Privacy

Draft, for review before launch.

The short version

Your AI reads your data where it already does. We never connect to your inbox, calendar or accounts. What reaches us is the answer your AI gives, plus enough about where it came from for us to check it's real, and any receipts you choose to forward.

If you join the waitlist

We keep your email, which AI you use, whether you'd forward receipts, who invited you, and your place in line. Research teams and advertisers who join their waitlists also give us their name, company, website and budget. We use this to let you in and to email you about your spot. To leave the waitlist, email us and we'll delete your entry.

What we get from your AI

• Its answer to each question, exactly as given.
• For each email or event it counted: the date, the sender's domain (like uber.com), an amount if there is one, and the email's Message-ID. We keep a keyed hash of the Message-ID, never the ID itself.
• Now and then, the headers of one email it counted (sender, recipient, date, subject and the sender's signature). We check the signature, keep the result, and discard the headers.

Receipts you forward

If you turn receipts on, you forward emails from a few senders you pick, like Uber or Amazon, to your private Moonlit address. We only see what you forward. We read each one once: we check the sender's signature, answer receipt questions from it, keep the answer, and delete the email. Turn it off by removing the forwarding filter.

What we get from you

• Your email address, and what you told us in onboarding: which AI you use, what it can see, and your country.
• Answers you give yourself, when your AI checks a question with you.
• Where to send your money: the email for your PayPal account or your gift card.
• To stop fake accounts: the device and network address you signed up from.

ID verification

Everyone verifies their ID once, with Didit, because we're required to know who we pay (anti-money-laundering and know-your-customer rules). Didit checks your document and a selfie under its own privacy policy. We keep the result, and a keyed fingerprint of your document so that one person can only have one account. We don't keep copies of your documents.

Who sees your answers

Research teams get combined results, like “412 answers, median 4”. They never get your name, your email, or which answer was yours. We don't sell your data. Offers from advertisers, when they come, are opt-in, reviewed by a person, and always marked as ads.

Personal questions

Your AI is told to ask you before answering anything about health, money details, sex, religion, politics, children or other people, and to skip anything you'd rather not share.

Cookies

Only the cookies the site needs to work: one that recognises your device, to stop fake accounts; one that keeps you signed in; one that remembers your spot on the waitlist; and one that remembers who invited you. No advertising or tracking cookies, and no analytics.

Services we use

To run Moonlit we use Google Cloud (our servers), Cloudflare (keeps the site fast and safe), Resend (sends our emails), Didit (ID checks) and, when you cash out, the provider that sends your money. They handle your data only to do that job for us.

Your choices

Disconnect your AI or make a new key at any time from your dashboard. To delete your account and everything we hold, email us from the address you signed up with, at [email protected].