Moottoo Privacy Policy
Who handles your information
Moottoo is operated by 摩登领客数字科技（上海）有限公司. This policy covers the website and Moottoo AI connection service. Contact andy@modernlinc.com or use Feedback and support.
Your chosen AI client and model service also process information they receive under their own terms. Their notices remain relevant, while Moottoo remains responsible for the processing under its control.
Information used by each feature
| Feature | Information and purpose | Main access boundary |
|---|---|---|
| Account and sign-in | Email, account details and sign-in verification information to create, protect and manage the account. Enter the website password only in this site’s sign-in or explicit account-reverification form, never in case text or AI tool parameters. | You and personnel who need access for account administration |
| Private drafts | Content, private notes, input snapshots, revision suggestions, status, identifiers and timestamps to save, edit and retrieve the same draft. | Your account permissions and authorized administrators handling necessary support. AI-created drafts are not automatically public. |
| Content submitted for display | Content you submit for review and necessary display information. | The parts actually approved for public display are visible to visitors. Separate public content from private notes before submission. |
| Negotiations | Room messages, proposal content and versions, submitted conditions such as budget and deadline, participant identity and AI attribution. | Room participants and necessary authorized support personnel. Authorized AI reads can include other participants’ information in that room. |
| AI connections | Account/client association, selected permissions, duration, status and necessary verification records. | You, the relevant client and personnel or systems maintaining access controls |
| Support | Questions, supplements, replies, referenced record IDs, handling status, source labels attached to the submission if present, and capability excerpts you choose to include, to understand and handle the case. Draft-data requests also retain verification/processing status and timestamps, confirmed IDs and content-version markers, and necessary failed-attempt counters; neither the verification password nor an exported draft body is stored in the case. | You and the personnel handling that private case |
| Website operation | Necessary sign-in cookies, language preferences, network operation and error records for sign-in, presentation, troubleshooting and security. | Personnel or providers performing necessary maintenance |
Processing is limited to requested features, necessary service arrangements and legal obligations. You choose optional processing that relies on consent. Declining an AI connection does not prevent use of web features that do not require it. Do not include passwords, authorization codes, unrelated identity documents, financial accounts, medical information or other sensitive details. Contact us before a use case involving sensitive information or children’s information; ordinary draft consent is not a substitute for required safeguards.
AI connections and sharing
The authorization page identifies the client reference, features and duration. A client-supplied product name is not Moottoo certification of vendor identity; check the product you are using. Reading drafts, creating drafts, reading negotiations, sending messages and proposing versions are separate choices; keeping a connection is another choice. Reading may send the complete relevant record to your chosen client and model, including private draft notes and other participants’ contributions to a room you participate in. Share only information you are entitled to process for that collaboration.
AI-created drafts remain private. AI messages and proposals are saved in the room, visible to participants and attributed as AI actions. They do not confirm a deal, create an order or make a payment. Notice and any legally required consent must correspond to the actual recipient, purpose and information involved. A general selection is not unlimited permission for all AI products.
WorkBuddy, the current priority client, handles received information under its official privacy notice and your actual model/settings; its official settings guide provides model and data-management entry points. For another AI, consult that product and its model service. These links do not establish identical recipients, retention, training settings or processing regions across AI services, or make their agreements part of Moottoo’s policy.
You can pause your AI access or revoke a connection in the website’s AI access controls. Another participant’s independent authorization is unaffected. Revocation or expiry stops subsequent authorized access; it does not erase website records or recall copies already received by clients, model services or other participants. Their retention, training settings and processing locations depend on the relevant service. We handle data under our control and explain which recipient must handle any remaining part of a request.
Storage and access across regions
The current website database, server storage for the OAuth service and the server copies whose locations have been confirmed are hosted on Alibaba Cloud in Shanghai, China. Users in China, the United States and elsewhere use the same website and records subject to account and participation permissions. Switching interface language does not create a separate national database or automatically translate user content.
This does not establish that every historical copy, local maintenance copy, backup or external AI record is stored in Shanghai. Providing personal information to an overseas recipient can involve additional applicable requirements. A successful connection alone does not establish compliance; the actual recipient and processing arrangements must be addressed before enabling that use.
Retention and deletion
Retention depends on purpose, the shortest necessary period, requests and applicable legal duties. Account information and drafts support requested services; negotiation records support communication, version review and necessary dispute handling. Information should be deleted or lawfully anonymized when its purpose ends, it is no longer necessary or another applicable deletion condition arises. Any retained portion needs a specific reason and scope.
Connection duration is not a retention period for business records. The language preference cookie is set for approximately 30 days following an explicit language selection and is renewed when selected again. Clearing it does not delete your account or records. Sign-in cookies follow the actual session settings.
Relevant network security logs subject to legal retention are managed separately from business content. Backup handling is also separate: deleting an online record does not establish simultaneous erasure from all backups. Where applicable legal retention or technical difficulty prevents immediate deletion, processing should be limited as required to necessary storage and security protection, with the restriction and next steps explained. We cannot promise instant recall of data already received by third parties.
Your choices and requests
You can view and edit your drafts, manage connections, and request access, a copy, correction, deletion, account closure or withdrawal of consent. Cancelling a draft currently changes its status; it is not an erasure request. There is no single export or erase control covering all business records.
Sign in to My feedback and support, choose “Other suggestions”, and describe the request and relevant record IDs. Continue in that same private case. If you cannot sign in, contact andy@modernlinc.com for recovery or another appropriate verification method. Do not send passwords, authorization codes or unrelated identity documents in email or case text.
For your own draft copy or eligible unpublished-content erasure request, use “My draft data requests” in the case, review the scope, and confirm with your current Moottoo website password. This verifies the account, not a government document or real-world identity. The request freezes the IDs and versions of your drafts at confirmation; later additions or changes are not automatically processed under the old request. After administrator processing, return to the same case, reverify, and download a private JSON copy or partial-handling receipt. The result requires your sign-in and verification, is not a public download URL, and is not kept as a permanent separate export body.
The verification/queued-request proof has a seven-day technical window and the processed download a 48-hour window. Reverify in the same case after expiry, account changes or a scope update. These are not statutory response deadlines, waivers of rights or case-record deletion periods. Failed-attempt counters limit repeated attempts within the relevant technical window; they are not government-identity verification.
This assisted route covers owned drafts only. Cancelling a draft or pausing/revoking AI access does not erase data. Published copies, shared negotiations, files, account closure, logs and backups need separate review in the same case, taking account of your information, other participants’ rights and legally required retention. We explain the objects and results, any specific limitation and the next step; partial draft handling is not full-account or all-backup erasure. Your statutory complaint and other legal remedies remain available.
Support operates asynchronously on weekdays, 10:00–18:00 Beijing time, targeting an initial useful response or clear next step within one working day. This is an initial-response target, not a deadline for every export, closure or deletion. Applicable legal requirements take precedence.
Security, children’s information and changes
Account and participation permissions, connection scopes, and pause/revocation controls restrict access. Necessary maintenance personnel may handle records for support and security. No system can guarantee absolute security. Incidents affecting personal information require appropriate remedial action and notifications under applicable requirements.
The ordinary workflow does not provide a dedicated submission and guardian-consent process for information about children under 14. Do not submit such information through ordinary negotiations or support. Contact us if it was submitted by mistake. New uses involving minors or sensitive information require appropriate safeguards first.
Material changes affecting your rights will be explained appropriately. Where renewed consent is required, editing this policy does not replace it. After adoption, the effective date appears at the top. Chinese and English text can be read, printed or saved from this page.