Legal

Privacy Policy

Effective September 14, 2026 · Last updated September 30, 2026

Top Cheddar LLC (“MoonScroll,” “we,” “us,” or “our”) operates the MoonScroll platform at my.moonscroll.ai, the website at moonscroll.ai, and the API at api.moonscroll.ai (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

This policy covers two groups of people: (1) customers and visitors who use MoonScroll, and (2) people whose publicly posted content on platforms such as Instagram, YouTube, and TikTok may appear in the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide

  • Account information: When you create an account, we collect your email address and a hashed password. We may also store your name, organization or workspace name, project names, and onboarding survey answers.
  • Brand and workspace content: You may provide brand details, website URLs, product information, scripts, prompts, and other materials so we can generate ideas and videos for you. If you give us a website URL, we may fetch publicly available text from that site to help build a brand profile.
  • Billing information: If you subscribe, Stripe collects and processes your payment details. We store billing metadata such as plan, subscription status, and Stripe customer or subscription IDs. We do not store full credit card numbers.
  • Communications: If you email us, we collect the information you send, including your email address and message.
  • API credentials: If you use the API, we store hashed API tokens and related usage metadata (such as request timestamps and endpoints).

Information collected automatically

  • Usage data: We collect information about how you use the Service, including pages viewed, features used, and timestamps.
  • Device and log data: We collect browser type, operating system, IP address, and similar technical data needed to operate, secure, and debug the Service.
  • Cookies and local storage: We use cookies and browser storage to keep you logged in, remember preferences, and measure product usage through PostHog. We do not use advertising cookies.

Public social-platform information

MoonScroll obtains publicly available social-media information through third-party data providers and, where applicable, our own collection processes. Our public-content research features do not necessarily use the official APIs of Instagram, TikTok, or YouTube. Unless otherwise expressly stated, MoonScroll’s analysis should not be interpreted as official platform analytics. MoonScroll is not affiliated with or endorsed by these platforms.

Data availability, accuracy, completeness, and update frequency may vary by platform, source, and individual post. Third-party data can be incomplete, outdated, or inaccurate.

Information in this category may include:

  • Public profile and post information received from external sources, such as usernames, display names, bios, profile image URLs, public website or location fields, post identifiers, titles, captions, hashtags, timestamps, and links back to the original post
  • Engagement metrics reported by external sources (for example, view, like, or comment counts as provided to us)
  • Metrics calculated by MoonScroll, such as rankings, outlier scores, fit scores, and other proprietary analytical measures
  • AI-generated or derived findings, such as transcripts, on-screen text, classifications, summaries, pattern labels, embeddings, and recommendations
  • Estimated or inferred values, where we derive insights that are not directly stated on the source platform

AI-generated findings and MoonScroll’s proprietary scores are not official platform metrics. We do not seek private messages, private accounts, or content that is not made available through our configured data sources. We do not contact, message, or interact with public platform users on your behalf.

More detail is on our Data Sources & Content Removal page.

2. What we store, and what we do not

We store:

  • Your account, workspace, brand, and generated-content data, as described above
  • Public platform metadata and derived analysis needed to run the Service (for example, titles, captions, engagement stats, transcripts, and summaries)
  • Videos and images that you generate through MoonScroll, until you delete them or close your account

We do not store:

  • Original video files from Instagram, YouTube, or TikTok on a lasting basis
  • Private or non-public social content that our sources do not provide
  • Full payment card numbers (Stripe handles those)

When we analyze a public video, we may download and process a temporary copy long enough to produce metadata and derived analysis, then discard that file. We display public videos in the logged-in product by embedding them from the source platform, not by hosting our own lasting copy. MoonScroll does not publish those embeds on our marketing site.

3. How we use information

We use the information we collect to:

  • Provide, maintain, and improve the Service, including the API
  • Authenticate you and manage your account
  • Analyze publicly available video and creator data to surface patterns and ideas for customers
  • Generate scripts, images, and videos at your request
  • Send transactional email (such as login, billing, and product updates you opt into)
  • Monitor usage, prevent abuse, and keep the Service secure
  • Comply with law

We do not:

  • Sell or rent customer account personal information
  • Use your information to serve ads or build advertising profiles
  • Train our own machine learning models on your content or on public platform content
  • Fine-tune third-party models on that content

We send content to third-party AI providers through their APIs so the Service can analyze public videos, extract brand profiles, and generate ideas, scripts, and media. For text-analysis providers where the setting is available, we configure requests to prefer endpoints that do not collect prompts for training. Provider retention and training practices still depend on each provider’s terms, features, and available controls. We do not promise that every provider never retains data or never uses it for training.

