Privacy Policy

We collect the following categories of information:

Account information. When you sign up, we collect your name, email address, business name, website URL, and (if you choose a paid plan) billing details handled by Stripe. Because we support magic-link signup, we also store short-lived setup tokens and verification records.

Content and configuration. Anything you connect to or create within the Service — keywords, brand voice, competitor lists, uploaded documents, generated articles, CMS credentials, and settings.

Integration data. When you connect a third-party platform (for example WordPress, Webflow, Framer, Wix, Shopify, Google Search Console, Stripe), we receive API keys, OAuth tokens, site identifiers, and the content required to publish or retrieve articles on your behalf.

Usage data. Pages viewed, actions taken, feature usage, IP address, browser type, device data, approximate location (derived from IP), referrer, and timestamps. We use first-party analytics and privacy-respecting product analytics providers.

Cookies and similar technologies. We use essential cookies for authentication, and limited non-essential cookies for analytics. You can control cookies through your browser settings.

Support communications. If you email us or chat with support, we retain those messages so we can respond and improve the Service.

We use your information to:

• Operate the Service — including generating SEO content, brand documents, backlink recommendations, and publishing to your CMS;
• Authenticate users, send magic links, maintain sessions, and secure accounts against fraud and abuse;
• Process payments, manage subscriptions, trials, and refunds through Stripe;
• Communicate with you about updates, new features, onboarding, and transactional notifications;
• Improve the Service, troubleshoot issues, and build aggregated, de-identified analytics;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use Your Content to train third-party foundation models.

The Service sends prompts, context, and related content to third-party AI providers (such as OpenAI, Anthropic, and Google) so they can return the Output that powers the Service. These providers act as our processors under data processing agreements that prohibit them from using your content to train their general-purpose models. Inputs and outputs may be retained by these providers for a limited time for abuse monitoring, in line with their own policies.

When you connect an integration, you authorize Moonrank to read from and write to that platform on your behalf. We store only the credentials required to keep the integration working, encrypted at rest. Examples of services we integrate with include:

• WordPress, Webflow, Framer, Wix, Shopify — for publishing;
• Google Search Console and analytics providers — for visibility data;
• Stripe — for payments;
• Email and notification providers — for transactional email and magic-link delivery.

You can revoke any integration at any time from Settings → Integrations in your dashboard, which removes the stored credentials from our systems.

We share information only as follows:

• Service providers. Infrastructure, database, email, analytics, AI, and payment processors that help us operate the Service under written agreements;
• At your direction. When you publish Output to a connected CMS or social platform, that content is sent to the destination you chose;
• Legal and safety. To comply with law, respond to lawful requests, enforce our Terms, or protect rights, safety, and property;
• Business transfers. If Moonrank is involved in a merger, acquisition, or asset sale, your information may be transferred, subject to this Privacy Policy;
• Aggregated or de-identified data that cannot reasonably identify you.

We keep account and content data for as long as your account is active. If you cancel, we typically retain data for up to 90 days to allow reactivation, then delete or anonymize it, unless a longer retention period is required for legal, tax, or security reasons. You may request earlier deletion at hello@moonrank.ai.

We apply industry-standard safeguards to protect your data: TLS in transit, encryption at rest for sensitive fields such as integration credentials, bcrypt-hashed API keys, role-based access for our team, and routine backups. No method of transmission or storage is perfectly secure, but we work hard to keep your data safe and will notify you without undue delay if a breach affects your personal information.

Depending on where you live (for example, in the EEA, UK, California, or similar jurisdictions), you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and associated data;
• Export your data in a portable format;
• Object to or restrict certain processing;
• Opt out of marketing emails (transactional emails continue while your account is active);
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@moonrank.ai. We will respond within the time frame required by applicable law.

Moonrank is operated from, and stores data in, regions that may be different from where you live. When we transfer personal data across borders — for example, to our infrastructure providers in the United States or to AI providers — we rely on safeguards such as Standard Contractual Clauses or equivalent mechanisms recognized by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice before they take effect. The “Effective” date at the top reflects the latest version.

Questions or requests about this Privacy Policy? Email hello@moonrank.ai.