Privacy policy
Overview
This Privacy Policy describes how Besticoder ("we", "us", or "our"), sole proprietor operating the Vmoox software platform (the "Service") from Israel, processes personal data when you visit vmoox.com, use app.vmoox.com, or otherwise interact with the Service.
This document is provided for transparency and informational purposes. It does not constitute legal advice. You are responsible for understanding how your use of the Service affects privacy and data protection obligations that apply to you and your organization.
Who is responsible for your data
For account registration, billing, marketing communications, website analytics, and platform administration data, Besticoder acts as the data controller.
For content, customer records, messages, files, and other information that you or your workspace members upload, configure, or generate through the Service, you (or your organization) are typically the data controller, and we act as a data processor on your instructions. See our Data Processing Information for further detail.
Categories of personal data we collect
We may collect and process the following categories of data, depending on how you use the Service:
Account and identity data: name, email address, password hash, profile information, workspace membership, role assignments, and authentication logs.
Workspace and usage data: records, tasks, notes, configurations, automation rules, API usage, feature usage metrics, and audit events generated through your use of the platform.
Content you provide: files, messages, templates, customer data, and any other information you or your users submit to workspaces.
Billing and payment data: subscription plan, billing address, tax identifiers where provided, invoices, and payment status. Payment card details are processed by our payment provider; Vmoox does not store full card numbers.
Communications: support requests, feedback, and correspondence with our team.
Technical and security data: IP address, browser and device information, cookies, session identifiers, error logs, and security monitoring signals.
How we obtain personal data
We collect personal data directly from you when you register, subscribe, configure workspaces, contact support, or interact with our websites and applications.
We also receive data from workspace administrators who invite you, from integrated third-party services you connect (such as messaging platforms), and from our infrastructure, analytics, and payment providers as necessary to operate the Service.
You are responsible for ensuring that any personal data you upload or cause to be processed through the Service has been collected lawfully and that appropriate notices and consents have been obtained where required.
Purposes and legal bases for processing
We process personal data to provide, operate, maintain, and improve the Service; authenticate users; manage subscriptions and billing; deliver transactional communications; provide customer support; detect and prevent fraud, abuse, and security incidents; comply with legal obligations; and, where permitted and with consent where required, analyze usage to improve product quality.
Depending on your location and the nature of processing, our legal bases may include performance of a contract, legitimate interests (such as securing the platform and improving features), compliance with legal obligations, and consent where applicable. Where we rely on consent, you may withdraw it at any time without affecting processing based on other lawful grounds.
Data retention
We retain personal data for as long as necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Account and billing records are generally retained while your subscription is active and for a reasonable period thereafter as required for accounting, tax, and legal compliance. Workspace content retention depends on your configuration, subscription status, and deletion requests.
You are responsible for exporting or backing up data you wish to preserve. Vmoox is not responsible for retaining data beyond periods required by law or our documented retention practices.
Security and your responsibilities
We implement technical and organizational measures designed to help protect personal data processed through the Service. However, no online service can guarantee absolute security.
You are solely responsible for the security, confidentiality, integrity, and lawful use of data within your workspaces, including access control, user permissions, credential management, backup strategy, compliance with applicable privacy laws, and secure configuration of integrations. Vmoox does not assume responsibility for incidents arising from weak passwords, misconfigured roles, unauthorized sharing, failure to revoke access, or inadequate backups on your side.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority.
To exercise rights relating to account or billing data controlled by Vmoox, contact support@vmoox.com. Requests relating to workspace content are generally handled by your workspace administrator or organization, acting as data controller.
We may need to verify your identity before responding and may decline requests where an exception applies under applicable law.
Children and sensitive data
The Service is not directed to children under the age required by applicable law to consent to data processing without parental authorization. You must not use the Service to process children's personal data unless you have established a lawful basis and appropriate safeguards.
You are responsible for determining whether special categories of personal data or other regulated information may be processed through the Service and for implementing controls required by law. Vmoox does not provide legal or compliance advice regarding your data categories or industries.
Third-party services and integrations
The Service may enable connections to third-party platforms, including messaging providers such as WhatsApp and other external APIs. Those third parties operate under their own terms and privacy policies, and Vmoox does not control their processing practices.
When you enable an integration, data may be transmitted between Vmoox and the third party according to your configuration. You are responsible for reviewing third-party terms, obtaining required consents, and ensuring lawful use of integrated services.
WhatsApp and business messaging storage
Vmoox offers a WhatsApp Web-style experience inside your workspace CRM so teams can reply to customers and link conversations to lead records. This is a business management feature — not a secure personal messaging app.
When you connect WhatsApp to Vmoox, message content and metadata are stored in your workspace database on our platform. Messages are not protected by WhatsApp end-to-end encryption once stored in Vmoox. Moox and other workspace features may read linked message history to summarize threads, suggest follow-ups, or automate workflows according to your configuration.
Do not use Vmoox to store personal, private, medical, financial, or other sensitive non-business information. Use it only for business conversations and operational records your organization chooses to manage in a CRM.
We implement reasonable security measures but do not guarantee protection against data leaks, unauthorized access, misconfiguration, or third-party actions (including Meta/WhatsApp account limits or suspensions). The WhatsApp connection uses an unofficial client layer, not Meta's official WhatsApp Business Cloud API. You accept these limitations when you connect a line.
Vmoox is not liable for losses arising from stored message content, integration outages, or third-party enforcement actions, except where applicable law requires otherwise.
Email and business mailbox storage
Vmoox offers a shared Email app inside your workspace CRM so teams can connect business mailboxes, sync threads, compose replies, and link conversations to lead records. This is a business management feature — not a secure personal email client.
When you connect a mailbox to Vmoox, email content and metadata are stored in your workspace database on our platform. Messages synced for team visibility are not end-to-end encrypted inside Vmoox. Moox and other workspace features may read linked thread history to summarize, draft replies, or automate workflows according to your configuration.
Do not use Vmoox to store personal, private, medical, financial, or other sensitive non-business information. Use connected mailboxes only for business correspondence your organization chooses to manage in a CRM.
We implement reasonable security measures but do not guarantee protection against data leaks, unauthorized access, misconfiguration, or mail provider restrictions. You accept these limitations when you connect a mailbox.
Vmoox is not liable for losses arising from stored email content, sync outages, or third-party provider actions, except where applicable law requires otherwise.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our practices. The "last updated" date shown on our website will indicate when revisions take effect.
Where required by law, we will provide additional notice of material changes. Continued use of the Service after an update constitutes acceptance of the revised policy, except where applicable law requires otherwise.
Contact us
For privacy-related questions, requests, or complaints regarding data controlled by Besticoder, contact:
Besticoder Email: support@vmoox.com
For billing-related privacy inquiries tied to payment records, you may also contact billing@vmoox.com.