Privacy policy

Who we are

Frequency AI Ltd (“we”, “us”, “our”) operates Moji. We are registered in England and Wales (company number 16990328), at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

We are the data controller for your account and contact data. For the job data we process for you, you are the controller and we act as your processor under a data processing agreement. This policy explains what we collect, why and how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our approach

Moji runs the agent swarms you define and records what happens in each job. We collect only what we need to run your swarms, keep the record you ask for and bill for the Service. We do not train models on your content, and we do not sell it.

What we collect

Account and contact data

When you set up an account, we collect your work email, name and organisation, and the swarm settings you give us. We use this to run your account, support you and contact you about the Service.

Job data

When Moji runs a swarm, it records the state, cost and approvals of each job. It also records each step’s result and checks, and which person or agent did each step and when. When Moji runs on your infrastructure, this record stays there. When we host Moji for your team, we process the record for you as your processor:

• We encrypt job data in transit
• We keep job data for the period set in your agreement and delete it at the end of that period
• We read job content only to run your swarms, to keep the record you asked for, or when you ask us for support
• We do not use job data to train models, and we do not sell or share it beyond delivering the Service

Your agents

Your agents work on machines you control, under the logins you give them.

Usage and billing metadata

To price jobs and bill for the Service, we record metadata about each step. The metadata records the tokens a step used, its model and provider, how long it took and what it cost. It does not include what the agent read or wrote.

Pilots

We run each early-access pilot under the same processor terms as production, with the retention period set in your agreement. There is no separate data-gathering step before a pilot. We delete pilot data at the end of the pilot unless you ask us to keep it.

Invite requests and invites

When you request an invite or contact us through the website, we store your email and any description of work you send, only so we can get back to you.

A team on Moji can invite a colleague or another company. To do that, the team gives us that person’s work email or the company’s email domain. We store it only so the invited person can start when they enter their email on our website.

We keep both for at most 24 months, and we do not share them with third parties.

What we do not do

• We do not train models on your content
• We do not sell, rent or trade your personal data or your content
• We do not use advertising networks, tracking pixels or advertising cookies
• We do not read your content except to run your swarms, keep the record you asked for, or support you when you ask

Lawful bases for processing

• We rely on our contract with you to process your account data and job data, because we need them to provide the Service.
• We rely on our legitimate interest to use usage and billing metadata to operate, secure and improve the Service, and we apply safeguards that limit the effect on your rights.
• We rely on your consent to store your email and the description of work you send with an early-access application or to join our list. You can withdraw that consent at any time.

Controller and processor roles

Where your job data contains personal data, you are the controller and we are your processor. We process that data only on your documented instructions, as our data processing agreement sets out. You remain responsible for the lawful basis on which you collected it and for the notices you give to the people it concerns.

Data sharing

Your agents send work to the AI providers you configure, under your own accounts with them. We also work with a small number of infrastructure providers who help us run the Service, under data processing agreements. We may disclose data when the law, a regulator or valid legal process requires it.

International transfers

Your data may be processed outside the United Kingdom, including in the United States, depending on the providers and infrastructure involved. Where that happens, we protect it with safeguards such as Standard Contractual Clauses or an equivalent mechanism recognised under UK GDPR.

Data retention

• We keep account and contact data for the life of your account.
• We keep job data we host for the period set in your agreement.
• We keep usage and billing metadata as long as we need it to bill, support and secure the Service.
• We delete pilot data at the end of the pilot unless you ask us to keep it.
• We keep early-access applications for at most 24 months.
• When you close your account, we permanently remove all personal data we control within 30 days, except records the law requires us to keep, such as invoices.

Your rights

Under UK GDPR, you have the right to:

• Access your personal data and get a copy
• Correct personal data that is inaccurate or incomplete
• Have your personal data erased
• Restrict how we process your personal data
• Receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time where we rely on it

For account and contact data we control, email privacy@mojisystems.com, and we will reply within one month as UK GDPR requires. When a request concerns personal data in job data we process for a customer, that customer is the controller, and we help them handle your request.

If you are not satisfied with our reply, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Our website uses the essential cookies and local storage it needs to work, and you cannot turn these off. We do not use advertising cookies. If we add analytics, we will use it only with your consent. A banner will ask you to accept or reject analytics. Our consent controls keep non-essential storage off until you choose, and the site works the same either way.

Children

Moji is a service for businesses and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you think a child under 16 has given us personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We tell you about material changes by email or with a notice in the Service at least 14 days before they take effect. If you keep using Moji after that, you accept the updated policy.

Contact

Email privacy@mojisystems.com with any privacy question.

Frequency AI Ltd
71–75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom