Legal

Privacy Policy

Effective September 14, 2026 · Last updated September 14, 2026

Top Cheddar LLC (“MoonScroll,” “we,” “us,” or “our”) operates the MoonScroll platform at my.moonscroll.ai, the website at moonscroll.ai, and the API at api.moonscroll.com (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

This policy covers two groups of people: (1) customers and visitors who use MoonScroll, and (2) people whose publicly posted content on platforms such as Instagram, YouTube, and TikTok may appear in the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide

  • Account information: When you create an account, we collect your email address and a hashed password. We may also store your name, organization or workspace name, project names, and onboarding survey answers.
  • Brand and workspace content: You may provide brand details, website URLs, product information, scripts, prompts, and other materials so we can generate ideas and videos for you. If you give us a website URL, we may fetch publicly available text from that site to help build a brand profile.
  • Billing information: If you subscribe, Stripe collects and processes your payment details. We store billing metadata such as plan, subscription status, and Stripe customer or subscription IDs. We do not store full credit card numbers.
  • Communications: If you email us, we collect the information you send, including your email address and message.

Information collected automatically

  • Usage data: We collect information about how you use the Service, including pages viewed, features used, and timestamps.
  • Device and log data: We collect browser type, operating system, IP address, and similar technical data needed to operate, secure, and debug the Service.
  • Cookies and local storage: We use cookies and browser storage to keep you logged in, remember preferences, and measure product usage through PostHog. We do not use advertising cookies.

Publicly available platform data

MoonScroll analyzes publicly available content from platforms such as Instagram, YouTube, and TikTok. We collect information that is visible without logging into a private account, including:

  • Public usernames, display names, bios, profile image URLs, and public location or website fields
  • Public video or post identifiers, titles, captions, hashtags, timestamps, and engagement counts
  • Public thumbnail URLs and links back to the original post on the source platform
  • Derived analysis of that public content, such as transcripts, on-screen text, summaries, pattern labels, and embeddings used for search and recommendations

We do not collect private messages, private accounts, or content that requires authentication to view. We do not contact, message, or interact with public platform users on your behalf.

2. What we store, and what we do not

We store:

  • Your account, workspace, brand, and generated-content data, as described above
  • Public platform metadata and derived analysis needed to run the Service (for example, titles, captions, engagement stats, transcripts, and summaries)
  • Videos and images that you generate through MoonScroll, until you delete them or close your account

We do not store:

  • Original video files from Instagram, YouTube, or TikTok
  • Private or non-public social content
  • Full payment card numbers (Stripe handles those)

When we analyze a public video, we may process it long enough to produce metadata and derived analysis, then discard the file. We display public videos in the logged-in product by embedding them from the source platform, not by hosting our own copy. MoonScroll does not publish those embeds on our marketing site.

3. How we use information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate you and manage your account
  • Analyze publicly available video and creator data to surface patterns and ideas for customers
  • Generate scripts, images, and videos at your request
  • Send transactional email (such as login, billing, and product updates you opt into)
  • Monitor usage, prevent abuse, and keep the Service secure
  • Comply with law

We do not:

  • Sell or rent your personal information
  • Use your information to serve ads or build advertising profiles
  • Train our own machine learning models on your content or on public platform content
  • Fine-tune third-party models on that content

We send content to third-party AI providers through their APIs so the Service can analyze public videos, extract brand profiles, and generate ideas, scripts, and media. Where a provider lets us, we configure those APIs so they do not use that content to train their models.

4. How we share information

We do not sell, rent, or trade personal information. We share information only in these limited cases:

  • Service providers that process data for us, only as needed to run the Service:
    • PostHog, for product analytics
    • Resend, for transactional email
    • Stripe, for payments
    • AI model providers, for analysis and generation via their APIs
    • Social data providers, for publicly available Instagram, YouTube, and TikTok metadata
    • Video generation providers, when you ask us to generate a video
    • Render, for application hosting
    • Cloudflare, for storing files you generate (such as videos and images)
  • Your organization: If your account belongs to a workspace, authorized members of that workspace may see activity and content in it.
  • Legal requirements: We may disclose information if required by law, legal process, or to protect MoonScroll, our users, or the public.
  • Business transfers: If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will notify you of a material change.

5. Public platform content and removal

Analyzing public Instagram, YouTube, and TikTok content is a core part of the Service. Public usernames and posts may appear in customer dashboards so customers can understand what is working in a niche.

If you are a public platform user and want your personal information excluded from MoonScroll, email [email protected] with a link to the profile or post. We will process valid requests within 30 days.

If you have content rights in a public video shown in MoonScroll and want it taken down, use our Copyright and Content Removal process at [email protected].

6. Data retention

  • Account data: We keep it while your account is active. If you ask us to delete your account, we delete or anonymize personal data within 30 days, except where law requires us to keep it.
  • Generated files: Videos and images you generate are kept until you delete them or we delete the account.
  • Public platform data: Kept as long as needed to provide the Service, or until a valid privacy or copyright removal request.
  • Usage logs: Kept for up to 12 months for analytics and security, then deleted or anonymized.

7. Your rights

Depending on where you live, you may have the right to:

  • Access a copy of personal information we hold about you
  • Correct inaccurate personal information
  • Delete personal information, subject to limited exceptions
  • Receive a portable copy of your data
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, email [email protected]. We will respond within 30 days. We may need to verify your identity before completing a request.

California residents

Under the CCPA/CPRA, you have the right to know what personal information we collect and how it is used, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

European Economic Area, UK, and similar jurisdictions

Our legal bases include performing a contract with you (providing the Service), legitimate interests (operating and securing the Service, and analyzing publicly available content for that purpose), and consent where we ask for it. You may lodge a complaint with your local data protection authority.

Because it is not practical to contact every person whose public posts we may analyze, we provide this information here instead of individual notice.

8. Children’s privacy

The Service is for people 18 or older. We do not knowingly collect personal information from children. If you believe we have, email [email protected] and we will delete it.

Public videos shown in MoonScroll come from platforms that have their own age and content rules. We rely on Instagram, YouTube, TikTok, and similar platforms to enforce those rules, including restrictions on adult or NSFW material. We do not independently review every public video for that purpose, and we are not responsible for content those platforms make publicly available.

9. International data transfers

We are based in the United States. Information may be processed in the US and in other countries where our service providers operate. Those laws may differ from the laws where you live.

10. Data security

We use industry-standard measures to protect information, including encryption in transit (HTTPS/TLS) and access controls on our systems. No method of transmission or storage is completely secure. If you believe there is a security issue, email [email protected].

11. Third-party links

The Service links to third-party sites and embeds content from platforms such as Instagram, YouTube, and TikTok. Their privacy practices are their own. This policy applies only to MoonScroll.

12. Changes

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes means you accept the updated policy.

13. Contact us

Top Cheddar LLC
Privacy requests: [email protected]
Copyright and content removal: [email protected] (Copyright and Content Removal)
General inquiries: [email protected]