Privacy Policy

Data we process

• Account: email, optional display name, handle, role.
• Idea content you submit, and indices we compute from it.
• Minimal request metadata (IP, user-agent) for abuse prevention.

Sub-processors

• Vercel — application hosting.
• Supabase — database, auth, storage.
• Anthropic — reasoning model (enterprise / zero-retention mode in production).
• Google Gemini — image generation, where applicable.
• Stripe — payments, where applicable.
• Resend — transactional email.
• Cloudflare — DNS, WAF, bot management.

Retention

Deletion requests soft-delete for 30 days, then hard-delete. Index history is retained for audit; see the Trust Layer in our Security Architecture.

Your rights

EU / UK residents: access, rectification, erasure, portability, objection. Contact privacy@moatdefender.com (alias to be created).