MogDock Privacy Policy

MogDock Privacy Policy

1. Scope and identity

This Privacy Policy explains how Upstage Creations LLC, 42075 Remington Ave, Suite 109,
Temecula, California 92590 ("Upstage," "MogDock," "we," or "us") handles personal
data in the MogDock website, application, support, and related services.

MogDock is available to businesses and individuals worldwide where payment processing
and applicable law permit. You must be at least 18 years old to use MogDock.

2. Personal data we handle

Depending on how MogDock is used, we may handle:

- account and contact data, such as name, email address, workspace name, country or
  region, role, authentication state, and communication preferences;
- Customer Content submitted to a workspace, including business, order, inventory,
  customer, supplier, document, support, and integration data;
- billing and transaction data, such as the selected offer, billed seat quantity,
  subscription status, invoices, payment status, tax information, and payment-provider
  references; payment-card details are handled through the payment processor's secure
  interface rather than stored as ordinary MogDock form data;
- integration data received from or sent to services that a customer connects;
- support and legal records, including ticket messages and attachments, consent records,
  privacy requests, and communications; and
- technical and security data, such as IP address, browser or device information,
  timestamps, request and authentication records, and safe operational diagnostics.

3. Sources

We receive personal data directly from users, from workspace administrators, through use
of MogDock, from services a customer chooses to connect, from payment and communication
providers, and from security or compliance processes.

4. How we use personal data

We use personal data to:

- create, authenticate, administer, and secure accounts and workspaces;
- provide requested product features and connected-service workflows;
- process subscriptions, invoices, taxes, payment status, and account recovery;
- provide documentation and in-app support tickets;
- prevent abuse, fraud, security incidents, and unauthorized access;
- maintain, troubleshoot, and improve service reliability; and
- comply with legal obligations and enforce agreements.

We do not sell personal data. We do not use Customer Content to train MogDock-owned
artificial-intelligence models.

5. Sharing and service providers

We disclose personal data only to service providers operationally needed to deliver,
secure, support, or bill for MogDock; when directed by the customer through a connected
service; with the customer's authorization; or when required by applicable law.

Service providers may include hosting, storage, payment, transactional communication,
monitoring, security, and customer-selected integration providers. They may process data
only for the relevant operational purpose and subject to applicable contractual and
legal safeguards. For current subprocessor information, contact support@mogdock.com.

6. Cookies and similar technologies

MogDock uses browser storage and cookies needed for authentication, security, session
continuity, and application preferences. Any future analytics, advertising, or other
non-essential tracking requires separate review and an update to this policy before use.

7. Security

We use administrative, technical, and organizational safeguards designed to protect
personal data, including access controls, encrypted network transport, protected storage,
credential protections, tenant boundaries, and audit or security records where
appropriate. No security measure eliminates all risk.

8. Retention, cancellation, and deletion

We keep personal data only for the operational purpose for which it was collected and as
required for security, legal, billing, accounting, and fraud-prevention obligations.

A canceled account is ordinarily recoverable for 30 days after its paid access ends,
unless an earlier verified deletion request is completed. We complete a verified deletion
request within 30 days. Encrypted backups expire within 90 days rather than being altered
in place. Legal, billing, security, and fraud-prevention records are retained only as long
as legally necessary.

Deletion from active systems and expiration from backups are separate processes. Data
required for a legal hold, billing record, security investigation, or fraud prevention
may be restricted and retained for the legally necessary period.

9. International processing

MogDock and its operational service providers may process personal data in countries
other than the user's country. We use protections required by applicable law for such
processing. Customer is responsible for ensuring that its use of MogDock and transfer of
Customer Content is lawful for its circumstances.

10. Privacy choices and requests

Depending on applicable law, a person may have rights to request access, correction,
deletion, restriction, portability, or information about how personal data is used. A
workspace administrator may also manage data and user access within that workspace.

Send a privacy request to support@mogdock.com. We will verify the requester's identity
and authority before acting. If a request concerns Customer Content controlled by a
MogDock customer, we may direct the requester to that customer or assist the customer as
required by law and the Data Processing Addendum.

11. Children's privacy

MogDock is not intended for anyone under 18, and we do not knowingly offer accounts to
children.

12. Changes

The published legal page identifies the current version and effective date. We will
provide notice or request new acceptance when required by law or appropriate to the
nature of a material change.

13. Contact

Upstage Creations LLC
42075 Remington Ave, Suite 109
Temecula, CA 92590
support@mogdock.com