Regulatory compliance at MoonBase

GDPR (General Data Protection Regulation)

MoonBase is operated by MoxieAI, a company based in Israel. We process personal data of EU residents in accordance with the General Data Protection Regulation (GDPR).

What this means for you:

• You have the right to access, correct, and delete your personal data
• We process your data only for the purposes described in our Privacy Policy
• We do not sell your personal data
• We have a Data Processing Agreement (DPA) available for customers who require it

Lawful basis for processing:

• Account data: Contract performance
• Usage analytics: Legitimate interest (privacy-preserving, no personal identifiers)
• Marketing communications: Consent

Data transfers:

MoonBase’s primary infrastructure is in Germany (EU). Where data is transferred outside the EU, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

To request a DPA or exercise your data rights, contact: [email protected]

CCPA (California Consumer Privacy Act)

If you are a California resident, you have specific rights regarding your personal information under the CCPA:

• Right to know: You can request a list of personal information we’ve collected about you
• Right to delete: You can request deletion of your personal information
• Right to opt out: We do not sell personal information, so there is nothing to opt out of
• Right to non-discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, contact: [email protected]

Israeli Privacy Protection Law

MoxieAI is incorporated in Israel and complies with Israel’s Privacy Protection Law (5741-1981) and its regulations, including the Privacy Protection Regulations (Data Security), 5777-2017.

SOC 2

MoonBase does not currently hold a SOC 2 certification. If this is a requirement for your use case, contact us to discuss your needs.

HIPAA

MoonBase is not HIPAA-compliant. Do not use MoonBase to host applications that process Protected Health Information (PHI).

PCI DSS

MoonBase does not process payment card data on your behalf. If your hosted application processes payments, that is handled by your payment processor (e.g., Stripe, Paddle). MoonBase is not in scope for PCI DSS compliance for your payment flows.

AI-specific compliance

No training on your data

MoonBase does not use your project files, code, or content to train machine learning models.

AI-generated content

MoonBase hosts the output of AI tools. We do not make representations about the intellectual property status of AI-generated content. Compliance with applicable laws regarding AI-generated content is the responsibility of the user.

See our AI Usage Policy for more details.

Questions

For compliance-related inquiries: [email protected]