This is MooseChat’s data processing agreement. It binds only once both parties have signed it, and MooseChat signs it for customers on the Agency plan: write to support@getmoosechat.com. Until then, the terms of service and the privacy policy describe how MooseChat handles your visitors’ data.
Once signed, it applies whenever MooseChat processes personal data for you: the conversations your visitors have with your bot, and the contact details they send through it. You are the controller and MooseChat is the processor. MooseChat is operated by Mohammad Yusuf Khan.
Subject matter and duration
MooseChat processes personal data to answer your visitors from your content, to deliver their leads to you, and to show you your conversations, questions and analytics, for as long as you use the service and then until the data is deleted as described below.
Data subjects
People who use a MooseChat widget on your website, your bot’s share page, or a conversation you start through the API.
Categories of personal data
- What visitors type, and the bot’s replies
- Contact details a visitor chooses to send: usually a name, an email address or phone number, and a message, plus any fields you add to the lead form
- The page a conversation started on
- A random visitor identifier and the IP address, each kept only as a salted hash
- The country and the browser family
You should not configure the chat or the lead form to collect special categories of data, payment card numbers or government identifiers.
Your instructions
MooseChat processes the data only to provide the service as you configure it in the dashboard, the API or the MCP server, and as these terms describe, unless the law requires otherwise; in that case MooseChat tells you first where the law allows it.
Confidentiality
Only the operator can access production data, and only to run and support the service. Anyone given access in future is bound to confidentiality.
Security
- Traffic is encrypted in transit.
- Transcripts, their summaries, questions and lead details are encrypted at rest with a key for your workspace, with key rotation.
- Visitor identifiers and IP addresses are stored only as salted hashes.
- API keys are stored only as hashes; webhook signing secrets are encrypted.
- Access to your workspace is limited to its members and their roles; an agency reaches a client workspace only through its own membership.
- An audit log records member, key, bot, destination, client and plan changes.
- Model providers are called with request logging switched off at the gateway.
Subprocessors
You authorise these subprocessors:
| Subprocessor | Processing | Location |
|---|---|---|
| Cloudflare | Hosting, the database and file storage, AI Gateway, text embeddings and reranking, the bot challenge during traffic floods | Global network |
| OpenAI | Writing replies | United States |
| Anthropic | Writing replies when OpenAI is unavailable | United States |
| Postmark | Sending lead notifications by email | United States |
MooseChat gives at least 30 days’ notice by email before adding or replacing a subprocessor. If you object on reasonable data protection grounds and the issue can’t be resolved, you may end the affected service and get a pro-rated refund of any prepaid fees for it.
Helping you
MooseChat helps you answer requests from data subjects. In the dashboard you can read a visitor’s conversations, and export or delete their leads yourself. To delete a single conversation, or anything else the dashboard can’t do, write to support@getmoosechat.com and it is done within 30 days.
MooseChat tells you without undue delay, and within 72 hours of becoming aware of it, of a personal data breach affecting your data, with what is known about it and what is being done.
MooseChat gives you the information you reasonably need for a data protection impact assessment or a regulator’s enquiry about the service.
Deletion
- Transcripts are deleted 12 months after the conversation.
- Questions are deleted when they pass your plan’s analytics history.
- Leads stay until you delete them.
- A deleted bot’s content, files and conversations are deleted within 24 hours.
- When your account is deleted, everything in it is deleted within 30 days, except where the law requires keeping it.
Audits
MooseChat answers your reasonable written questions about its compliance with this agreement. Where the answers aren’t enough and a regulator or the law requires it, you may carry out an audit at your own cost, with 30 days’ notice, no more than once a year.
Contact
Write to support@getmoosechat.com.