Privacy Policy

This Privacy Policy explains what personal data Monorail Inc. ("we," "us," or "our") collects through Moonwalk, our workspace, and Moonwalk Agent, our personal AI assistant (together, "Moonwalk"), and how we use it.

1. Data we collect

• Account information: your name and email when you sign up, directly or with Google.
• Payment information: for Moonwalk Agent, handled by Paddle, our payment processor and merchant of record, when you buy a paid plan. We never receive or store your card details — all we keep is the Paddle customer your account is linked to, and a record of what was charged.
• Your content: the boards, tables, files, widgets, automations, chat conversations, and other content you create in a Moonwalk base, and the messages, files, memory, and other content you and your agents create or use in Moonwalk Agent.
• Invitations: the email address of anyone you invite to a base.
• Connected-service data: information from third-party services (such as email or calendar) that you choose to connect, accessed at your direction.
• Usage and device data: things like IP address, device and browser type, log data, and how you use the service, collected through cookies and similar technologies.

2. How we use data

We use your data to:

• run, maintain, and improve Moonwalk;
• create and manage your account and process payments;
• keep the service safe and prevent abuse;
• communicate with you about the service;
• comply with the law.

3. AI model training

We are not currently using your content to train our AI models, and the third-party AI providers that power Moonwalk process your inputs under terms that don't train on them. We may use your content to train our models in the future to improve Moonwalk; if we do, we'll let you know in advance, give you a way to opt out, and de-identify any content we use. We don't sell your personal data. In any case, we never use data we receive from Google APIs to train AI models — see "Google user data and Limited Use" below.

4. Google user data and Limited Use

When you sign in with Google or connect a Google account (for example, Gmail or Google Calendar), Moonwalk's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only access your Google data to sign you in and to provide the features you direct Moonwalk to perform.
• We don't transfer that data to others except to provide those features at your direction, for security purposes, to comply with the law, or in connection with a merger or acquisition.
• We never use your Google data for advertising.
• We don't let humans read your Google data unless you give specific affirmative consent, it's needed for security or to comply with the law, or the data has been aggregated and anonymized for internal operations.
• We don't retain or use your Google data to develop, improve, or train generalized (non-personalized) AI or machine-learning models.

5. Connecting Claude, ChatGPT, and other AI clients

You can connect an outside AI client, such as Claude or ChatGPT, to Moonwalk over the Model Context Protocol (MCP), either by approving it on Moonwalk's consent screen or by pasting a token into a terminal client.

• What it can access: what you can do in the Moonwalk web app. An approved client reaches every base you're a member of, now or later; a pasted token reaches the one base it came from. That includes reading and changing boards, tables, widgets, automations, and files, running automations and code, and listing and requesting connections. It can't read or change passwords, tokens, or connection credentials, invite or remove members, or empty a trash.
• What we keep: the client's registration (the name it gives itself and its redirect addresses), your approval, its access and refresh tokens in hashed form, and when it last made a call. Changes it makes are saved like your own, under your name with the client's name beside them, in each item's version history.
• What we don't keep: apart from the changes it makes and error reports when a call fails, we don't keep the contents of its requests. Your conversation with Claude, ChatGPT, or any other client stays with that provider, under its own privacy policy.
• Revoking: you can revoke an approved client at any time under Agents → Outside agents, and it loses access at once. We keep a record that the approval existed. A pasted token stops working when you rotate it.

6. How we share data

We share data with:

• service providers and AI model providers that help us run Moonwalk, including Paddle, which processes payments as our merchant of record;
• third-party services you connect, at your direction;
• other members of a base you share, and anyone with the link to a board you publish;
• authorities when required by law or to protect rights and safety;
• a successor in a merger, acquisition, or similar transaction;
• anyone else you ask us to share with.

The service providers we rely on to run Moonwalk, and what each one handles:

• Composio — brokers the third-party services you connect, and holds the access credentials for those connections. API keys you type into Moonwalk are stored by us, encrypted.
• OpenRouter — routes requests from the Moonwalk chat and your agents to the AI models that answer them. The models served through it include those from Anthropic, Google, DeepSeek and MiniMax, and the content of a request is processed by whichever model serves it.
• Amazon Web Services — hosting, the isolated sandbox where agents and automations run, and email we send, such as invitations.
• Tavily — web search, when the chat or an agent looks something up.
• Paddle — payments for Moonwalk Agent, as our merchant of record.

7. Keeping your data

We keep personal data for as long as we need it to run the service and to meet legal and security needs, then delete or de-identify it.

8. Security

We use reasonable technical and organizational measures to protect your data. No system is completely secure, so we can't guarantee absolute security.

9. Your choices

You can access, update, delete, or export your data from your settings or by emailing support@moonwalk.now. You can also turn off cookies in your browser, though some features may not work as well.

10. International transfers

We and our providers may process your data in countries other than your own. Where required, we use appropriate safeguards for those transfers.

11. Children

Moonwalk isn't intended for children under 14, and we don't knowingly collect their data. If we learn that we have, we'll delete it.

12. Changes to this policy

We may update this policy from time to time. We'll post the new version with an updated date here.

13. Contact

Questions about your privacy? Email us at support@moonwalk.now, or write to us at:

Monorail Inc.
150-29 Gongse-ro, Giheung-gu, Yongin-si, Gyeonggi-do, 17084, Republic of Korea