No public evidenceMOCA and GDPR
CertReports found no public GDPR evidence for MOCA as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 9 Mar 2019
- Scope
- We process contact data (name, title, address, telephone number, email address), company name, user name, log data, IP address, location data, device / browser type data, and user images received from our customers (or third parties with information about our customers) to provide services through our web application (Touchplan) and to perform analytics. We process contact data, IP addresses and location data from our inbound leads (or third parties parties with information about our leads) to perform marketing, sales reach out and analytics. We disclose such personal information to payment processors, analytics service providers, hosting service providers and staff augmentation / contract personnel in connection with the processing mentioned above.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | MOCA Systems, Inc.: Inactive | Live pagesha256 e41b85ffd8 |
- Kind
- listing
- Scope
- Moca is a location-based SaaS platform for mobile apps that processes personal data of mobile users on behalf of the businesses (owners of those mobile apps) in reliance on data privacy frameworks for specific purposes. Some of the purposes for which Moca processes personal data include: 1. Providing Location-based Services: Moca processes personal data to provide location-based services to its users, such as location-based notifications, targeted advertising, and personalized content based on the user's location. 2. User Authentication and Account Management: Moca processes personal data for user authentication and account management purposes, such as user registration, login, and account recovery. 3. User Analytics and Insights: Moca processes personal data for user analytics and insights, such as tracking user engagement, behavior, and preferences to improve its services and provide personalized experiences to its users. 4. Data Retention and Deletion: Moca processes personal data for data retention and deletion purposes, such as storing user data for the duration of the user's account and deleting the data upon the user's request or when it is no longer needed for the purposes for which it was collected. The types of personal data processed by Moca may include: - User Identifiers: such as name, email address, username, and password. - Location Data: such as GPS coordinates, and IP address. - Device Information: such as device type, operating system, browser type and preferred language. - Usage Data: such as app usage, clicks, and interactions. Moca acting as Data Processor on behalf of its customer (Data Controller) may disclose personal information to third parties (Data Sub-Processors) in connection with its provision of location-based services and other purposes, such as: - Service Providers: such as cloud hosting providers and analytics providers. - Business Partners: such as app developers, customer support service providers - Regulatory Authorities: such as law enforcement agencies, data protection authorities, and government authorities. Moca takes steps to ensure that any third parties to which it discloses personal information have appropriate safeguards in place to protect the personal information and comply with applicable data protection laws and regulations.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Moca Technologies LLC: Inactive | Live pagesha256 92464cbcec |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is MOCA GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Real estate and property category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Real estate and property vendor has GDPR evidence in the index yet.