Mooncad

Privacy policy

Last updated: 2 November 2026

Mooncad builds a business with you, by text, in iMessage or WhatsApp. This page explains what data Mooncad collects, why, who it is shared with, how long it is kept and how to exercise your rights. It also covers customers of the websites and apps created with Mooncad.

Who is responsible for your data

The data controller is CADENCE, a French simplified joint-stock company (SAS) with a share capital of €100, registered with the Paris Trade and Companies Register under number 107 882 250, whose registered office is at 11 bis rue de Maubeuge, 75009 Paris, France, which publishes Mooncad. For any question or request about your data, write to us from the Contact page.

The data we collect

• Your conversations with Mooncad: your phone number (or your Apple ID address, if you text from it), your messages and Mooncad's replies, with their date. The photos and documents you send are used to answer you: we don't keep the file. Voice messages are transcribed as soon as they arrive: we keep the text, not the audio.
• Your project: your idea, your audience, your inspirations, the names and directions suggested, your choices, and what Mooncad creates for you: logo, images, business profile, website, app, market study, action plan and posts.
• On our pages: if you type your idea or chat with Mooncad on mooncad.app, we keep what you write and what is suggested to you, with an identifier for your browser and your IP address turned into an unreadable code. When you then text Mooncad, they are linked to your conversation.
• Your email address: only if you give it so Mooncad can send quote requests to manufacturers.
• Your payments: Launch and Grow are paid through Stripe. We keep the identifier of your payment and subscription; we never see or keep your card numbers.
• Your payouts: if you sell, your payout account is opened with Stripe. Your identity and bank account are given directly to Stripe; we only keep the account identifier and whether it is ready.
• Contact form: your email address, your message and its date.
• Questionnaires in our ads: if you answer one of our questionnaires on Facebook or Instagram, your answers and your email address, prefilled by Meta, stay in our Meta ad account, from which we download them to read them.
• Meta advertising measurement: the Meta pixel records page views and taps on our buttons, to measure how well our ads work. It sets a cookie (_fbp, and _fbc if you arrive through one of our ads) and sends Meta your IP address and information about your browser. When you text Mooncad, our server also tells Meta three steps: your first message, the delivery of your logo and profile, then the Launch payment and its amount. It sends them with your phone number (or Apple address) hashed, meaning turned into an unreadable code that Meta compares with the numbers of its accounts, and, if you had just tapped the button on our page, with the pixel cookies, your IP address and information about your browser, which we keep for 7 days. The content of your messages is never sent.
• Audience measurement: anonymous visit statistics (pages viewed, referrer, country, device type, time spent, how far down the page you went, button taps, answers to the question “What made you hesitate?”), without cookies and without your number.

If you buy on a website or in an app created with Mooncad

These websites and apps sell through CADENCE, which is their seller of record and the controller of your purchase data.

• Purchases: your name, your email address, your city and country, what you chose (size, colour), your optional note, the amount and taxes. Payment is processed by Stripe. For clothing, your shipping address is read from Stripe and sent to Printful, which makes and ships it; we don't keep it. For a service, your name, email address and note are passed on to the person who created it, so they can contact you.
• Newsletters and waiting lists: if you sign up on one of these websites, your email address, deleted as soon as you unsubscribe through the link in every email.
• Apps: an account tied to your device, the first name you give and what you add in the app. If you take an app's Pro subscription, it is paid through Stripe and the email address given at payment is used to restore your access on another phone.
• Visits: one row per visitor per day, under an unreadable code computed from the IP address and browser, without cookies, to count visits and know which ad led to a sale.

Why we use it

• Answering you and doing what you ask Mooncad: finding your name, creating your logo, website and app, putting them online and running them. Legal basis: providing the service, free or paid.
• Charging subscriptions, selling on the websites and apps created, paying creators their share, and keeping invoices and accounting records. Legal basis: performing the contract and our legal obligations.
• Sending your quote requests to manufacturers. Legal basis: your request.
• Following up once if the conversation stops, and offering you Grow after your launch. Legal basis: our legitimate interest in helping you see your project through.
• Understanding traffic on our pages and measuring how well our ads on Facebook and Instagram work. Legal basis: our legitimate interest; you can block the pixel cookies in your browser settings.
• Answering messages sent from the Contact page. Legal basis: your request.