4. How we share information

We do not sell, rent, or trade customer account personal information. We share information only in these limited cases:

  • Service providers that process data for us, only as needed to run the Service:
    • PostHog, for product analytics
    • Resend, for transactional email
    • Stripe, for payments
    • AI model providers, for analysis and generation via their APIs
    • Social data providers, for publicly available Instagram, YouTube, and TikTok metadata
    • Video generation providers, when you ask us to generate a video
    • Render, for application hosting
    • Cloudflare, for storing files you generate (such as videos and images)
  • Your organization: If your account belongs to a workspace, authorized members of that workspace may see activity and content in it.
  • API and integrations: If you or someone with access to your account uses the API or authorizes another application to call the API with your credentials, that application may receive Service data within the scope of those credentials, including analytical outputs and related public-platform information. Those applications are independently operated and subject to their own terms and privacy practices.
  • Legal requirements: We may disclose information if required by law, legal process, or to protect MoonScroll, our users, or the public.
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will notify you of a material change.

Making public-platform research and analytical outputs available to customers through the Service (including the API) is part of how MoonScroll works. That is different from selling customer account personal information.

5. Public platform content and removal

Analyzing public Instagram, YouTube, and TikTok content is a core part of the Service. Public usernames and posts may appear in customer dashboards and, where your plan includes API access, in API responses, so customers can understand what is working in a niche.

If you are a public platform user and want your personal information excluded from MoonScroll, email [email protected] with a link to the profile or post. We aim to process valid requests within 30 days. Where we grant a request, we remove or stop using the related records we control (stored metadata, derived analysis, and temporary media links used in the product). Removal from MoonScroll does not remove content from the source platforms, and it does not recall information already obtained by independent third parties (including customers or applications that previously retrieved it through the API).

If you have content rights in a public video shown in MoonScroll and want it taken down, use our Copyright and Content Removal process at [email protected]. See also Data Sources & Content Removal.

6. Data retention

  • Account data: We keep it while your account is active. If you ask us to delete your account, we aim to delete or anonymize personal data within 30 days, except where law requires us to keep it (for example, billing records).
  • Generated files: Videos and images you generate are kept until you delete them or we delete the account.
  • Public platform data: Kept as long as needed to provide the Service, or until a valid privacy or copyright removal request.
  • Temporary media: Source-platform video files used for analysis are processed and discarded after analysis, not retained as lasting library copies.
  • Usage logs: Kept for up to 12 months for analytics and security, then deleted or anonymized.
  • API request logs: Kept as needed to enforce plan quotas, debug the Service, and prevent abuse.

7. Your rights

Depending on where you live, you may have the right to:

  • Access a copy of personal information we hold about you
  • Correct inaccurate personal information
  • Delete personal information, subject to limited exceptions
  • Receive a portable copy of your data
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, email [email protected]. We aim to respond within 30 days, or sooner where applicable law requires. We may need to verify your identity before completing a request.

California residents

Under the CCPA/CPRA, you have the right to know what personal information we collect and how it is used, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell customer account personal information, and we do not share it for cross-context behavioral advertising.

European Economic Area, UK, and similar jurisdictions

Where these laws apply to our processing of customer account data, our legal bases include performing a contract with you (providing the Service), legitimate interests (operating and securing the Service), and consent where we ask for it. Processing of publicly available creator information for research features may also rely on legitimate interests in operating the Service. You may lodge a complaint with your local data protection authority.

This Privacy Policy is our public notice about how MoonScroll processes information, including public-platform research features. Individual notice to every person whose public posts may appear is not always practicable; applicable law may still impose notice or other obligations in specific cases.

8. Children’s privacy

The Service is for people 18 or older. We do not knowingly collect personal information from children. If you believe we have, email [email protected] and we will delete it.

Public videos shown in MoonScroll come from platforms that have their own age and content rules. We rely on Instagram, YouTube, TikTok, and similar platforms to enforce those rules, including restrictions on adult or NSFW material. We do not independently review every public video for that purpose, and we are not responsible for content those platforms make publicly available.

9. International data transfers

We are based in the United States. Information may be processed in the US and in other countries where our service providers operate. Those laws may differ from the laws where you live.

10. Data security

We use industry-standard measures to protect information, including encryption in transit (HTTPS/TLS) and access controls on our systems. No method of transmission or storage is completely secure. If you believe there is a security issue, email [email protected].

11. Third-party links

The Service links to third-party sites and embeds content from platforms such as Instagram, YouTube, and TikTok. Their privacy practices are their own. This policy applies only to MoonScroll.

12. Changes

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes means you accept the updated policy.

13. Contact us

Top Cheddar LLC
Privacy requests: [email protected]
Copyright and content removal: [email protected] (Copyright and Content Removal)
Data sources: Data Sources & Content Removal
API terms: API Terms
General inquiries: [email protected]