Moamao

Privacy policy

Plain English, no surprises: we collect what the service needs to run, and — for runs on Moamao Cloud — your runs are proprietary data we use to train our own models and may license or sell. BYOK runs are never used this way, and you can opt out any time in settings.

Effective date: 2026-07-05
Service: Moamao (https://moamao.com)
Contact: hello@moamao.com

1. What we collect

We collect only what the service needs to operate, and each item below exists for a reason you can point at:

  • Contact email. If you email us, we keep your address and message so we can reply. That is its only use.
  • API account data. When you create an account: your email, name (if you provide one), authentication credentials, workspace settings, and the provider keys you choose to store (encrypted — see the security page).
  • Run traces.For runs on Moamao Cloud, your prompts, the model drafts and critiques, and the final answers are stored as proprietary data so you can replay and audit runs and so we can improve our models and build products from them (see “How we use and monetize your content” below). You can shorten retention, and on plans with zero-retention mode set it to zero, in which case traces are discarded once the response is delivered and are not used, licensed, or sold.
  • Operational records. Run counts, error rates, and billing metadata needed to meter usage and keep the service healthy.

2. How we use and monetize your content

Runs processed by Moamao Cloud — your prompts, conversation history, the panel's drafts and critiques, and the final answers — are proprietary data. We use them to operate and improve the service, to train and improve our own models, and to build, license, and sell products, datasets, and insights derived from them. We may license or sell this content and derived data — in raw, derived, or aggregated form — to third parties. This applies to Moamao Cloud runs on an account; it does not apply to BYOK runs, which go directly to the providers whose keys you bring.

Accounts are included by default. You can opt out of the sale, sharing, and use-for-training of your future runs at any time — use the opt-out control in your dashboard settings, email hello@moamao.com, or use zero-retention mode where your plan offers it. Opting out stops future use; content already trained into a model or delivered to a third party can't be pulled back, but we stop using your new runs right away.

What we still never do:

  • We never sell or expose the plaintext of your stored provider keys, your password, or your payment card numbers.
  • Under BYOK we don't receive your prompts at all — they go straight to the providers whose keys you bring, and nothing about a BYOK run is stored, licensed, or sold by us.
  • We don't read your traces except for the uses above, or when you explicitly ask us to (for example, a support conversation about a specific run).

3. Providers you bring

When a run uses your own provider keys (BYOK), your prompts go directly from our orchestrator to those providers under your agreements with them. Their handling of that data is governed by their terms and privacy policies, not this one.

4. Processors

We use a small number of subprocessors to run the service:

  • Hosting and infrastructure — the cloud provider that runs the orchestrator and stores encrypted data.
  • Payments — at commercial launch, a payment processor will handle billing details; we never store full card numbers ourselves.

A named, current subprocessor list will be published on this page before commercial launch and updated when it changes.

5. Cookies

The marketing site sets no cookies beyond what is strictly essential (such as a session cookie once you sign in to the dashboard). There is no advertising, no cross-site tracking, and no third-party analytics cookies.

6. Retention and deletion

Run traces follow your retention settings. Account data is kept while your account is active and deleted within 30 days of a verified deletion request, except records we must keep for legal or accounting reasons.

7. Your rights

You can request access to, correction of, export of, or deletion of your personal data at any time by writing to hello@moamao.com. We respond to every verified request, and we don't make you jump through hoops to exercise rights the law already gives you.

8. Controller and governing law

The data controller's legal entity and this policy's governing law will be specified here before commercial launch — the same open item noted in the terms. Until then, hello@moamao.com reaches the people directly responsible for your data.

9. Changes to this policy

If this policy changes in a way that matters, we'll update the effective date above and note the change on the changelog. We won't quietly weaken it.