Privacy Policy

Moxy is a Business Management System operated by Spark Development SRL, a company organized under the laws of Romania. For general questions, you can contact us at hello@sprk.dev. For privacy, GDPR, and data protection requests, you can contact Spark Development SRL at dpo@sprk.dev.

This Privacy Policy explains how we handle personal data when you visit the Moxy marketing website or use the Moxy web application and any future mobile applications.

Moxy helps organizations manage calendars, attendance, finances, customers, contracts, employees, internal requests, projects, time tracking, and internal apps from one connected business management system.

• Account data (name, email, credentials, organization)
• Organization and workspace configuration data
• User profile data and roles
• Employee, attendance, and time-off data entered by the customer
• Customer, contract, and project data entered by the customer
• Business directory data about companies, NGOs, people, suppliers, customers, and partners
• Internal request data
• Finance-related operational data
• Support communications
• Technical and security logs
• Diagnostics data if and when enabled (see Diagnostics below)

• Provide and operate the Moxy service
• Authenticate users and protect accounts
• Manage organizations, modules, users, and permissions
• Secure the service against abuse and unauthorized access
• Provide customer support
• Debug, maintain, and improve the product
• Comply with applicable legal obligations

• Performance of a contract with the customer or user
• Our legitimate interests in operating, securing, and improving the service
• Compliance with legal obligations
• Consent, where required

For personal data that customers add into Moxy about their employees, customers, suppliers, contacts, projects, internal requests, and business operations, the customer is typically the data controller and Spark Development SRL acts as the data processor. The terms of that processing are described in our Data Processing Agreement.

Spark Development SRL may act as an independent controller for limited data such as billing, account administration, security, legal compliance, and direct business communications.

The public Moxy website currently does not use analytics, advertising, or tracking cookies. The Moxy application may use strictly necessary cookies or similar technologies for authentication, session management, login state, and security. See our Cookie Policy for details.

Moxy may use internal monitoring, logging, and diagnostics systems operated by Spark Development SRL, including self-hosted Sentry, Grafana, Prometheus, and related tools. These systems are used to detect errors, investigate incidents, monitor availability, improve performance, and secure the service. Spark Development SRL aims to minimize personal data in logs and diagnostics and to avoid intentionally logging sensitive content, passwords, tokens, authentication secrets, or private business data.

Moxy may later use a self-hosted Sentry instance or a similar self-hosted diagnostics and error monitoring tool in the public website, the Moxy web application, and future mobile applications. The purpose is to detect bugs and crashes, identify failed requests, diagnose performance problems, receive error reports, and improve reliability and security.

Because diagnostics will be self-hosted, diagnostics data is processed in infrastructure controlled by Spark Development SRL or its hosting environment, not through Sentry SaaS, unless this changes in the future.

Diagnostics data may include:

• Technical logs, error messages, and stack traces
• Timestamps
• Browser type and version, device type, operating system, app version
• The page or screen where the error occurred
• Request metadata
• User or account identifier where needed to diagnose authenticated errors
• IP address or network metadata where technically collected

Spark Development SRL aims to minimize personal data in diagnostics and logs and avoid intentionally collecting sensitive content. Sensitive fields, passwords, tokens, authentication secrets, financial details, and private content should not be logged intentionally.

Session replay or screen recording diagnostics are not currently enabled. If they are introduced later, this policy will be updated and appropriate safeguards will be applied, such as masking and blocking of sensitive fields, limited sampling, access restrictions, and consent where required.

We may share data with:

• Hosting and infrastructure providers
• Email and support tool providers
• Diagnostics providers or tools, if and when enabled
• Legal, accounting, and public authorities when required by law

We do not sell personal data.

Transfers of personal data outside the European Economic Area may happen only if necessary and with appropriate safeguards, depending on the providers used.

We keep personal data only as long as necessary to provide the service, fulfil our contractual and legal obligations, maintain backups, ensure security, and resolve disputes.

We apply technical and organizational measures appropriate to the risk, including access controls, authentication, encryption where applicable, backups, monitoring, and least-privilege practices. No system can be guaranteed fully secure.

Subject to applicable law, you have the right to access, rectify, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on it. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise rights against a customer organization that uses Moxy to manage your data, please contact that organization directly.

Moxy is intended for business and organizational use and is not directed at children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

For privacy, GDPR, and data protection requests, you can contact Spark Development SRL at dpo@sprk.dev. For general product or commercial questions, contact us at hello@sprk.dev.