1. General Provisions

MOROKA respects the privacy rights of its users and is committed to transparently explaining what personal data we collect, how we use it, with whom we may share it, and what rights individuals have regarding their data.

This Privacy Policy applies to:

• the MOROKA website and its subdomains;
• MOROKA web applications, administrative dashboards, and mobile interfaces;
• website builder and hosting services;
• AI employees and AI managers;
• MOROKA Pixel and analytics tools;
• the MOROKA Telegram Assistant;
• widgets, forms, chats, and other components embedded on customer websites;
• customer support, marketing communications, and other related MOROKA services,

collectively referred to as the “Services.”

In this Privacy Policy, “MOROKA,” “we,” “us,” or “our” refers to:

DREAMSOFT, LLC
5830 E 2ND ST, STE 7000 #11164
CASPER, WY 82609, USA

By using the Services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy does not replace separate consent where such consent is required by applicable law.

2. Who This Privacy Policy Applies To

To properly explain our responsibilities, we distinguish between the following categories of individuals and organizations that interact with MOROKA.

2.1. Visitor

A person who visits the MOROKA website, views our materials, contacts us, or otherwise interacts with the Services without creating an account.

2.2. User

A person who creates a MOROKA account, joins an organization’s workspace, or uses the Services on behalf of an organization.

2.3. Customer

An individual, sole proprietor, company, or other organization that enters into an agreement with MOROKA, purchases a subscription, or uses the Services to create or manage websites, AI employees, knowledge bases, leads, or other business processes.

2.4. End User

A person who visits a Customer’s website, communicates with an AI employee, submits a form, leaves a request, places an order, or otherwise interacts with a website or service created by a Customer using MOROKA.

3. Roles of MOROKA and the Customer

MOROKA’s role depends on the type of personal data being processed and the purpose for which it is processed.

3.1. MOROKA as a Data Controller

MOROKA acts as a data controller when we independently determine the purposes and means of processing personal data.

This includes, among other things, the processing of personal data for:

• account registration and management;
• subscription and payment management;
• communication with Users;
• customer support and request handling;
• security, fraud prevention, and abuse prevention;
• technical diagnostics;
• analysis of how MOROKA is used;
• compliance with legal and financial obligations;
• improvement and development of our Services.

3.2. Customer as a Data Controller

A Customer generally acts as the data controller for personal data collected or processed through:

• a website created using MOROKA;
• forms and lead-generation tools;
• widgets;
• AI managers and other AI employees;
• online chats;
• knowledge bases;
• CRM systems and integrations;
• analytics tools;
• MOROKA Pixel;
• Telegram and other communication channels.

The Customer determines:

• what personal data is collected;
• the purposes for which it is used;
• the lawful basis for processing;
• how long the data is retained;
• who is given access to the data;
• what notices and consent mechanisms are shown to End Users.

The Customer is responsible for maintaining its own accurate and up-to-date privacy policy and for complying with all privacy and data protection laws applicable to its activities.

3.3. MOROKA as a Data Processor

When MOROKA processes End User data on behalf of a Customer, MOROKA generally acts as a data processor or service provider.

In this capacity, we:

• process personal data according to the Customer’s settings and documented instructions;
• use personal data to provide the requested Services;
• apply appropriate security measures;
• engage subprocessors in accordance with applicable contracts and laws;
• assist Customers in responding to lawful requests from End Users.

Additional terms relating to such processing may be included in the agreement with the Customer and in a separate Data Processing Addendum, or DPA.

3.4. Technical Data of End Users

In certain circumstances, MOROKA may independently determine the purposes of processing a limited amount of technical data relating to End Users, including for:

• protecting the Services;
• preventing attacks, bots, spam, and fraud;
• diagnosing technical errors;
• measuring resource usage;
• maintaining the stability of our infrastructure;
• generating aggregated and de-identified statistics.

In such cases, MOROKA may act as an independent controller of the relevant technical data.

4. Personal Data We Collect

The specific personal data we collect depends on how you interact with and use MOROKA.

4.1. Account Information

We may collect:

• first and last name;
• email address;
• telephone number;
• profile photo or avatar;
• password in a protected form;
• account identifiers;
• language and regional settings;
• job title;
• company name;
• role and permissions within a workspace;
• account creation date;
• login dates and login history.

We do not store passwords in plain text.