We don't sell your data. The content of your messages is never used to show you ads, and is only shared with the providers below, to run Mooncad.

Who receives it

• Vercel Inc.: hosts mooncad.app and the websites and apps created, and provides audience measurement. The site's functions run on its servers in Frankfurt, Germany.
• Neon: provides the database storing your conversations, your projects, orders and visit statistics. It is hosted in Frankfurt, Germany.
• Photon (photon.codes): runs Mooncad's iMessage line and one of its WhatsApp lines: the messages, photos, documents and voice notes you exchange with Mooncad pass through its servers in the United States. Apple carries them in iMessage, under its own terms.
• Meta Platforms Ireland (WhatsApp): carries your messages if you text Mooncad on WhatsApp.
• Anthropic: Mooncad writes its replies, your profile, your market study and your app's code with Claude, Anthropic's artificial intelligence model, called directly or through OpenRouter. For each reply, they receive the latest messages of the conversation, the images you send and what Mooncad knows about your project. Both are based in the United States.
• OpenAI: draws the photos of your products, website and ads, through OpenRouter. It receives your brand name, the product and the scene to draw, with your logo as a reference; never your photos or your number. Based in the United States.
• Google (Gemini): transcribes the voice messages you send, through OpenRouter, on its servers in the European Union and without keeping the audio. It is also used as a backup search engine.
• DuckDuckGo and Exa: when Mooncad searches the web (a name, your market, manufacturers), they receive the search words, never your name or your number.
• Verisign: receives the .com names Mooncad checks are available, and nothing else.
• Resend: sends emails from its servers in Ireland: your quote requests to manufacturers, with your email address in copy, emails to the websites' customers (downloads, bookings), the websites' newsletters and the link to restore a Pro subscription.
• Manufacturers: only if you ask, they receive your quote request and your email address.
• Stripe Payments Europe: processes Launch and Grow payments and sales on the websites and apps, and manages creators' payout accounts, from Ireland.
• Printful: makes and ships the clothing sold on the websites created; it receives the buyer's name, shipping address and email address.
• Meta Platforms Ireland: receives the pixel data and the three steps described above, with your hashed number, and hosts the questionnaires in our ads.
• Google Fonts: provides the fonts of mooncad.app and of the websites created. Your browser then sends your IP address to Google.
• Google Workspace: hosts our email: replies to our emails arrive there.

Your conversations, your projects and orders are stored in the European Union. Your conversations do, however, pass through Photon, Anthropic, OpenRouter and OpenAI, in the United States, with each message. Vercel, Neon, Resend, Google, Stripe and Printful are also companies based in the United States or owned by one, and Meta Platforms Ireland is a subsidiary of a US company: access to this data from outside the European Union cannot be ruled out.

How long we keep it

• Conversations and projects: as long as you use Mooncad, then three years after your last message or the end of your subscription.
• What you write on our pages: if it is not linked to a conversation: one year.
• Purchases on the websites and apps: three years after the purchase. Invoices and accounting records: ten years, as the law requires.
• Website newsletters: until you unsubscribe.
• Website visits: one year.
• Clicks on our pages (pixel cookies, IP address, browser): 7 days.
• Contact page messages and questionnaires in our ads: as long as needed to handle them, and at most one year.

The health assistant

Before building businesses, Mooncad was a health assistant. It has been paused since October 2026. If you used it or joined its waitlist, your data (sign-up, questionnaire answers, conversations, data from connected devices you had linked) is kept under the rules announced at the time: the waitlist until you unsubscribe and at most three years after our last exchange, your conversations three months after your last message or the end of your subscription. You can ask for it to be deleted at any time from the Contact page.

Your rights

You can at any time access your data, correct it, have it deleted, object to its use, restrict its use or ask for a copy. Write to us from the Contact page, giving the phone number or Apple address you text Mooncad from, or the email address concerned.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.

Cookies and storage in your browser

mooncad.app only sets the Meta pixel cookies (_fbp, and _fbc if you arrive through one of our ads), used to measure our ads; you can block them by refusing third-party cookies in your browser settings. The page also keeps in your browser (local storage) the moment you tapped the button, to ask you “What made you hesitate?” when you come back, and the fact that it asked you, so as not to ask again. The websites and apps created with Mooncad set no advertising cookies; an app keeps your account identifier in your browser.