PRIVACY POLICY

1. Overview & Accountability

Moonode Inc. is responsible for personal information collected through the Platform for Canadian operations and is the primary privacy contact for Users in Canada. Moonode LLC processes payment-related personal information as Stripe merchant of record and as service provider to Moonode Inc. This Privacy Policy describes how we collect, use, disclose, and protect personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25) where applicable, and other laws.

Privacy contact: support@moonode.com (subject: Privacy Request)

2. Scope

This policy applies to personal information collected through moonode.com, our applications, dashboard, devices, support channels, and marketing. It does not apply to third-party websites or services you access independently.

3. Information We Collect

Depending on how you use the Platform, we may collect:

• Identity & contact: name, email, phone, organization name, role

• Account: username, password hashes, preferences, language

• Billing: billing address, subscription history (payment card data is processed by Stripe; we do not store full card numbers)

• Content: posts, media, schedules, and configuration you upload

• Technical: IP address, device identifiers, browser/OS, logs, cookies

• Usage: pages viewed, features used, approximate location derived from IP or settings you provide

• Communications: support tickets and email correspondence

• Marketing: consent records and campaign interactions

4. How We Use Information

We use personal information to: provide and secure the Platform; process payments and subscriptions; communicate with you; personalize experience; analyze and improve services; comply with law; and, with consent where required, send promotional messages.

We do not sell personal information.

5. Consent & Legal Bases

We collect, use, and disclose personal information with your consent (express or implied where permitted) or as otherwise authorized by law. You may withdraw consent for non-essential processing by contacting support@moonode.com, subject to legal or contractual limits.

Sensitive or unexpected uses (e.g., precise geolocation, profiling for automated decisions) will be explained at the time of collection and, where required by Law 25, will rely on explicit consent.

6. Cookies & Similar Technologies

We use cookies and similar technologies for authentication, preferences, security, and analytics. Non-essential cookies (e.g., analytics, marketing) are used only with consent where required (including Quebec). You may manage cookies through browser settings and any consent tool we provide. Blocking cookies may limit functionality.

7. Service Providers & Stripe

We share information with service providers under contractual safeguards, including: Stripe (payments • Moonode LLC merchant account); cloud hosting; email delivery; analytics; and customer support tools. Providers may process data outside Canada. Stripe's policy: https://stripe.com/privacy

8. Cross-Border Transfers

Personal information may be stored or processed in Canada, the United States, or other countries where our providers operate. We use contractual and organizational measures appropriate to the sensitivity of the data. By using the Platform, you acknowledge such transfers may occur, subject to applicable law and your rights.

9. Retention

We retain personal information only as long as needed for the purposes described, legal compliance, dispute resolution, and enforcement of agreements. Typical periods: account data • while active plus up to 24 months; billing records • 7 years where tax law requires; logs • up to 12 months unless security investigation requires longer.

10. Security

We implement reasonable administrative, technical, and physical safeguards proportionate to sensitivity. No method of transmission or storage is 100% secure. Report suspected breaches to support@moonode.com.

11. Your Rights

Subject to applicable law, you may request access, correction, deletion, portability (including Quebec portability rights), and information about automated decisions. Quebec residents may withdraw consent and request cessation of dissemination. We will respond within timeframes required by law (generally 30 days under PIPEDA, subject to extension where permitted).

Complaints: You may contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

12. Marketing & CASL

We send commercial electronic messages (email/SMS) only with consent or as permitted under Canada's Anti-Spam Legislation (CASL), with sender identification and an unsubscribe mechanism processed within 10 business days. Marketing consent is separate from acceptance of this Agreement. U.S. recipients: we also follow CAN-SPAM where applicable.

13. Children

The Platform is not directed to children under 14. We do not knowingly collect personal information from children under 14 without verifiable parental consent. Contact support@moonode.com to request deletion.

14. Breach Notification

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and regulators as required under PIPEDA and Law 25, and maintain a record of breaches.

15. Changes to This Policy

We will post updates with a revised effective date and provide additional notice for material changes where required.

16. Governing Law (Privacy)

For Users in Canada, this Privacy Policy is governed by the laws of Quebec and Canada as described in Terms Section 14. For other Users, governing law follows the Terms.

17. Disputes (Privacy)

Privacy-related disputes are subject to Terms Section 15. You may also lodge complaints with privacy regulators noted in Section 11.

18. Contact

Privacy contact: support@moonode.com (subject: Privacy Request)

General support: support@moonode.com

Mailing address: available upon request at support@moonode.com