4.2. Organization and Workspace Information

We may process:

• organization name;
• company details;
• business address;
• domain names;
• logos and brand materials;
• team information;
• user roles and permissions;
• subscription settings;
• feature usage history;
• website and AI employee configurations.

4.3. Payment and Financial Information

When paid Services are purchased, we may process:

• selected subscription plan;
• payment amount and currency;
• payment status;
• transaction date;
• billing country;
• payment identifier;
• tax and accounting information;
• partially masked payment method information.

Full payment card details are generally processed directly by third-party payment providers. MOROKA does not store full card numbers or CVV security codes unless otherwise expressly stated during the payment process.

4.4. Customer Content

We may store and process content that a Customer creates, uploads, imports, or publishes through MOROKA, including:

• website page text;
• articles and news;
• product and service descriptions;
• images, videos, and documents;
• uploaded files;
• contact information;
• SEO data;
• website structure;
• domain settings;
• forms;
• message templates;
• knowledge bases;
• internal instructions;
• business rules;
• information about a company, its products, services, and employees.

4.5. AI Employee Data

When AI features are used, we may process:

• prompts and instructions submitted by Users;
• messages sent to an AI employee;
• responses and other content generated by AI;
• knowledge bases;
• AI employee goals;
• communication style and rules;
• autonomy settings;
• task execution history;
• proposed changes;
• previews;
• approvals or rejections of changes;
• verification results;
• technical logs relating to AI operations;
• quality evaluations and feedback.

These data may include personal data if a User or End User includes personal information in a prompt, message, document, or knowledge base.

4.6. End User Messages and Lead Information

The following data may be processed through a Customer’s widgets, forms, and AI managers:

• name;
• email address;
• telephone number;
• message content;
• questions;
• form responses;
• consultation requests;
• selected products or services;
• conversation history;
• date and time of interaction;
• lead status;
• other information voluntarily provided to the Customer.

The Customer determines the purpose and lawful basis for collecting and using this information.

4.7. MOROKA Pixel and Analytics Data

MOROKA Pixel and other technical components may collect:

• IP address;
• approximate location derived from an IP address;
• device type;
• operating system;
• browser type and version;
• browser language;
• screen resolution;
• referring source;
• pages visited;
• clicks and other events;
• date, time, and duration of visits;
• advertising campaign parameters;
• session identifiers;
• cookie identifiers;
• conversion events;
• form submissions or lead-generation events;
• interactions with an AI manager;
• technical errors and performance information.

MOROKA Pixel may help a Customer compare overall website performance with the performance of visitors who interacted with AI employees.

The Customer is responsible for obtaining any consent required for the use of non-essential analytics or advertising technologies.

4.8. Telegram and Other Integration Data

If you connect Telegram or another third-party service, we may receive:

• account identifier;
• username;
• profile name;
• profile image, where available;
• chat identifier;
• commands;
• messages;
• files and images;
• authorization information;
• information about the connected integration.

MOROKA uses this information to execute commands, manage websites, interact with AI employees, send messages, and operate the relevant integration.

4.9. Support and Communication Data

When you contact us, we may process:

• contact details;
• the content of your request;
• attached files;
• screenshots;
• technical information;
• correspondence history;
• customer support ratings or feedback.

4.10. Technical Logs

We may automatically collect:

• IP addresses;
• request dates and times;
• requested URLs and routes;
• response codes;
• browser and device information;
• session identifiers;
• login logs;
• publication logs;
• change history;
• error records;
• information about features used;
• infrastructure load and performance data.

4.11. Data From Third-Party Sources

We may receive personal data from:

• authentication providers;
• payment systems;
• domain service providers;
• Telegram and other integrations;
• analytics services;
• business partners;
• security and fraud-prevention services;
• publicly available sources, where permitted by law.

5. How We Use Personal Data

We may use personal data for the following purposes.

5.1. Providing the Services

We use data to:

• create and maintain User accounts;
• create, store, and publish websites;
• operate AI employees;
• process requests and messages;
• operate widgets, forms, and analytics;
• synchronize knowledge bases;
• execute commands through Telegram;
• connect third-party integrations;
• provide technical support.

5.2. Managing Payments and Subscriptions

We use data to:

• process payments;
• issue invoices;
• manage plans, usage limits, and subscriptions;
• prevent fraud;
• maintain accounting and tax records.

5.3. Maintaining Security

We use data to:

• authenticate Users;
• protect accounts;
• detect suspicious activity;
• prevent bots, spam, attacks, and abuse;
• investigate violations;
• maintain infrastructure stability;
• enforce our agreements, rules, and policies.

5.4. Improving MOROKA

We use data to:

• analyze feature usage;
• diagnose technical issues;
• improve user interfaces;
• develop new functionality;
• evaluate AI performance;
• improve reliability and performance;
• generate aggregated statistics.

5.5. Communications

We use data to:

• send service-related communications;
• provide notices regarding payments, security, and account changes;
• respond to inquiries;
• notify Users of changes to our terms or policies;
• send marketing communications where permitted by law.

You may opt out of marketing communications at any time. However, we may continue to send important operational, service, security, and legal communications.

5.6. Compliance With Legal Obligations

We may use personal data to:

• comply with applicable laws and lawful requests;
• protect the rights of MOROKA, Customers, and other persons;
• resolve disputes;
• enforce agreements;
• respond to court orders and requests from competent authorities.

6. Legal Bases for Processing

Depending on the circumstances, MOROKA may process personal data on the following legal bases.

6.1. Performance of a Contract

We may process personal data when necessary to:

• create and maintain an account;
• provide the requested Services;
• manage a subscription;
• fulfill a User’s request;
• provide customer support.

6.2. Legitimate Interests

We may process personal data when necessary to:

• protect the Services;
• prevent fraud;
• maintain service stability;
• diagnose errors;
• improve the product;
• protect our legal rights;
• understand how MOROKA is used.

We rely on legitimate interests only where those interests are not overridden by the rights and freedoms of the affected individual.

6.3. Consent

We may rely on consent for:

• marketing communications;
• non-essential cookies;
• advertising or advanced analytics technologies;
• certain integrations;
• other activities where consent is required by law.

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6.4. Legal Obligation

We may process personal data where necessary to comply with accounting, tax, financial, regulatory, or other legal obligations.

6.5. Other Lawful Bases

In exceptional cases, we may rely on other lawful bases recognized under applicable law, including the protection of vital interests or the performance of a task carried out in the public interest.

7. Artificial Intelligence and Automated Processing

7.1. How AI Uses Data

MOROKA’s AI features may analyze:

• User prompts;
• website content;
• knowledge bases;
• chat history;
• instructions and business rules;
• information about products and services;
• data necessary to complete a specific task.

Processing may involve MOROKA’s own technologies and third-party AI model providers.

7.2. Data Shared With AI Providers

Data necessary to generate a response or perform a task may be transferred to AI providers and other subprocessors.

We aim to transfer only the data reasonably necessary to provide the relevant functionality and to use contractual and technical safeguards to protect that data.

A list of key subprocessors may be published on a separate MOROKA webpage.

7.3. Training AI Models

MOROKA does not use Customer Content, private knowledge bases, End User messages, or personal data to train publicly available or general-purpose AI models without:

• the Customer’s explicit consent;
• a separate contractual arrangement; or
• prior effective de-identification of the data.

We may use aggregated or de-identified technical information to evaluate and improve the Services.

7.4. Human Oversight

AI employees may:

• create content;
• propose changes;
• answer questions;
• classify requests;
• collect leads;
• perform automated actions based on Customer settings.

The Customer determines the level of autonomy granted to an AI employee and is responsible for maintaining appropriate oversight of its actions.

MOROKA is not intended to make solely automated decisions that produce legal or similarly significant effects for individuals unless such functionality has been expressly agreed upon, appropriately configured, and supported by a valid lawful basis.

7.5. Confidential and Sensitive Data

Users should not submit the following information to AI features:

• medical information;
• biometric information;
• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• information about a person’s sex life or sexual orientation;
• criminal conviction information;
• full payment card details;
• passwords;
• secret keys;
• other highly sensitive information,

unless the processing of such information is expressly supported by MOROKA, is based on an appropriate lawful basis, and is governed by separate contractual terms where necessary.

8. Cookies and Similar Technologies

We may use:

• cookies;
• browser local storage;
• pixels;
• software development kits;
• device identifiers;
• server logs;
• other similar technologies.

These technologies may be used for:

• authentication;
• saving preferences;
• security;
• load balancing;
• analytics;
• performance measurement;
• fraud prevention;
• marketing, where permitted by law.

