Bucket 1
What you put in
The data you explicitly entered into Moonshot.
People, accounts, campaign data, queries you asked, files you uploaded, notes you wrote.
The Vault · Privacy as a product
Your data. Visible. Deletable. Yours.
Most software gives you a buried export wizard or a nuclear delete-my-account button. Moonshot gives you The Vault — a live inventory of everything we keep on you, with controls that match how you actually think about your data.
Everything we keep
Five buckets. No hidden one.
Every piece of data Moonshot holds falls into one of these. If we ever add a sixth, it goes here too.
Bucket 2
What we noticed
The data Moonshot derived, computed, or observed. The stuff most apps hide.
Drift alerts, scores, revenue pulse calculations, behavioral telemetry, AI conversation history.
Bucket 3
What's in your browser
Local state Moonshot left on your device. Almost nobody surfaces this.
localStorage, sessionStorage, cookies, IndexedDB caches (including your File Vault).
Bucket 4
What integrations stored
Data third-party connections cached on our side when you connected them.
Stripe customer cache, Gmail metadata, Calendar token state, anything an integration left behind.
Bucket 5
What you saved
Snapshots you explicitly preserved. These survive even when their source data is deleted.
Campaign rollup percentages, weekly scorecards, MedBay results, the files in your File Vault.
What you can do
See it. Delete it. Save what matters.
See it
Every piece of data, in plain English. No JSON dump, no enterprise export wizard — a real live inventory organized by the categories above.
Delete it
Anything you want, granular. Each delete shows a clear disclaimer about what it affects — cosmetic, resets a feature, breaks a feature, or requires sign-in again.
Save what matters
Before deleting raw data, you can preserve a snapshot — like the rollup percentage of a campaign even if you delete every data point. Snapshots survive deletion of their source and are receipts of a moment, not live projections.
The Vault opens with sign-in. Same data, your controls.
Privacy Policy
Privacy Policy — Moonshot OS
Last updated: April 8, 2026
Moonshot OS (“we”, “our”, “us”) is designed to help users understand and act on their work activity. The strongest current connected workflow in Moonshot is the read-only Gmail + Google Calendar operating loop. The Vault (above) is the product surface for the commitments documented here.
1. What data we access
When you connect Google in the core Moonshot workflow, we request the minimum Gmail and Google Calendar access needed to generate the operating read and Weekly Operating Review.
- Gmail (to detect conversations, follow-ups, and activity signals)
- Google Calendar (to detect meetings and scheduling activity)
- By default, Moonshot reads Gmail and Calendar activity in read-only mode.
- Some separate, user-initiated execution flows may ask for additional Gmail send permission later. That is not part of the default connected workflow.
- Moonshot never sends or modifies emails in the background.
- We do not create, edit, or delete calendar events.
2. How we use your data
We use this data to:
- detect missed follow-ups, stalled conversations, and activity patterns
- generate a Weekly Operating Review
- recommend next steps and workflows
- keep live issues, proof loops, and operating history visible inside Moonshot OS
- Your data is used only to provide these features inside Moonshot OS.
3. Data storage and security
Access tokens are securely stored and encrypted.
Google user data is processed to generate product insights such as Weekly Operating Reviews, detected activity patterns, and next-step recommendations.
We retain Google-connected data only for as long as it is needed to provide the product experience, operate the service, and support account-level controls such as disconnect and deletion.
- We use industry-standard security practices to protect your data.
- We do not claim that any system is perfectly secure, but we work to limit access and reduce unnecessary retention.
4. Data sharing
We do not sell Google user data or other personal data.
We do not use Google user data for advertising or marketing.
We do not share Google user data with third parties except where needed to provide the service, comply with law, or protect against abuse, fraud, or security issues.
5. User control
You can:
- disconnect your Google account at any time to stop future syncing
- delete stored Google data from Moonshot — handled through The Vault when signed in
- delete all stored Moonshot workspace data for your account
- preserve a snapshot (the rollup, the percentage, the receipt) before deleting underlying data
- revoke Moonshot OS access from your Google account security settings
6. Google API Services User Data
Moonshot OS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is accessed only as needed to provide Moonshot OS core functionality.
Moonshot’s current core Google workflow is Gmail + Google Calendar in read-only mode.
Gmail data is primarily accessed to detect communication patterns, follow-ups, and activity signals. If Moonshot ever requests Gmail send access in a separate execution flow, that happens only after an explicit user-initiated reconnect and confirmation step.
Google Calendar data is accessed in read-only form to detect meetings and scheduling patterns.
- Moonshot’s default Google connection is read-only.
- Any later send-capable Gmail flow requires an explicit user action and review step.
- We do not modify, delete, or create emails in the background.
- We do not create, edit, or delete calendar events.
- We do not use Google user data for advertising or marketing.
- Moonshot OS does not provide routine human review of Gmail or Calendar data except where necessary for security, legal compliance, or user-requested support.
7. Third-party services
Moonshot OS integrates with Google APIs, including Gmail and Google Calendar.
Use of Google user data is limited to the practices described in this policy.
8. Changes
We may update this policy. Changes will be reflected on this page.
9. Contact
To request deletion or ask a privacy question, contact support@timelessrobots.com.