Security Policy

At MOGU we process data from travel agencies and from those agencies' customers. This page explains, plainly, where that data is hosted, who is responsible for what, and how you can exercise your rights. If you need more detail, write to us at support@moguplatform.com.

Where data is hosted

The MOGU platform is hosted on Google Cloud Platform, in the europe-west1 (Belgium) region. The platform and its database are hosted within the European Union. MOGU AI features rely on third-party AI model providers; if your agency has specific data-residency requirements for those features, write to us and we will review them with you.

Roles in data processing

• The agency is the data controller for the personal data of its customers and contacts (travellers, quote requesters, etc.) that it enters or collects through MOGU.
• MOGU acts as the data processor: it processes that data on the agency's behalf, following its instructions and solely to provide the contracted service.

Data subject requests (access, rectification, erasure)

When an agency's customer wants to exercise their rights over their personal data, they should contact the agency, which is the data controller. The agency can handle most of these requests directly in MOGU and, when it needs our help, it notifies us and we act on its instructions.

Documentation for agencies

For agencies that need it in their procurement or renewal processes, we provide:

• A data processing agreement (DPA) under Article 28 of the GDPR.
• MOGU's GDPR compliance certificate.

Request them through your MOGU contact or by writing to support@moguplatform.com.

More information

See also our Privacy Policy and our Cookie Policy.