Privacy policy

The data controller for the website and the hosted service is:

Valerio Massimiani
Business address and P.IVA are being finalised.
[email protected]

If you self-host moatbox, the data in your install never reaches us. You are the controller for it, and this policy does not apply to it.

• Your account. Your email address, and your name and avatar if you sign in with GitHub. Login links we email you and a session cookie keep you signed in. We need these to run your account.
• Billing. Stripe processes payments. We keep your Stripe customer ID, your plan and your invoices; your card details never reach our servers. We need this to bill you and to meet tax law.
• What happens in your boxes. The files, databases and apps in your spaces, agent transcripts, the timeline of tool calls, and your approval decisions. We keep the timeline for your plan's retention (30 days, 90 days or one year) and everything else until you delete the space or your account.
• Keys and tokens you add. Model keys and integration tokens are stored on our servers outside the sandbox and used only for the calls you or your agents make.
• Notifications. Push subscription endpoints for your devices, and the Slack or Discord channels you connect for approvals.
• Usage. Daily counters of space-hours and boxes, to apply your plan's limits and bill overage.
• Website visits. Cookieless analytics that count page views without building a profile of you. We use them to understand which pages help.
• Emails you send us. We keep them to answer and follow up.

The legal basis is the contract with you for running the service, our legal obligations for invoices and tax, and our legitimate interest for cookieless analytics and for keeping the service secure.

The website sets no tracking cookies. The app sets one session cookie so you stay signed in. Because nothing tracks you, there is no cookie banner.

• Hetzner Online GmbH hosts our servers in Germany and Finland.
• Stripe processes payments and may transfer data outside the EU under the European Commission's standard contractual clauses.
• GitHub, only if you sign in with GitHub.
• Slack and Discord, only for the channels you connect.
• Our cookieless website analytics provider.

Transactional email, such as login links and approval requests, is sent from our own mail server. We do not sell your data or share it for advertising.

We delete your account data 30 days after you close your account, except invoices and the records tax law makes us keep, which Italian law requires for ten years.

Under the GDPR you can ask to see, correct, export or delete your data, restrict or object to how we use it, and withdraw consent where we rely on it. Write to [email protected] and we will answer within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.

Every hosted box is its own microVM, agents run in a sandbox inside it, and your keys stay outside the sandbox. Connections are encrypted. No system is perfect: if something goes wrong that affects your data, we will tell you.

moatbox is not meant for anyone under 16.

If we change this policy in a way that matters, we will email account holders before the change takes effect.