1. Introduction
Welcome to the Haggl app ("App") through ChatGPT, created and operated by Moojo ("Moojo," "we," "our," or "us").
We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the App within the Chat GPT interface.
Important: We have designed this App with a "privacy-first" architecture. We do not require you to create an account with us, we do not require authentication to use the App, and we do not persistently store your conversation history.
2. Information We Collect
2.1 Information We Collect Automatically
When you interact with the App through ChatGPT, we receive limited information necessary to fulfill your request:
- Query Data: The specific prompts or parameters you send through ChatGPT that invoke the App (example: "Find alternatives to Salesforce")
- Conversation Context: A brief summary of preferences, constraints, or requirements you've mentioned during your conversation with ChatGPT
- Products Under Consideration: Names of products or services you are currently evaluating, along with rationales that have been discussed
2.2 Information We Do Not Collect
We do not collect, request, or process:
- Payment card information or financial account details
- Protected health information (PHI)
- Government-issued identifiers (e.g., Social Security numbers, passport numbers)
- Authentication credentials, API keys, passwords, or MFA/OTP codes
- Precise location data (GPS coordinates, addresses)
- Full conversation history or raw chat transcripts
- Personal contact information (email, phone, address) unless you voluntarily include it in your query
3. How We Use Your Information
We use the information received through tool invocation solely for the following purposes:
3.1 Providing Recommendations
- Matching your stated purchase intent against our catalog of vendor offerings
- Generating comparative analysis and identifying relevant alternatives
- Producing rationales explaining why certain products may fit your needs
3.2 Service Improvement
- Aggregated, anonymized analytics to understand usage patterns and improve recommendation quality
- No individual user profiles are created for behavioral tracking
3.3 Operational Caching
- We temporarily cache generated analysis (such as negotiation dialog summaries) to enable retrieval during your session
- Cached data is associated with randomly generated session identifiers, not personal identifiers
4. Data Sharing and Recipients
4.1 Service Providers
We use the following categories of service providers to operate the App:
| Provider Category |
Purpose |
Data Shared |
| Cloud Infrastructure (AWS) |
Hosting, data storage, serverless compute |
Encrypted tool invocation data |
| AI Model Providers (AWS Bedrock) |
Generating analysis and recommendations |
Purchase intent and context summaries |
| Database Services (Firebase) |
Product and service catalog storage |
No user data transmitted |
4.2 No Sale of Personal Information
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4.3 Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Moojo, our users, or others.
5. Data Retention
- Session Data: Analysis results and cached dialogs are retained for up to 30 days to enable session continuity, then automatically deleted
- Debugging Data: In limited cases, select session data may be retained beyond 30 days for debugging purposes until the root cause of an issue is identified and resolved
- Aggregated Analytics: Anonymized usage statistics may be retained indefinitely for service improvement
- No Long-Term User Profiles: We do not maintain persistent profiles linking you to your queries across sessions
6. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption in transit (TLS) for all data communications
- Encryption at rest for stored data
- Access controls limiting data access to authorized personnel
- Regular security assessments and monitoring
7. Your Rights and Data Access
Because this App does not require authentication and we do not link session data to individual users, we do not maintain user-identifiable records. This means:
- We cannot retrieve, modify, or delete data on a per-user basis because we have no way to identify which session data belongs to which individual
- Session data is automatically deleted within 30 days, ensuring data is not retained indefinitely
- No user profile exists for us to provide access to
This design is intentionally privacy-protective: we simply do not have the ability to associate your queries with your identity.
If you have questions or concerns about our data practices, please contact us at privacy@moojo.id.
8. Children's Privacy
The App is designed for business users and does not explicitly target children under 13 years of age. Users between 13 and 18 years of age should have parental or guardian consent before using the App. We do not knowingly collect personal information from children under 13.
9. International Data Transfers
Your information may be processed in countries outside your residence, including within the European Union and the United States. We ensure appropriate safeguards are in place for any international transfers in compliance with applicable data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.
11. OpenAI Platform Compliance
This App operates within the ChatGPT platform and complies with OpenAI's usage policies and app developer guidelines. The App:
- Operates as a read-only tool that retrieves and analyzes information without modifying external systems
- Does not collect or process restricted data categories (PCI, PHI, government IDs, credentials)
- Minimizes data collection to only what is necessary to fulfill recommendation requests
- Does not engage in surveillance, behavioral tracking, or profiling beyond what is disclosed herein
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: