Privacy policy · MoxiVue

Who we are

MoxiVue is made and operated by Mohammad Saman, McKinney, Texas, USA ("we"). Contact: privacy@moxivue.com.

What stays on your machines

Readings, history, process and network details, alerts, terminal sessions and packet captures are recorded and kept on your own machines. We never receive them unless you use the relay, and then only in encrypted form we cannot read (below).

The relay: what it holds

The relay connects your machines when they are on different networks. Everything your machines send through it is encrypted end to end with keys that only your devices hold. The relay holds:

Encrypted data it cannot read: messages between your devices, encrypted device names and encrypted history summaries (kept 30 days at 5-minute detail and 400 days at hourly detail, so your other devices can show history while a machine is offline).
The membership record of your relay account: random device identifiers, their public keys, roles, and when keys were changed. It is signed by your devices so the relay cannot change it unnoticed.
Connection metadata it needs to route: which device identifiers are online and when they were last seen, the operating system type you report, and message sizes and times.
IP addresses, held briefly in memory for rate limiting and in short-lived server logs for security and troubleshooting.

Your sign-in account

To use the relay you sign in with a confirmed email address. We hold: your email address and whether it is confirmed; for Google or Microsoft sign-in, the provider's user identifier and the email it gives us (we ask only for openid and email); hashed sign-in sessions (we cannot use a stored session to sign in as you); and which of your device identifiers you signed in on. Signing in never gives us any key that can read your data.

We use your email address only to sign you in and for security or service notices. We do not send marketing unless you opt in, and we never sell or share it. Sign-in codes are sent through our email provider, which processes your address only to deliver the message.

This website

No cookies, trackers or analytics. The web server keeps standard access logs (IP address, time, page) for a short time for security.

Features you switch on

Some features send data elsewhere only when you configure them: alert channels you set up (email, ntfy, Telegram, SMS, WhatsApp) receive the alert text; "Look up public IP" asks a public service for your address; your own AI provider, when that feature arrives, receives what you send it. These go directly from your machine to the service you chose, under that service's terms.

How long we keep it

Sign-in codes: 10 minutes. Unused sign-in sessions: 30 days.
Encrypted history summaries: as above; removed devices lose access to everything they could read before.
Your account and membership records: until you delete them.
Server logs: a few weeks at most.

Your choices and rights

Delete your sign-in account: Settings → Account → Delete account, or moxivue account delete --yes. This removes your email, sign-in methods, sessions and device links at once.
Remove a device or leave the relay: Settings → Relay. Its keys and encrypted copies stop being usable.
Access, correction or deletion requests, and questions about this policy: privacy@moxivue.com. We answer within 30 days. Depending on where you live (for example the EU, UK or California) you may have further rights, including to complain to your data protection authority.

Security

How the encryption and keys work is described on the Security page. If you find a security problem, please tell us at security@moxivue.com.

Children

MoxiVue is not intended for children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, we update this page and its date; significant changes are announced in the app or by email before they apply.