Privacy Policy

This Privacy Policy explains how Moqup collects, uses, discloses, stores, and protects personal information when you use our website, app, and related services.

It is intended for a Canada-based business and is written to align with Canadian privacy expectations, including PIPEDA, applicable provincial privacy laws, consent, access, correction, and accountability.

We may collect the following categories of information:

• account details such as your name, email address, login identifiers, and profile data;
• billing and transaction information processed when you purchase a plan;
• content you submit, including website URLs, brand assets, prompts, uploads, and drafts;
• connected social-account information, OAuth tokens, profile identifiers, permissions, scheduled posts, publication IDs, and platform responses;
• support messages and other communications you send to us;
• device, browser, IP address, cookie, and analytics data; and
• usage information such as feature interactions, session activity, and error logs.

We use information to:

• provide, maintain, and secure the Service;
• authenticate users and manage accounts;
• process payments and subscriptions;
• generate, analyze, and improve content and workflows;
• respond to support requests and service notices;
• measure usage and improve performance; and
• comply with legal obligations and enforce our Terms.

Depending on where you live, we process information because it is needed to provide the Service or perform a contract, because you gave consent, because we have a legitimate business interest that does not override your rights, or because the law requires it.

Connecting a social account is optional. You can withdraw a permission by disconnecting the account and, where applicable, revoking Moqup in the platform's own settings. Marketing email is optional and can be withdrawn through the unsubscribe link in any marketing message.

We work with service providers that help us run the product, including providers for:

• authentication and hosting, including Google/Firebase services;
• payments and billing, including Stripe;
• email delivery, including transactional and support email;
• analytics, including Google Analytics if you consent; and
• AI generation and analysis, including third-party AI model providers.

These providers may process information on our behalf and under their own terms and privacy practices where applicable.

To generate or analyze content, we may send prompts, uploaded materials, and related context to third-party AI providers. That may include website text, brand inputs, and other data you choose to submit.

Use of those services is necessary to provide the AI features you request. The relevant provider may store or process data according to its own terms and settings.

We use essential cookies and local storage to keep the site working, remember your session, and store preferences such as cookie consent and onboarding state.

If you accept optional cookies, we also use analytics tools to understand how people use the Service and to improve it. You can decline non-essential cookies through the banner on the site.

With your acceptance of optional cookies, we may use the Meta Pixel to measure marketing campaign performance and understand actions such as page visits, sign-ups, checkout starts, purchases, content generation, approvals, and scheduling. Meta may receive browser, device, page, and event information for these purposes.

We may also use Meta's automatic advanced matching with an authenticated email address already provided to MOQUP. Meta hashes eligible matching information before transmission and uses it to help attribute conversions and reach relevant audiences. We do not send financial, health, government ID, or other sensitive information through this feature.

You can decline optional cookies through the banner. Meta may process information under its own policies, including the Privacy Policy.

We may disclose information:

• to service providers that help us operate the business;
• to payment, identity, email, hosting, analytics, and AI vendors;
• if required by law, court order, or lawful request;
• to protect our users, rights, or security;
• in connection with a merger, acquisition, or similar transaction; or
• with your direction or consent.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, to provide the Service, to meet legal obligations, to resolve disputes, and to enforce our agreements.

Retention periods may vary depending on the data type, account status, billing needs, and legal requirements.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls and encrypted social tokens. No system is perfectly secure and we cannot guarantee absolute security.

If a security incident creates a reporting obligation, we will assess it, keep the records required by applicable law, notify regulators and affected people when required, and investigate steps to reduce recurrence.

Subject to legal limits, you may:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion, subject to billing, security, and legal retention requirements;
• withdraw consent where we rely on consent, subject to legal and contractual limits;
• unsubscribe from marketing emails using the link in the message; and
• disable or clear optional cookies through your browser settings or our cookie banner.

If you are in Quebec, or another province with additional privacy rights, you may have additional rights under applicable law.

We may send service, billing, security, and account emails that are necessary to provide the Service.

If we send promotional email or newsletters, we will do so only in accordance with applicable Canadian anti-spam rules and will provide a way to unsubscribe where required.

If you have questions, requests, or complaints about privacy, contact us at:

• Email: support@moqup.app

You may also have the right to contact the Office of the Privacy Commissioner of Canada or another applicable regulator if you believe your privacy rights have been violated.

Moqup uses YouTube API Services to connect your YouTube channel, upload and schedule videos, manage comment conversations and send replies, and retrieve analytics for display in your dashboard. Connecting YouTube is optional and requires your authorization through Google. We do not collect your Google or YouTube password.

When you connect YouTube, we access the following data for your authorized channel:

• channel ID, title, and thumbnail;
• video IDs and metadata, including titles, descriptions, tags, categories, privacy and scheduling settings, thumbnails, and upload and processing status;
• comment threads and replies, including comment IDs, author display names and channel IDs, comment text, timestamps, and reply status; and
• analytics for a seven-day reporting period: views, estimated watch time in minutes, and subscriber gains and losses, displayed as subscriber changes, for your channel and videos published through Moqup.

We use this data only to provide the YouTube features you explicitly request or enable, including scheduled uploads, comment synchronization, replies you choose to send, and analytics display. We store encrypted OAuth access and refresh tokens in Google Cloud Firestore, together with channel connection details. Post metadata, upload sessions, video IDs, processing state, and synchronized comments and replies are also stored in Firestore to support scheduling, upload continuation, and your inbox. Uploaded video and thumbnail files are stored in Firebase Storage. Seven-day analytics reports are retrieved when requested and are not persistently cached by Moqup.

We do not sell YouTube data or share it with third parties except as needed to provide the service you request. This includes hosting and storage providers, such as Google/Firebase and Vercel. If you request an AI-drafted reply, the relevant comment and conversation context may be sent to our AI provider to generate that draft, as described in Section 6. You decide whether to send the reply.

Google processes information under its own policies. Please review Google's Privacy Policy. Use of YouTube is also subject to the YouTube Terms of Service.

You can disconnect YouTube in Moqup under Dashboard → Connections. Disconnecting removes your stored YouTube connection details and OAuth tokens from Moqup and requests revocation of the authorization with Google. You can also revoke Moqup's access directly through Google's security settings. Revoking access prevents further authorized API access but does not itself delete all previously stored Moqup post or comment records or videos already uploaded to YouTube.

To request deletion of YouTube data stored by Moqup, follow our data deletion instructions or contact support@moqup.app. You can use the same address for questions or complaints about our YouTube data practices. Deleting data held by Moqup does not delete your YouTube channel or videos; manage those directly in YouTube.