Legal
Privacy policy
Effective May 30, 2026.
What we collect
- Account data: name, email, profile photo, role.
- Submission data: company filings, documents, financials you upload.
- Usage data: pages viewed, features used, session metadata.
- Payment metadata via Stripe (we never store full card numbers).
How we use it
To deliver scoring, analyst review, notifications, and product improvement. We never sell personal data. We share data with sub-processors only as required to run the service (Lovable Cloud, Stripe, Resend, Lovable AI Gateway).
Your rights (GDPR / CCPA)
- Access — export a full copy from Account → Privacy.
- Erasure — delete your account and all associated data from the same page.
- Portability — exports ship as JSON.
- Object / restrict — email reach@moonrig.io.
Cookies
We use one essential cookie for auth. Analytics cookies load only after explicit consent via the banner.
Retention
Submission data is retained while your account is active. On deletion we purge within 30 days (backup rotation excepted).