Privacy Policy

Last updated October 6, 2026

MoatDrop is operated by Blocsmith LLC ("MoatDrop", "we"). This policy explains what we collect when you use MoatDrop (the web app, the API and the MCP endpoint), what we do with it, and how long we keep it.

What we collect

  • Account information. Your email address, your name if you give one, and your plan. Your password is stored only as a salted bcrypt hash. If you subscribe, payment is handled by Lemon Squeezy; we receive your subscription status and never see your card number.
  • Documents. The files you attach to a link, whether uploaded from your device or imported from Google Drive or Box.
  • Link access records. Each time a link is queried we record the caller's IP address, user agent and referrer (each encrypted in our database), the time, the name of the share token used, how the caller authenticated, and the outcome (for example answered, blocked or over quota). The owner of the link can see these records. We do not store the question that was asked or the answer that was returned.
  • Security audit log. Account actions such as sign-ins, password changes and API key or share token changes, with the user agent they came from.
  • Service logs. Our hosting platform records each request's IP address, user agent and request path. These logs are used only for security and debugging and are kept for up to 30 days.
  • Cookies. A session cookie and a CSRF-protection cookie, both required for the app to work. We use no advertising or analytics cookies and no third-party trackers.

How we use it

We use this information to provide the service, keep it secure, enforce plan limits, bill subscriptions, and send account email such as verification, password reset, usage and billing notices. We do not sell personal information, and your documents are not used to train AI models.

AI processing

When a link is queried, the document and the question are sent to Google's Gemini models on Vertex AI to generate the answer. We run Gemini under Google's zero data retention terms: Google does not store prompts or responses at rest, they are not used to train models, and Google's abuse-monitoring prompt logging is switched off for our account. Google may hold recent request data in memory for up to 24 hours to speed up repeat requests.

Where it is stored and how it is protected

Our servers, database and document storage are on Google Cloud in the us-central1 region (Iowa, USA). Answers are generated by Gemini through Google's global endpoint, so Google may process a request in another of its regions. Documents attached to links are encrypted at rest with customer-managed encryption keys (CMEK) that we control. The database is encrypted at rest, and IP addresses, user agents and referrers are additionally encrypted field by field. All traffic is encrypted in transit with TLS.

How long we keep it

  • Link access records and audit log entries are deleted after 7 days on the Free plan, 90 days on the Pro plan and 90 days on the Team plan, based on the plan of the link's owner.
  • Documents are kept until you delete the link or your account. A deleted link stays in your trash for 30 days, where you can restore it, and is then permanently deleted together with its document and access records. We keep a minimal record of each deleted link (its name and id).
  • Your account. When you ask to delete your account, sign-in and API keys stop working immediately and a 30-day grace period starts, during which you can cancel. After that your account, links, documents and logs are permanently deleted. We keep a hashed record that the deletion took place, and the deleted-link records above.
  • Backups. Deleted data, including documents, can remain in encrypted backups or recoverable storage for up to 7 days before it expires.

Who we share it with

We share personal information only with the providers that run the service for us:

  • Google Cloud: hosting, storage and Gemini on Vertex AI.
  • Lemon Squeezy: checkout and subscription billing.
  • Resend: delivery of account email.
  • Google Fonts: the app loads its fonts from Google's servers, which see your IP address and browser details when a page loads.

We may also disclose information when the law requires it.

Your choices

You can delete any link, and delete your account, from inside the app. To ask for a copy of your data, to correct it, or to raise any other privacy question, email support@moatdrop.com.

Changes to this policy

If we change this policy we will update this page and the date at the top. If a change is material we will tell account holders by email before it takes effect.

Contact

Blocsmith LLC, support@moatdrop.com. See also our Terms of Service.