Trust & Security

Moonwalk is built so that your data stays yours. This page sets out who operates Moonwalk, what we can and cannot see, and how your data is handled.

1. The company behind Moonwalk

• Legal entity: Monorail Inc.
• Business registration number: 682-81-03943
• Registered address: B01-K201, 150-29 Gongse-ro, Giheung-gu, Yongin-si, Gyeonggi-do, Republic of Korea
• Chief Executive: Beomsoo Kim

2. Signing in

Signing in gives us your name and email, and nothing more. We don't receive ongoing access to your Google account by signing in, and our sign-in app is verified by Google.

3. Connecting your services

Moonwalk does not hold the keys to your connected accounts. Connections are brokered by Composio, a specialist provider that owns the access grant and handles renewal — which is why the consent screen you approve names Composio rather than Moonwalk. We store only a reference to that connection, never the credentials themselves.

What that means in practice:

• A connection belongs to one base, not to your whole account. Connecting a service in one base doesn't give any other base access to it.
• An API key you type in is stored encrypted, and Moonwalk never shows it back, not even to you.
• You can disconnect at any time from the base's Connections screen, or revoke access with the provider directly — which works whether or not we cooperate.

4. How your data is held

• In transit: everything between you and Moonwalk travels over TLS.
• At rest: sensitive values, such as API keys you type into a base, are individually encrypted, and the disk holding the database is encrypted.
• Our access: no one on our team opens your data without your explicit permission, and access to production is logged.
• Isolation: automations and code run in isolated sandboxes, and Claude Code or Codex runs in a container of its own for you and that base, which reaches only that base.

5. Deleting your account

To delete your account, or to export your data, email support@moonwalk.now. Deletion is real rather than a deactivation: your connections are removed and your data is deleted. It's irreversible.

6. Who else is involved

Running Moonwalk means a small number of other companies are involved: Composio brokers your connections, Paddle handles payments as merchant of record, and AI model providers process your conversations in order to respond to them. The full list, and what each one handles, is in our Privacy Policy.

We don't sell your data, we don't use it for advertising, and we don't train models on it. Data from Google APIs additionally falls under Google's Limited Use requirements.

7. Found a security problem?

Please tell us at support@moonwalk.now with "security" in the subject. We'll acknowledge you, we won't pursue good-faith research, and we'll credit you if you'd like.