Essential cookies may be used without separate consent where they are necessary for the operation of the Services.

Non-essential analytics or marketing cookies are used in accordance with applicable consent settings and legal requirements.

Additional information may be provided in a separate MOROKA Cookie Policy.

9. How We Share Personal Data

We do not sell personal data in exchange for monetary compensation.

We may share personal data with the following categories of recipients.

9.1. Infrastructure Providers

These may include:

• cloud service providers;
• hosting providers;
• database providers;
• content delivery networks;
• storage providers;
• backup service providers.

9.2. AI Providers

These may include providers of:

• language models;
• content generation tools;
• classification systems;
• search and retrieval tools;
• data analysis tools;
• content verification services.

9.3. Payment and Financial Providers

These may include:

• payment processors;
• banks;
• invoicing providers;
• accounting providers;
• tax service providers.

9.4. Communication Providers

These may include providers of:

• email services;
• SMS services;
• push notifications;
• Telegram;
• other communication channels.

9.5. Authentication and Integration Providers

These may include providers of:

• third-party authentication;
• CRM systems;
• domain services;
• analytics tools;
• other integrations connected by a User.

9.6. Security and Analytics Providers

These may include providers of:

• monitoring;
• logging;
• fraud prevention;
• attack detection;
• error diagnostics;
• performance measurement.

9.7. Professional Advisers

We may share data with:

• lawyers;
• auditors;
• accountants;
• insurers;
• other professional advisers subject to contractual or professional confidentiality obligations.

9.8. Government and Competent Authorities

We may disclose personal data where reasonably necessary to:

• comply with applicable law;
• respond to a legally binding request;
• comply with a court order;
• protect the safety of individuals;
• investigate fraud or unlawful activity;
• protect the rights of MOROKA or other persons.

9.9. Corporate Transactions

In connection with a merger, acquisition, investment, reorganization, sale of assets, or change of control, personal data may be transferred to a potential or actual successor, subject to appropriate confidentiality and data protection safeguards.

10. Third-Party Services and Integrations

Users may connect third-party services to MOROKA.

By connecting an integration, the User authorizes MOROKA to:

• transfer necessary data to the relevant third-party service;
• receive permitted data from that service;
• store tokens or credentials required to operate the integration;
• perform actions on the User’s behalf within the permissions granted.

A third-party service may process personal data under its own terms of service and privacy policy.

MOROKA does not control the independent data-processing practices of such third-party services.

A User may disconnect an integration through MOROKA’s settings or through the relevant third-party service.

11. International Data Transfers

MOROKA, our service providers, and our subprocessors may operate in different countries. As a result, personal data may be transferred to and processed outside the country in which the relevant individual resides.

Those countries may have privacy and data protection laws that differ from the laws of the individual’s country.

Where required by applicable law, we use appropriate data-transfer mechanisms, including:

• adequacy decisions;
• standard contractual clauses;
• contractual confidentiality and security obligations;
• supplementary technical and organizational safeguards;
• other legally recognized transfer mechanisms.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

When determining an appropriate retention period, we consider:

• the type and amount of data;
• the sensitivity of the data;
• the purpose of processing;
• the duration of the contractual relationship;
• account status;
• the risk of unauthorized use;
• legal, tax, and accounting requirements;
• the need to resolve disputes;
• the need to protect MOROKA’s or another party’s rights.

After an account is deleted, some data may remain temporarily:

• in backup systems;
• in security logs;
• in financial and accounting records;
• where retention is necessary to comply with applicable law or protect legal rights.

Data stored in backups is deleted or overwritten according to our backup retention cycles.

Aggregated and properly de-identified data may be retained indefinitely where it can no longer reasonably be used to identify an individual.

13. Data Security

MOROKA uses reasonable technical and organizational safeguards designed to protect personal data.

Depending on the Service, these safeguards may include:

• encryption of data in transit;
• access controls;
• role and permission separation;
• protected storage of account credentials;
• logging of critical actions;
• backups;
• error and incident monitoring;
• infrastructure protection;
• limitations on employee and contractor access;
• incident-response procedures;
• service-provider security reviews.

No data transmission or storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute elimination of all security risks.

Users are also responsible for:

• using strong passwords;
• protecting their devices;
• properly configuring access permissions;
• securing connected integrations;
• promptly removing access for former team members;
• not disclosing passwords, tokens, secret keys, or credentials.

