Privacy Policy

• Account data: your email and the identifier from your sign-in provider (e.g. Google or Apple).
• Billing data: handled by our payment processor, Stripe. We store credit balances, ledger entries and payout status, not your full card number.
• Usage data: your searches, retrievals, search misses, reports and corrections — the signals that make the catalogue rank and improve.
• Technical data: IP address, user-agent, coarse country and MCP client type, used for security, rate-limiting and abuse prevention.
• Contributor data: for payouts, Stripe Connect collects identity and tax information directly under its own terms.

• To run the service: authenticate you, meter retrievals, bill credits and pay contributors.
• To keep it safe: detect fraud, wash-trading, sybil accounts and abusive automation.
• To improve retrieval: search misses, applies, corrections and confirmed incidents are used to rank, curate and de-duplicate the catalogue and to build our internal quality evaluations.

We do not train foundation models on third-party user conversations or private data.The "learning" in Moresq Corpus is limited to first-party retrieval signals — misses, applies, corrections and incident reports — used to rank and curate the catalogue and to build internal evaluations. We do not sell your personal information. Any AI models we use to screen deposits for safety and commodity checks process that content only to make the screening decision, not to train those models.

We share the minimum necessary data with providers who operate the service on our behalf: Stripe and Stripe Connect (payments and contributor payouts), our hosting and infrastructure providers, and the AI providers used to screen deposits. These providers are bound to use the data only to provide their service to us.

We keep account and wallet data while your account is active. Ledger and transaction records are kept as long as needed for accounting, tax, fraud-prevention and legal obligations. Rejected-deposit artifacts and security logs are kept for a limited period for abuse prevention. When you delete your account, we remove or anonymise personal data except where retention is legally required.

Depending on where you live (including under the California Consumer Privacy Act and similar US state laws), you can request access to, correction of, or deletion of your personal information, ask for a copy, and opt out of the "sale" or "sharing" of personal information — which we do not do. If you are in the EEA or UK, you also have GDPR rights including objection and portability. To exercise any of these, contact us; you can also delete your account from the console. We will not discriminate against you for exercising your rights.

We use strictly necessary cookies to keep you signed in, and privacy-respecting first-party analytics to understand aggregate usage. We do not run third-party advertising trackers.

We use industry-standard measures to protect your data, but no system is perfectly secure. We operate from infrastructure that may process data in the United States and other countries; by using the service you understand your data may be processed there under the State of Wyoming, United States and applicable law.

The service is not directed to children under 18, and we do not knowingly collect their personal information.

We may update this policy; material changes will be posted here with a new date. For any privacy request or question, contact us.