claude), Amazon Web Services (AWS) AI, fal.ai, Microsoft Azure AI, and Google Cloud AI. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our product. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products are designed for the following functions:

• AI bots
• AI translation
• Image generation
• Natural language processing
• Text analysis

All personal information processed using our AI Products is handled in line with our Privacy Policy and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety.

User rights and choices

You have certain rights regarding your personal data. Depending on your location and our activities, you have the following rights:

• Right to know. You may have the right to know what personal information we have collected about you, including the categories of personal information, the categories of information source, the business or commercial purpose for collecting, selling or sharing the personal information, and the third party to which we disclose that information.
• Right of access. You may request a copy of the personal data we hold about you.
• Right to rectification. You may request correction of inaccurate or incomplete data.
• Right to erasure. You can delete or terminate your account, or delete certain personal information by logging in to your account. We may need to retain personal information if there are legitimate grounds under applicable laws (e.g., for the defense of legal claims or freedom of expression).
• Right to data portability. You have the right to request a copy of certain personal information we process about you. This comprises any personal information we process based on your consent or the contract we signed with you. You have the right to receive the personal information in a structured, commonly used and machine-readable format. You also have the right to request that we transfer that personal information to another party; however, there can be certain exceptions.
• Right to restriction of processing. You may request that we limit how we process your data in certain situations. Please note, however, even if we stop processing the personal information, we may use it again if there are legitimate grounds under applicable laws (e.g., for the defense of legal claims or for protecting vital interest of you or another natural person). If we agree to stop processing the personal information, we will take commercially reasonable efforts to inform any third party to whom we have disclosed relevant personal information so that they can also stop processing the information.
• Right to object. You may object to processing, including processing for direct marketing.
• Right to withdraw consent. If our processing is based on your consent, you may withdraw that consent at any time. Withdrawing this consent will not affect the lawfulness of our processing of your personal information before you withdraw it. We will respond to your request consistent with applicable laws. In your request, please make clear for what personal information you want to withdraw consent of processing.
• Right to complain. You may lodge a complaint with a supervisory authority or data protection authority.
• Opt-out by Email. You may opt out of receiving Services update or promotion emails we send to you (if applicable to your region) by following the unsubscription instructions included in these emails, or you can contact us in the way outlined in this Privacy Policy.
• Right not to be discriminated against. You have the right not to be discriminated against for exercising any of your rights. We will respond to your request in accordance with applicable laws and through proper means of verification.
• Right to object to automated decision-making: We currently do not engage in automated decision-making that produces legal or similarly significant effects on individuals. If we engage in such automated decision-making in the future, we will notify you separately. You can exercise your opt-out or objection rights to certain processing activities as described in this Privacy Policy.

You may exercise your rights by logging into your account or by contacting us through the methods published in this Privacy Policy. Under applicable laws, you may have the right to submit a request through an authorized agent. If you need to appoint an authorized agent to exercise the right of choice on your behalf, please issue an authorization letter to the agent. Only if the agent has the valid authorization letter in paper issued by you, will he/she be able to submit the request to exercise the right on your behalf.

We will verify your request by asking you to send the request from the email address associated with your account or provide the information required to verify your account. We will disclose and deliver the required information free of charge within applicable duration. The time period to provide the required information may be extended as permitted by laws. You may offer feedback to us against our decision.

If you have questions or comments about your privacy rights, you may email us at support@moxt.ai.

Security

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. Please note that we are not responsible for guaranteeing security of the information collected by a third party, and please be sure to refer to the security measures taken by a third party in its privacy policy.

Data retention

Duration

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Location

Our data center is located in the United States of America. Based on the various service-providing contracts we sign with you, your personal information may be stored and processed by the server outside of the region of your residence. Our teams around the world may access your information from outside of the region of your residence. No matter where our data center is, we will take appropriate measures to defend your rights in accordance with this Privacy Policy.

Cross-border data transfers

As mentioned above, our data center is located in the United States of America. Based on the needs of global operations and management, information we collect about you may be transferred to countries or jurisdictions outside of the country or region you are in. Please note that these countries and jurisdictions may have the data protection laws that are different from those of the country or region you are in. No matter where your data is transferred, we implement compliance measures under applicable laws for the international transfers, for instance, we use appropriate contractual mechanisms (e.g., EU standard contractual clauses), rely on the approved international data transfer service providers to ensure data compliance. We also maintain appropriate protection measures to ensure the data security during transfers, as well as to protect your rights outlined in this Privacy Policy and any applicable laws and regulations.

Minors

Our Services are not directed to children. We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction (e.g., 16 in the European Union, 13 in the United States), nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction and have the capacity to enter into a binding contract. If we discover that we have inadvertently collected personal information from a child without verifiable parental consent, we will promptly delete that information. If you believe we may have collected such data, please email us at support@moxt.ai or write to us at: 1401 21ST ST STE R SACRAMENTO, CA 95811.

Changes to Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

Contact information

If you have questions or comments about this notice, please email us at support@moxt.ai or write to us at: 1401 21ST ST STE R SACRAMENTO, CA 95811.

Supplementary terms

If you are a resident in the following countries or regions, corresponding specific supplemental terms will apply. If there is any conflict between the text of this Privacy Policy and the supplemental terms applicable to your country or region, contents of the specific supplemental term will take precedence; if not stipulated in the supplemental term, the text of this Privacy Policy still apply.

Residents in California, the United States of America

In this Privacy Policy, we have thoroughly discussed the specific contents of the personal information we collect from users. In the 12 months preceding the effective date of this Privacy Policy, we have collected all types of personal information described in the "What information do we collect?". For more details on the purpose for which we use the information, please refer to the "How do we process your information?" section. For information we share with the third parties, please refer to the "How your information is shared and disclosed?" section.

Please note that, under California Consumer Privacy Act ("CCPA"), personal information does not include deidentified or aggregated consumer information, publicly available information from government records. You may request us to reveal the categories of personal information that we share with third parties for direct marketing purposes. You may submit a request in the way outlined in the "Contact Information" section above.

Your browser may offer the "Do Not Track" option, which allows you to signal to operators of websites, web applications and services that you do not want such operators to keep track of certain of your online activities over time and/or on different websites. Currently, our Service may not support the "Do Not Track" request.

As defined in the CCPA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for valuable consideration. To the extent restricted by applicable laws, we do not sell your personal information. If we engage in the sale of your personal information in the future, you have the right to opt-out of the sale.

Although some of the information we collect may be considered as sensitive personal information, we will only process such information while providing Services and within other exemptions under applicable laws, e.g., when we process your sensitive personal information for the purpose of performing the Services.