PRIVACY POLICY
Moonlux, a service of Moonshot OS Inc. Last updated: 2026-09-03
1. Who we are
Moonshot OS Inc., a Delaware corporation, operating Moonlux. Mail: Moonshot OS Inc., 717 N Highland Ave, Suite 12, Los Angeles, CA 90038. Email: legal@moonlux.ai
We offer the Service only in the United States. We do not knowingly collect information from anyone outside it, or from anyone under 18.
2. What we collect, and why
You give us:
| What | Why |
|---|---|
| Name, email address | To identify you and to reply to you |
| Profession, specialty, subspecialty | To understand where you fit |
| Licence status, licence number, board certification, jurisdiction | To confirm you meet platform requirements |
| Years in practice, practice status, work authorisation | To determine eligibility for specific opportunities |
| Your description of your background | To understand what you would be well suited to |
| Hours you can commit, platforms you already use | To match you appropriately |
| Anything you send us in correspondence | To help you |
We obtain from third parties:
| What | From |
|---|---|
| Verification of your credentials and standing | State licensing boards, professional certifying bodies, federal registries including the NPI registry and the OIG exclusion list |
| Whether a payment succeeded, and subscription status | Stripe |
| Whether an email was delivered, bounced, or reported as spam | Our email provider |
Generated as you use the Service:
| What | Note |
|---|---|
| Which modules you have opened, and when | |
| Session records | Including an IP address truncated to its first three segments and a general browser type. We do not store your full IP address. |
| Aggregate usage counts | Page views, form starts, form completions. First-party only; we use no third-party analytics or advertising trackers. |
| Placement and payment milestones | Recorded by us or reported by you |
| Content you choose to forward to us | See §3 |
| Moonlux Check licence key, sent once per run | To confirm your subscription is active. Nothing about the files it checks — names, contents, or findings — is ever sent to us. |
3. What we do not collect
We do not collect the content of your work.
Where you forward platform correspondence to us, we extract specific facts and discard the message body. Where we provide software that runs on your own device, it does not transmit your work, your keystrokes, your screen, window titles, or web addresses to us.
We do not collect your full IP address, your precise location, your contacts, or your browsing activity outside the Service. We do not buy personal information about you from anyone.
4. How we use it
To operate the Service and provide what you asked for; to verify your credentials; to communicate with you about your account; to take payment; to maintain your record; to keep the Service secure and detect abuse; to understand in aggregate whether the Service works; and to comply with law.
We do not use your information to train machine learning models, and we do not provide it to anyone else for that purpose.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. There is no advertising on the Service.
5. Who we share it with
Service providers, who process on our instructions and for no other purpose: Stripe (payments), our email provider (transactional email), our database and hosting providers, and our error monitoring provider.
Platforms, only what you specifically ask us to send, and only with your agreement on each occasion. We do not pass your details to a platform without asking you first.
Legal, where we are required by law, or where necessary to establish or defend a legal claim, or to protect someone's safety. If we receive a legal demand for your information we will tell you unless we are prohibited from doing so.
A successor, if Moonshot OS is acquired or merges, on notice to you and subject to this policy.
Nobody else.
6. How long we keep it
| You applied and nothing followed | Six months from your last activity, then deleted automatically |
| You are a member | For as long as your account is open, and 30 days after it closes |
| You ask us to delete | The same day |
| Verification records | While the related credential record exists |
| Financial and tax records | Seven years, as required for tax purposes |
| Security and access logs | Twelve months |
Deletion is permanent and cascades to associated records.
7. Your rights
Wherever you live in the United States, you may ask us to:
- tell you what we hold about you and where it came from;
- give you a copy in a portable format;
- correct anything inaccurate;
- delete it;
- stop using it for a particular purpose.
Email legal@moonlux.ai. We will not ask you why, and we will not treat you differently for asking. We will respond within 45 days and will verify your identity through the email address on your account before acting.
If you are a California resident, the California Consumer Privacy Act gives you the rights above, plus the right to know the categories of personal information collected, the purposes, and the categories of third parties it is disclosed to — all set out in §§2, 4, and 5 — and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve months. You may use an authorised agent; we will ask for proof of authorisation.
Residents of other states with comparable laws, including Colorado, Connecticut, Virginia, Texas, and Utah, have equivalent rights and may exercise them the same way. We do not conduct profiling that produces legal or similarly significant effects.
8. Security
Encrypted in transit and at rest. Access to production data is limited to those who need it and is logged.
The system is separated so that each component holds only the rights it needs: the component that accepts your application cannot read any application back, and deletion can only be performed through a specific audited path. Passwords for staff accounts are stored using a modern password-hashing algorithm; sign-in links are stored only as hashes.
No system is perfectly secure, and we do not claim otherwise.
9. If something goes wrong
If your personal information is exposed, we will tell you directly and promptly — in any event within the time required by applicable state law, and without waiting for that deadline where we can act sooner. We will tell you what happened, what was affected, and what we are doing.
10. Cookies
We use cookies that are strictly necessary to operate the Service: to keep you signed in, and to protect against cross-site request forgery. We use no advertising, analytics, or tracking cookies, and no third-party cookies.
Because we use only strictly necessary cookies, we do not display a consent banner. Blocking these cookies will prevent you from signing in.
We do not respond to Do Not Track signals, as there is no consistent standard, because we do not track you across sites in the first place.
11. Children
The Service is not for anyone under 18 and we do not knowingly collect their information. If you believe a minor has given us information, email legal@moonlux.ai and we will delete it.
12. Changes
We may update this policy. If a change is material we will email you before it takes effect and update the date above.
13. Contact
legal@moonlux.ai, or Moonshot OS Inc., 717 N Highland Ave, Suite 12, Los Angeles, CA 90038.