If a data security incident occurs and applicable law requires notification, MOROKA will notify affected Customers, individuals, or competent authorities as legally required.

14. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• confirm whether we process your personal data;
• access your personal data;
• receive a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict processing;
• object to processing;
• withdraw consent;
• receive data in a portable format;
• opt out of certain advertising uses of personal data;
• request review of certain automated decisions;
• submit a complaint to a competent data protection authority;
• appeal a denial of a privacy request, where required by law;
• not be discriminated against for exercising your privacy rights.

Some rights may be limited where continued processing or retention is necessary to:

• comply with the law;
• perform a contract;
• protect the rights of another person;
• prevent fraud;
• resolve a dispute;
• maintain security;
• establish, exercise, or defend legal claims.

To protect personal data, we may ask you to verify your identity before fulfilling a request. This helps prevent personal data from being disclosed, changed, or deleted at the request of an unauthorized person.

We respond to privacy requests within the timeframes required by applicable law.

15. Requests From End Users of Customer Websites

If you visited a website created using MOROKA and want to:

• receive a copy of your personal data;
• correct your personal data;
• delete a submission or request;
• withdraw your consent;
• understand how your data is being used,

you should first contact the owner or operator of the relevant website.

The Customer generally determines the purposes and means of processing your personal data.

If the Customer submits a verified request to MOROKA, we will provide reasonable technical assistance in accordance with our agreement and applicable law.

If you are unable to identify or contact the website owner, you may contact MOROKA and provide:

• the address of the relevant website;
• the date of your interaction;
• the contact information you may have submitted;
• a description of your request.

16. Children’s Privacy

The MOROKA Services are not intended for independent use by children under the age of 16.

A person who creates an account or purchases a paid subscription must:

• be legally able to enter into a binding agreement; or
• have the necessary authority to act on behalf of an organization.

We do not knowingly collect personal data from children below the minimum age permitted by applicable law without appropriate consent from a parent or legal guardian.

Customers whose websites or services are directed toward children are independently responsible for:

• obtaining legally required consent;
• providing appropriate privacy notices;
• properly configuring forms and AI employees;
• complying with all applicable children’s privacy laws.

If you believe that a child has unlawfully provided personal data to MOROKA, please contact us.

17. Sale of Personal Data and Targeted Advertising

MOROKA does not sell personal data in exchange for monetary compensation.

If, in the future, we use personal data in a manner that constitutes a “sale,” “sharing,” or use for cross-context behavioral advertising under the laws of a particular jurisdiction, we will:

• update this Privacy Policy;
• provide any required notices;
• offer an accessible opt-out mechanism;
• recognize legally binding privacy preference signals where required by law.

MOROKA does not knowingly sell personal data relating to children.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically due to:

• changes in applicable law;
• the development of MOROKA;
• the introduction of new features;
• changes to our service providers;
• changes to our data-processing practices;
• security and transparency improvements.

When we update this Privacy Policy, we will revise the “Last Updated” date at the top of the document.

If changes are material, we may also notify Users:

• through the MOROKA interface;
• by email;
• through an account notification;
• by another appropriate method.

Previous versions of this Privacy Policy may be retained in an archive.

19. Applicable Data Protection Laws

This Privacy Policy is intended to operate in accordance with the laws applicable to the relevant processing activity, including, where applicable:

• the General Data Protection Regulation of the European Union, or GDPR;
• applicable United Kingdom data protection laws;
• the California Consumer Privacy Act and California Privacy Rights Act;
• other applicable United States state privacy laws;
• the Law of Ukraine “On Personal Data Protection”;
• other applicable privacy and personal data protection laws.

The application of a particular law depends on the location of the individual, the Customer, MOROKA, the nature of the Services, and other legally relevant circumstances.

20. Contact Information

For questions regarding privacy, personal data processing, or the exercise of your privacy rights, please contact:

DREAMSOFT, LLC
5830 E 2ND ST, STE 7000 #11164
CASPER, WY 82609, USA

Email: contact@moroka.ai

We recommend using “Privacy Request” or “Запит щодо персональних даних” as the subject line of your message.

If you are located in the European Union, the European Economic Area, the United Kingdom, Ukraine, or another jurisdiction that provides such a right, you may also submit a complaint to the competent data protection authority.