Privacy Policy
Last updated: February 14, 2026
1. What we collect
- Account: email, hashed password, optional display name.
- Billing: if you subscribe, Stripe processes and stores your card. We store only the Stripe customer/subscription IDs and last-4 card digits Stripe returns on receipts — never full card numbers, CVCs, or bank details.
- Discord: if you link your Discord account, we store your Discord user ID and username so the bot can grant/revoke the Subscriber role.
- Usage: standard server logs (IP, user-agent, request path) retained for 30 days for security & abuse detection.
2. What we don’t do
- We do not sell your personal information to anyone. Full stop.
- We do not use your data to train third-party AI models.
- We do not share your email with advertisers or affiliate networks.
3. Third parties we share data with
- Stripe — payment processing. Their privacy policy: stripe.com/privacy
- Discord — only if you explicitly link your account. Their policy: discord.com/privacy
- MongoDB Atlas / hosting provider — encrypted database storage.
- LLM provider (Anthropic Claude) — anonymized market data used to generate sentiment briefings. Your personal data is never sent to LLMs.
4. Cookies
We use a single first-party session cookie to keep you logged in. We do not use third-party advertising cookies or trackers. No consent banner is required outside the EU.
5. Data retention
Account data is kept as long as your account is active. If you delete your account, we delete your profile within 30 days. Billing records are retained for 7 years to comply with U.S. tax law. Logs are auto-purged after 30 days.
6. Your rights
You may request a copy of the data we hold about you, correct inaccuracies, or delete your account entirely by emailing hello@moonbucks.io. We respond within 30 days.
7. Security
Passwords are hashed with bcrypt. All traffic is served over TLS 1.3. Database access is restricted by network policy and audited. We’ve never had a breach; if we ever do, we’ll notify affected users within 72 hours as required by GDPR.
8. Children
Moonbucks is intended for users 18 or older. If we learn we’ve collected data from a minor, we delete it immediately.
9. Changes
If we make material changes to this policy, we’ll email you and update the “Last updated” date at the top.