TL;DR: We collect only necessary data to provide and improve our services, store it securely in South Africa, never sell your data, and comply with GDPR & POPIA. You control your data and can contact us for any privacy concerns.
This Privacy Policy outlines how we ("we", "our", or "us") collect, use, store, and protect data from online retailers and users of our platform.
We are committed to safeguarding your privacy and ensuring compliance with applicable data protection laws,
including the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA).
1. What We Collect
From Vendors
We collect publicly available or API-accessible product data, including:
- Product links, names, images, prices, stock and other MtG related product information
- Store metadata (e.g. name, logo, domain)
- Preferences, usage logs, and feature-related data
From Users
We may collect personal information, such as:
- Name, email address, and contact details
- Account credentials (securely stored)
- Preferences, usage logs, and feature-related data
2. How We Use the Data
- Aggregate and normalize product listings from multiple retail platforms
- Power features such as search, tracking, comparison, and alerts
- Provide personalized services and customer support
- Improve our platform's performance and usability
3. Data Storage
All data is securely stored on AWS servers located in South Africa.
We follow industry-standard encryption, access control, and monitoring protocols to protect data both in
transit and at rest.
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Consent: Where you have explicitly agreed to specific uses
- Contract: To provide services you've requested
- Legitimate Interest: For core operational needs, product development, and analytics
- Legal Obligation: To comply with legal and regulatory requirements
5. Your Rights (GDPR & POPIA)
You have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate data
- Request deletion of your data (subject to legal limits)
- Object to certain types of processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority (e.g., Information Regulator – South Africa)
To exercise these rights, email us at mox-support@rouxtaccess.com
6. Data Sharing
We do not sell your data.
We may share:
- Aggregated usage data with third parties for indexing and discovery
- User data only as needed to deliver features, comply with law, or with your explicit consent
- General Statistics in our support group
7. Retention and Deletion
- Product data is retained for service continuity
- User data is retained as long as your account is active or as required by law
- Upon uninstall or account closure, data is removed within 30 days, unless retention is required
8. Contact Us
For any privacy-related questions or requests, please contact:
Email: mox-support@rouxtaccess.com