Trust & Security

Moonwalk is built so that your data stays yours. This page sets out who operates Moonwalk, what we can and cannot see, and how your data is handled.

1. The company behind Moonwalk

• Legal entity: Monorail Inc.
• Business registration number: 682-81-03943
• Registered address: B01-K201, 150-29 Gongse-ro, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea
• Chief Executive: Beomsoo Kim

2. Signing in

Signing in gives us your name and email, and nothing more. We don't receive ongoing access to your Google account by signing in, and our sign-in app is verified by Google.

3. Connecting your services

Moonwalk does not hold the keys to your connected accounts. Connections are brokered by Composio, a specialist provider that owns the access grant and handles renewal — which is why the consent screen you approve names Composio rather than Moonwalk. We store only a reference to that connection, never the credentials themselves.

What that means in practice:

• You choose the access level — read, write, or full — when you connect, and it decides which capabilities the agent is given at all. A read-level connection has no ability to send or change anything.
• A connection belongs to one agent, not to your whole account. Connecting a service to one agent doesn't give any other agent access to it.
• You can disconnect at any time from the connections screen, or revoke access with the provider directly — which works whether or not we cooperate.

4. How your data is held

• In transit: everything between you and Moonwalk travels over TLS.
• At rest: sensitive values, such as credentials you save into an agent, are individually encrypted, and the disk holding the database is encrypted.
• Our access: no one on our team opens your data without your explicit permission, and access to production is logged.
• Isolation: each agent's long-term memory and its work sandbox are separate from every other agent's, so nothing is pooled across users. Memory runs on our own servers as part of Moonwalk itself, not on a third-party service.

5. Deleting your account

You can delete your account from inside Moonwalk, and it's a real deletion rather than a deactivation: connected accounts are removed, each agent's memory is purged, and your data is deleted. It's irreversible. To export your data instead, email support@moonwalk.now.

6. Who else is involved

Running Moonwalk means a small number of other companies are involved: Composio brokers your connections, Paddle handles payments as merchant of record, and AI model providers process your conversations in order to respond to them. The full list, and what each one handles, is in our Privacy Policy.

We don't sell your data, we don't use it for advertising, and we don't train models on it. Data from Google APIs additionally falls under Google's Limited Use requirements.

7. Found a security problem?

Please tell us at support@moonwalk.now with "security" in the subject. We'll acknowledge you, we won't pursue good-faith research, and we'll credit you if you'd like.