Privacy policy
Plain English, no surprises. The short version: we collect what the service needs to run, we sell nothing, and we never train models on your content.
Effective date: 2026-07-05
Service: Moamao (https://moamao.com)
Contact: hello@moamao.com
1. What we collect
We collect only what the service needs to operate, and each item below exists for a reason you can point at:
- Contact email. If you email us, we keep your address and message so we can reply. That is its only use.
- API account data. When you create an account: your email, name (if you provide one), authentication credentials, workspace settings, and the provider keys you choose to store (encrypted — see the security page).
- Run traces. Prompts, model drafts, critiques, and final answers are stored per your retention settings so you can replay and audit runs. You can shorten retention or set it to zero, in which case traces are discarded once the response is delivered.
- Operational records. Run counts, error rates, and billing metadata needed to meter usage and keep the service healthy.
2. What we never do
- We do not sell your data, share it with data brokers, or trade it for anything.
- We do not train models — ours or anyone else's — on your prompts, outputs, or traces.
- We do not read your traces except when you explicitly ask us to (for example, in a support conversation about a specific run).
3. Providers you bring
When a run uses your own provider keys (BYOK), your prompts go directly from our orchestrator to those providers under your agreements with them. Their handling of that data is governed by their terms and privacy policies, not this one.
4. Processors
We use a small number of subprocessors to run the service:
- Hosting and infrastructure — the cloud provider that runs the orchestrator and stores encrypted data.
- Payments — at commercial launch, a payment processor will handle billing details; we never store full card numbers ourselves.
A named, current subprocessor list will be published on this page before commercial launch and updated when it changes.
5. Cookies
The marketing site sets no cookies beyond what is strictly essential (such as a session cookie once you sign in to the dashboard). There is no advertising, no cross-site tracking, and no third-party analytics cookies.
6. Retention and deletion
Run traces follow your retention settings. Account data is kept while your account is active and deleted within 30 days of a verified deletion request, except records we must keep for legal or accounting reasons.
7. Your rights
You can request access to, correction of, export of, or deletion of your personal data at any time by writing to hello@moamao.com. We respond to every verified request, and we don't make you jump through hoops to exercise rights the law already gives you.
8. Changes to this policy
If this policy changes in a way that matters, we'll update the effective date above and note the change on the changelog. We won't quietly weaken it.