Legal

Privacy Policy

Effective date: January 1, 2026  ·  Last updated: March 2026  ·  Applies to: Chief of Staff by Moonbow AI
Plain English Summary
We collect only what we need to run your Chief of Staff service — your account info, calendar and email data (to generate your briefings), and usage data (to improve the product). We never sell your data. We never use your data to train AI models. You can delete everything at any time.
Contents

1 Who We Are

Chief of Staff is a product of Moonbow AI, LLC ("Moonbow AI," "we," "us," or "our"), a company based in the United States. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Chief of Staff application, website, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Data Controller: Moonbow AI, LLC
Contact: privacy@moonbow.ai

2 What We Collect

2.1 Information You Provide Directly

2.2 Information from Connected Services

When you connect third-party services, we access data from those services solely to provide the Chief of Staff features. This includes:

ServiceData AccessedWhy
GmailEmail subjects, senders, message snippets of unread mailInbox triage and briefing summaries
Google CalendarEvent titles, times, attendees, locationsDaily schedule and meeting prep
Google DriveFile names and contents you explicitly share or referenceDocument context for decisions and meetings
SlackMessages in channels you authorizeTeam pulse and communications summaries
HubSpot / CRMDeal names, stages, contact names, pipeline dataRevenue context for briefings
Important
We access third-party data using read-only scopes wherever possible. We never modify, delete, or send messages on your behalf without your explicit instruction through the app. You can revoke access to any connected service at any time in Settings.

2.3 Information Collected Automatically

3 How We Use Your Data

We use the information we collect for the following purposes:

AI & Your Data
When you use Focus Mode or generate a briefing, relevant context (your priorities, calendar events, task titles, etc.) is sent to Anthropic's API to generate your response. This data is transmitted securely and is governed by Anthropic's API data usage policy, which prohibits using API data for model training. We do not store the raw content of your emails or calendar events on our servers beyond what is needed to generate your briefing.

4 How We Share Your Data

We do not sell your personal information. We do not share your data with advertisers. We share data only in the following limited circumstances:

4.1 Service Providers (Sub-Processors)

We work with trusted third-party vendors who process data on our behalf:

VendorPurposeData Shared
AnthropicAI language model (Claude)Context data needed to generate your briefings and responses
StripePayment processingBilling information, subscription status
TwilioSMS deliveryPhone number, message content
Supabase / Database providerData storageAll account and application data
SendGrid / Email providerEmail deliveryEmail address, briefing content
NetlifyWeb hostingIP address, request logs
n8nWorkflow automationTrigger data for automations you enable

All sub-processors are bound by data processing agreements and are prohibited from using your data for any purpose other than providing their service to us.

4.2 Legal Requirements

We may disclose your data if required by law, court order, or government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Moonbow AI, our users, or the public.

4.3 Business Transfers

If Moonbow AI is acquired, merged, or sells substantially all of its assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5 Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

You may request earlier deletion at any time by contacting privacy@moonbow.ai.

6 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email privacy@moonbow.ai. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact privacy@moonbow.ai.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, we process your data under the legal bases of contract performance (to deliver the Service you signed up for) and legitimate interests (to improve and secure the Service). You have the right to lodge a complaint with your local data protection authority.

7 SMS Communications

If you provide your phone number and opt in to SMS delivery during onboarding, you consent to receive text messages from Chief of Staff by Moonbow AI. These messages may include:

SMS Opt-Out
Reply STOP to any message to unsubscribe immediately. You will receive one confirmation message and no further texts. You can also disable SMS in your account Settings at any time. Reply HELP to any message for support information.

Message frequency varies based on your settings — typically one message per day plus occasional alerts. Standard message and data rates from your carrier may apply. SMS service is powered by Twilio. Your phone number is never shared with third parties for their own marketing purposes.

8 Cookies & Tracking

We use a minimal number of cookies and similar technologies:

We do not use tracking pixels, advertising cookies, or cross-site tracking. You can disable cookies in your browser settings, but some features of the Service may not function correctly without session cookies.

9 Security

We implement reasonable technical and organizational measures to protect your personal data, including:

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

10 Children's Privacy

The Service is designed for professional use by adults and is not directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete that information promptly. If you believe a child has provided us with personal information, please contact privacy@moonbow.ai.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes — such as changes to what data we collect or how we share it — we will notify you by email at least 14 days before the change takes effect.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you may cancel your account and request deletion of your data.

12 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 5 business days.

Questions about your data?

We're happy to explain exactly what we collect and why.

✉️ Email privacy@moonbow.ai