Privacy Policy

This Privacy Policy explains what personal data Monorail Inc. ("we," "us," or "our") collects through Moonwalk, our workspace, and how we use it.

1. Data we collect

• Account information: your name and email when you sign up, directly with a password or with Google. We keep passwords only in hashed form.
• Payment information: handled by Paddle, our payment processor and merchant of record, when you buy a paid plan. We never receive or store your card details — all we keep is the Paddle customer and subscription your account or base is linked to, and a record of what was charged, including tax and currency.
• Your content: the boards, tables, files, widgets, automations, chat conversations, and other content you create in a Moonwalk base.
• Members, guests, and invitations: the email address of anyone you invite to a base or to a single board, and who is a member or owner of each base.
• Activity in a base: the version history of what changes in a base, which names the member who made each change and, where one did, the agent or client that made it; a record of who opened a board, by email address, or as anonymous for someone not signed in; and the screen you last had open in each base, so an agent you connect can see where you are.
• Connected-service data: information from third-party services (such as email or calendar) that you choose to connect, accessed at your direction.
• Push notifications: if you turn on notifications for a board, the push address your browser gives us for that device.
• Messages to us: what you send us through Contact us or by email.
• Usage and device data: things like IP address, device and browser type, log data, and how you use the service, collected through cookies and similar technologies.

2. How we use data

We use your data to:

• run, maintain, and improve Moonwalk;
• create and manage your account and process payments;
• keep the service safe and prevent abuse;
• communicate with you about the service;
• comply with the law.

3. AI model training

We are not currently using your content to train our AI models, and the third-party AI providers that power Moonwalk process your inputs under terms that don't train on them. We may use your content to train our models in the future to improve Moonwalk; if we do, we'll let you know in advance, give you a way to opt out, and de-identify any content we use. We don't sell your personal data. In any case, we never use data we receive from Google APIs to train AI models — see "Google user data and Limited Use" below. Claude Code and Codex, when you use them in Moonwalk, run under your own Anthropic or OpenAI account, and that provider's terms and your settings with it decide how it uses your data.

4. Google user data and Limited Use

When you sign in with Google or connect a Google account (for example, Gmail or Google Calendar), Moonwalk's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only access your Google data to sign you in and to provide the features you direct Moonwalk to perform.
• We don't transfer that data to others except to provide those features at your direction, for security purposes, to comply with the law, or in connection with a merger or acquisition.
• We never use your Google data for advertising.
• We don't let humans read your Google data unless you give specific affirmative consent, it's needed for security or to comply with the law, or the data has been aggregated and anonymized for internal operations.
• We don't retain or use your Google data to develop, improve, or train generalized (non-personalized) AI or machine-learning models.

5. Connecting Claude, ChatGPT, and other AI clients

You can connect an outside AI client, such as Claude, ChatGPT, or a terminal client like Claude Code, to Moonwalk over the Model Context Protocol (MCP) by approving it on Moonwalk's consent screen.

• What it can access: what you can do in the Moonwalk web app, in every base you're a member of, now or later. That includes reading and changing boards, tables, widgets, automations, and files, running automations and code, and listing and requesting connections. It can't read or change passwords, tokens, or connection credentials, change a base's name or who is in it, invite anyone, or empty a trash. A token pasted into a client before sign-in replaced it still reaches only the one base it came from.
• What we keep: the client's registration (the name it gives itself and its redirect addresses), your approval, its access and refresh tokens in hashed form, and when it last made a call. Changes it makes are saved like your own, under your name with the client's name beside them, in each item's version history.
• What we don't keep: apart from the changes it makes and error reports when a call fails, we don't keep the contents of its requests. Your conversation with Claude, ChatGPT, or any other client stays with that provider, under its own privacy policy.
• Revoking: you can revoke an approved client at any time under Moonwalk MCP → Connected apps, and it loses access to every base at once. We keep a record that the approval existed. Leaving a base ends a client's access to it, and ends a pasted token from that base.

6. Claude Code and Codex inside Moonwalk

You can run Claude Code or Codex in Moonwalk's chat column with your own Claude or ChatGPT subscription.

• Where it runs: in an isolated container on our servers, one for you and that base, which reaches only that base, as you.
• Signing in: you sign in through Anthropic's or OpenAI's own sign-in. The sign-in the tool saves is kept in a folder for you and that base; we don't read it or use it for anything else.
• What goes to the provider: what you ask, and what the tool reads from the base to answer, go to Anthropic or OpenAI under your own account and its privacy policy.
• What we keep: that tool's conversations in that base, up to 50 MB for you in each base, oldest first out. When you leave a base or are removed from it, we delete your sign-ins and conversations there.

7. How we share data

We share data with:

• service providers and AI model providers that help us run Moonwalk, including Paddle, which processes payments as our merchant of record;
• third-party services you connect, at your direction;
• other members of a base you share, guests you invite to a board, and anyone a board's link is open to — when a board is public, anyone with its link, who can also run the automations its screen declares — and anyone with the link to a file in a base's Public folder;
• authorities when required by law or to protect rights and safety;
• a successor in a merger, acquisition, or similar transaction;
• anyone else you ask us to share with.

The service providers we rely on to run Moonwalk, and what each one handles:

• Composio — brokers the third-party services you connect, and holds the access credentials for those connections. API keys you type into Moonwalk are stored by us, encrypted.
• OpenRouter — routes requests from the Moonwalk chat and AI calls your automations make to the AI models that answer them. The models served through it include those from DeepSeek, Anthropic, Google, and MiniMax, and the content of a request is processed by whichever model provider serves it.
• Amazon Web Services — hosting, the isolated sandboxes where automations and agents run, and email we send, such as sign-in codes and invitations.
• Tavily — web search, when the chat or an agent looks something up.
• Paddle — payments, as our merchant of record.
• Google — sign-in with Google.
• Your browser's push service (such as Apple's, Google's, Mozilla's, or Microsoft's) — delivers a board's notifications to devices where you turned them on.

8. Keeping your data

We keep personal data for as long as we need it to run the service and to meet legal and security needs, then delete or de-identify it. A Moonwalk base whose plan ends is not deleted, and keeps what it holds.

9. Security

We use reasonable technical and organizational measures to protect your data. No system is completely secure, so we can't guarantee absolute security.

10. Your choices

You can view, change, and delete what you put into Moonwalk from within it, leave a base, and revoke outside AI clients. To access, delete, or export your data in other ways, or to delete your account, email support@moonwalk.now.

Moonwalk keeps you signed in with a cookie and remembers some preferences in your browser. It loads no analytics or advertising trackers; its checkout and our home page load Paddle.js, which Paddle uses to take payments and recover failed ones. You can turn off cookies in your browser, though some features may not work as well.

11. International transfers

We and our providers may process your data in countries other than your own. Where required, we use appropriate safeguards for those transfers.

12. Children

Moonwalk isn't intended for children under 14, and we don't knowingly collect their data. If we learn that we have, we'll delete it.

13. Changes to this policy

We may update this policy from time to time. We'll post the new version with an updated date here.

14. Contact

Questions about your privacy? Email us at support@moonwalk.now, or write to us at:

Monorail Inc.
150-29 Gongse-ro, Giheung-gu, Yongin-si, Gyeonggi-do, 17084, Republic of Korea