Privacy Policy

Moonlings AI LLC (“Moonlings,” “we,” “us”) runs a small overnight crew of AI agents that research and prepare a decision-ready report for small-business owners. This policy explains what we collect, how we use it, and the choices you have. Questions: hi@moonlings.ai.

Information we collect

• Account information — your name and email, handled through our authentication provider (Clerk) when you sign up.
• Business profile — what you tell us about your business (name, location, type, goals) and any reference documents you upload, so the crew can do useful work for you.
• Connected accounts— if you choose to connect a third-party account (e.g. Gmail), the access we use is described in “Connected accounts & Google user data” below. Connecting is always optional.
• Usage & device data — product analytics and session activity (via PostHog), used to understand and improve the product. Form inputs are masked in session recordings.
• Payment information — processed by Stripe. We do not see or store full card numbers.

How we use your information

• To run your overnight jobs and produce your reports.
• To operate, secure, support, and improve the service.
• To process payments and manage your subscription.
• To send you the reports and service emails you’ve asked for.

We do not sell your personal information, and we do not use it for advertising.

How your data is processed by AI

Moonlings is built on Anthropic’s Claude. To generate your reports, the business information and connected-account content relevant to a job are sent to Anthropic for processing on your behalf, under Anthropic’s terms. This data is not used to train generalized AI models.

Connected accounts & Google user data

If you connect a Google account, Moonlings requests read-only access to your Gmail (the gmail.readonly scope) so the crew can review recent, relevant inbox activity and reflect it in your morning report. We never request the ability to send, reply to, delete, or modify anything in your account.

Moonlings’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is:

• used only to provide and improve the user-facing features you see (your reports);
• never sold, and never used for advertising;
• never read by humans, except where you give explicit consent, for security or to comply with the law, or as needed for limited operational support;
• never used to train generalized AI/ML models.

We do not retain copies of your email content beyond what is needed to produce a given report. The OAuth tokens that authorize access are held in our managed agent provider’s secure credential vault, not in our own database. You can disconnect a connected account at any time from Settings → Connections, which revokes our access going forward; you can also revoke it directly from your Google Account permissions.

Service providers

We share data only with the providers that help us run Moonlings: Anthropic (AI processing), Google (connected accounts), Stripe (payments), Clerk (authentication), Resend (email), PostHog (analytics), and our hosting/database providers (Vercel, Neon). Each processes data on our behalf under their own terms.

MCP server & API

Moonlings also offers its tools to AI assistants and agents through an MCP server (moonlings.ai/api/mcp) and a REST API. When you connect an assistant via OAuth, we receive your account identity from Clerk (user ID, name, email) — never your assistant conversations. When a tool is called, we process the inputs needed to run it (a business name, location, category, and optional address or research focus) and, for research reports, retain the generated report so you can retrieve it. We keep a credit ledger of charges, grants, and refunds for billing transparency, and per-tool usage analytics (tool name, outcome, amount charged). Payments for credit packs are processed by Stripe; we never see card details. We do not sell tool inputs or results, and we do not use them to build profiles of the businesses queried beyond delivering the result to you.

Data retention

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations. Deleting your workspace removes your business profile, reports, and connected-account records.

Security

We use industry-standard measures to protect your data, including encryption in transit and at rest and scoped, least-privilege access to third-party accounts. No method of transmission or storage is perfectly secure, but we work to protect your information and limit what we collect.

Your choices & rights

You can access or update your profile in the app, disconnect connected accounts at any time, and delete your workspace to remove your data. Depending on where you live, you may have additional rights over your personal data; contact us at hi@moonlings.aiand we’ll help.

Children

Moonlings is for businesses and is not directed to anyone under 18.

Changes to this policy

We may update this policy as the product evolves. We’ll revise the “Last updated” date above and, for material changes, give notice in the product or by email.

Contact

Moonlings AI LLC — hi@moonlings.ai