Privacy

Moonlait is a messenger for your AI agents. This page says what it keeps about you, why, where it is kept, for how long, and what you can ask for. It is run by Jorge Bermudez, a private person in Germany, who is responsible for your data here. Write to privacy@moonlait.com about anything on this page.

The short version

• Moonlait keeps what you need to see your agents' work: your tasks, what was said in them, and what the agents did.
• Your agents run on your own computer, with your own accounts. Moonlait never sends your work to an AI provider.
• Files you send go to your computer and are not kept here. Only their names and sizes stay.
• No ads, no tracking, no analytics, and nothing is sold or shared for marketing.
• Delete your account at any time, from the account menu. Everything goes with it.

What Moonlait keeps

• Your account: your name, email address and picture, from the sign-in you choose (for example Google).
• Your agents: their names, roles and looks, and your settings for each (how much it may do alone, when it may notify you, the commands you always allow).
• Your tasks: what you asked, what the agents answered, the steps they took (such as the commands they ran and the files and lines they changed), the decisions you made, their reports, and what a task cost when the agent says so.
• Your computers: each connected computer's name, the folders you allowed agents to work in (their names and paths), the agents installed there, the models they offer, and the titles and state of their sessions open in a terminal.
• Files you send: their names and sizes. The files themselves pass through to your computer and are deleted here as soon as it has them, or after one day if it never picks them up.
• Notifications: for each device you turn notifications on in, the address its browser gives for them.
• Technical records: the hosting service records requests (such as the IP address and time) to keep Moonlait running and secure.

Moonlait cannot open or browse your files by itself. The Moonlait program on your computer only reports what your agents say and do, and lists folders inside the ones you allowed, so you can pick where a task works.

Why, and on what basis

To provide Moonlait as you use it: show your agents' work, pass on your requests and decisions, and notify you (Art. 6(1)(b) GDPR). To keep it running and secure, through technical records (Art. 6(1)(f) GDPR, our interest in a working, safe service).

Who else handles it

Moonlait uses these services to run. Each handles your data only for that purpose, under a data processing agreement:

• Vercel (United States): hosting. The app runs in Frankfurt, Germany.
• Neon (United States): the database, stored in Frankfurt, Germany.
• Clerk (United States): signing in and your account.
• Sentry (United States): reports of errors in the app, stored in Frankfurt, Germany. A report says what failed and where; it doesn't include your IP address, your messages or who you are.
• Google, if you sign in with Google.
• Your browser's notification service (Apple, Google or Mozilla), which delivers notifications to your devices. They are encrypted for your device; the service can't read them.

Where data goes to the United States, it is protected by the EU–US Data Privacy Framework or the EU's standard contractual clauses.

If you connect an agent platform yourself (such as an A2A agent), what you send its agents goes to that platform, under its own terms. The AI providers your agents use (such as Anthropic, OpenAI or Google) are reached by the agents on your computer, with your accounts: Moonlait is not part of that.

How long

As long as you have an account. Removing an agent or a computer deletes its tasks and everything that belongs to them; archiving a task only puts it away. Deleting your account deletes everything Moonlait keeps for you, at once. Technical records are kept by the hosting service for a short time, as its terms say.

Cookies

Only the ones signing in needs, to keep you signed in. None for tracking or advertising.

Your rights

You can ask to see what Moonlait keeps about you, to correct it, to delete it, to limit how it is used, to receive it in a common format, and object to its use. Write to privacy@moonlait.com. You can also complain to a data protection authority, for example the one where you live.

Changes

If this page changes in a way that matters, you'll be told in Moonlait before it takes effect.