Privacy Policy

MoonCanvas ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use MoonCanvas at mooncanvas.ai.

1. Information We Collect

Account information

When you create an account, we collect your email address and a hashed password. If you sign in with a third-party provider (Google, GitHub), we receive only the profile details that provider shares.

Payment information

Payments are processed by Stripe. We never store your full card number or CVV. We receive only a Stripe customer ID and the last four digits of your card for display purposes.

Content you upload

Images and audio files you upload to generate videos are transmitted to our inference infrastructure for processing and deleted within 24 hours of generation. We do not retain copies of your source files.

Usage data

We log generation requests (prompt text, model, resolution, duration, credit cost, timestamp) to your account for your history and for billing accuracy. We also collect standard server logs (IP address, browser, device type) for security and performance monitoring.

2. How We Use Your Information

• To provide and improve the MoonCanvas service
• To process payments and manage your credit balance
• To send transactional emails (receipts, generation notifications, account alerts)
• To detect and prevent fraud or abuse
• To analyze usage patterns in aggregate to improve our models and infrastructure

3. Your Content Is Not Used to Train Our Models

We do not use your prompts, uploaded images, audio, or generated videos to train or fine-tune any AI models — ours or third-party providers'. Your creative work belongs to you.

4. Third-Party Services

We use the following third-party services, each with their own privacy policy:

• Supabase — authentication and database (EU region)
• Stripe — payment processing
• Cloudflare — CDN, DDoS protection, and edge delivery

We do not sell your data to advertisers or data brokers.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax purposes, retained for 7 years).

6. Cookies

We use only essential cookies required for authentication (session token) and security (CSRF token). We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, email us at privacy@mooncanvas.ai. We will respond within 30 days.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

MoonCanvas is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by displaying a notice in the product. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions about this policy? Reach us at privacy@mooncanvas.ai.