Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, set up a workspace, or contact support. This includes your name, email address, and payment information (processed securely by our payment provider Wayl; we do not store card details).

We also collect usage data such as login timestamps, feature usage patterns, and error logs to improve the service and detect issues.

2. How We Use Your Information

• To provide, maintain, and improve moneyOS
• To process transactions and send billing-related communications
• To send service announcements and support messages
• To detect, prevent, and respond to fraud or security issues
• To comply with legal obligations

3. Data Isolation and Multi-Tenancy

moneyOS is a multi-tenant platform. Each organization's data is strictly isolated at the database level. No organization can access another organization's data. System administrators can access organizational data only for support and compliance purposes, and all such access is logged.

4. Data Sharing

We do not sell your data. We share data only with:

• Wayl: for payment processing
• Sentry: for error tracking (no PII in error payloads)
• PostHog: for product analytics (anonymized usage)
• Law enforcement when required by law

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Financial records are retained for a minimum of 7 years to comply with accounting regulations. You may request deletion of non-financial personal data at any time.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your personal data
• Export your data in a machine-readable format
• Object to processing for marketing purposes

To exercise these rights, email us at privacy@moneyos.com.

7. Security

We use industry-standard security measures including encryption at rest and in transit (TLS 1.3), bcrypt password hashing, JWT session tokens with short refresh intervals, and account lockout after failed login attempts.

8. Cookies

We use only essential cookies: a session token cookie (HttpOnly, SameSite=Lax) required for authentication. We do not use advertising or tracking cookies.

9. Contact

For privacy questions, contact us at privacy@moneyos.com.