Privacy Policy

This Privacy Policy explains what information MOOODs ("MOOODs," "we," "us") collects when you use our website and product (the "Service"), how we use it, who we share it with, and the choices you have. It's written to describe what the Service actually does, not a generic template — if something below stops being true as the product changes, we'll update this page.

1. Information we collect

Information you give us directly:

• Your business name, a short description of your business, and any social media goals you type into the intake form.
• Your email address, if you provide one for weekly trend-brief emails, or if you create an account (email + password).
• Any information you provide if you contact us directly for support.

Information collected automatically:

• A hashed version of your IP address — we never store your raw IP address. This exists solely to prevent abuse of free/anonymous board generation (for example, someone repeatedly clearing cookies to bypass the one-free-board limit) and is not used to identify you personally.
• Standard technical data your browser sends to any website (e.g. general device/browser information via server logs), used only for operating and securing the Service.

We do not buy personal information about you from third parties or data brokers.

2. Cookies and local storage

We keep this list short on purpose because it's short in practice:

• An anonymous-trial cookie, which marks that a browser has already generated one free board, so we know when to ask for sign-in.
• Authentication session cookies, set by our authentication provider (Supabase) if you create an account, so you stay signed in.
• Local storage on your device only (never sent to our servers) for things like your light/dark canvas preference and whether a board's canvas has already been laid out — purely to make the product feel consistent between visits.

We do not currently use third-party advertising or cross-site tracking cookies.

3. How we use your information

• To generate your strategy, mood board, scripts, and weekly trend briefs.
• To operate, maintain, and improve the Service.
• To send you the weekly brief email, if you opted in, and other service-related communications (e.g. account or billing notices).
• To process payment, once paid plans are available (see Section 5).
• To detect, prevent, and respond to fraud, abuse, and violations of our Terms of Service.
• To comply with legal obligations.

4. Who we share information with

We use a small number of service providers to run MOOODs. Each only receives what it needs to do its job:

• OpenAI — receives your business name, description, and goals to generate your strategy, audience profile, and scripts.
• Apify — receives only a niche/hashtag keyword derived by our own AI classification (e.g. "fitness" or "skincare") to find relevant public social media posts. It never receives your business name, description, or email.
• Supabase — our authentication and database provider; hosts your account and board data.
• Resend — sends the weekly brief email, if you opted in.
• Recraft / fal.ai — generate AI concept images from short text prompts derived from your strategy.
• Vercel — hosts the application.
• A payment processor (such as Stripe), once paid plans are live — will receive whatever is necessary to process your payment. MOOODs does not store your full card number; the payment processor handles that directly and is responsible for its own PCI-DSS compliant security.

We do not sell your personal information. We may disclose information if required by law, to protect the rights, property, or safety of MOOODs or others, or in connection with a merger, acquisition, or sale of assets (in which case we'll notify you if your information becomes subject to a different privacy policy).

5. Payments

Paid subscription plans are not yet available at the time of writing — the Pricing page describes plans we intend to offer. Once billing is live, payments will be handled by a third-party payment processor. We will store only what's necessary to manage your subscription (such as your plan tier, billing status, and a reference ID from the payment processor) — never your full card details.

6. Who at MOOODs can see your information

Authorized MOOODs personnel may access account information — including subscription tier, usage/generation counts, and registration status — to provide support, operate the Service, investigate abuse, and enforce our Terms of Service. Access is limited to what's needed for these purposes.

7. Data retention

• Board and account data is retained while your account is active, or while a board exists.
• Hashed IP records used for abuse prevention are kept only briefly and are not linked to your account or identity.
• We do not currently offer a self-serve "delete my account" button. To request deletion or export of your data, contact us (Section 12) and we will act on it directly.

8. Your rights and choices

Regardless of where you live, you can contact us to:

• Ask what personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your information.
• Stop receiving weekly brief emails (or simply don't provide an email at intake).

If you are in the European Economic Area or UK, you have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. If you are a California resident, you have rights under the CCPA/CPRA including the right to know, delete, and opt out of the sale or sharing of personal information — we do not sell or share personal information as defined by that law. We do not currently respond differently to browser "Do Not Track" signals.

9. International data transfers

Our service providers (including Supabase, OpenAI, and Vercel) may process data in the United States or other countries outside your own. Where required, we rely on appropriate safeguards for these transfers.

10. Children's privacy

MOOODs is not directed at children and is not intended for use by anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-party content and links

Inspiration cards reference publicly available content from TikTok, Instagram, and other platforms. We don't control, and aren't responsible for, the privacy practices of those platforms, or of any third-party site a shared board might link to.

12. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

13. Changes to this policy

We may update this policy as the product changes. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to give notice (such as an email, if we have one for you).

14. Contact us

Questions about this policy, or requests regarding your data, can be sent to [support email — pending domain setup].