MOOON Exchange full moon logoMOOON Exchange
PRIVACY & DATA PROTECTION

Privacy Policy

This policy explains how To the Moon Technology Private Limited handles personal data when you visit MOOON Exchange, create an account or use its current demonstration services.

Effective 31 August 2026 · Last updated 31 August 2026

1. Who we are

MOOON Exchange is operated by To the Moon Technology Private Limited (“MOOON”, “we”, “us” or “our”). For this policy, we are responsible for deciding how and why personal data is processed through mooon.exchange.

2. Data we collect

Depending on how you use the service, we may collect:

  • Account data: name, email address, authentication provider, provider identifier, profile image and account timestamps.
  • Authentication data: email-verification status, sign-in method, session identifiers and security events. Passwords are handled by our authentication provider and are not available to MOOON in readable form.
  • Technical data: IP address, browser and device information, approximate location derived from IP, timestamps, cookie or local-storage identifiers, and diagnostic logs.
  • Communications: information you send when requesting support, exercising a privacy right or reporting a security concern.
  • Demonstration activity: mock orders, interface preferences and other simulated actions. The current platform does not execute real trades or move real assets.

If real-money services, KYC, deposits, withdrawals or custody are enabled later, we will provide an updated notice before collecting identity, financial, tax or wallet information for those services.

3. How we use data

We use personal data to create and secure accounts; provide email, OTP and Google sign-in; maintain sessions; operate and improve the service; prevent fraud, abuse and unauthorised access; answer requests; keep required records; and comply with applicable law. We process data with consent, to provide a requested service, for security and other lawful purposes permitted under applicable Indian law.

4. Google sign-in

When you choose Google sign-in, Google asks for your permission before sharing basic profile information such as your name, email address, profile image and Google account identifier. We use this information only to authenticate you, create or link your MOOON account and secure access. We do not request access to Gmail, Google Drive, contacts or other unrelated Google services.

5. Service providers and sharing

We may share data with carefully selected providers that supply authentication, database, email, hosting, security, analytics or support infrastructure. Our current authentication service is provided through Supabase, and Google processes information when you use Google sign-in. Providers may process data only to deliver their services to us, subject to their contracts and applicable law.

We may also disclose information where required by law, to protect users or the service, in connection with a corporate transaction, or with your direction or consent. We do not sell personal data.

6. Cookies, sessions and storage

We use essential browser storage and similar technologies to keep you signed in, remember interface preferences and protect the service. Authentication tokens may be stored on your device and refreshed while your session remains active. You can sign out to end the current session and can clear browser data through your browser settings.

7. Retention and security

We retain account and security information for as long as your account is active and thereafter only for legitimate security, dispute-resolution, record-keeping or legal purposes. Retention periods vary by data category. We use access controls, encrypted transport, authentication controls and monitoring designed to protect information, but no internet service can guarantee absolute security.

8. Your choices and rights

Subject to applicable law, you may request access to, correction of or deletion of your personal data; withdraw consent where processing relies on consent; ask how your data is handled; or raise a grievance. To request account deletion or exercise a privacy right, email us from the address connected to your account. We may verify your identity before completing the request.

9. Children

MOOON Exchange is intended only for persons aged 18 years or older. We do not knowingly offer accounts to children. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

10. International processing

Some technology providers may process or store information outside India. Where this occurs, we use contractual and technical safeguards appropriate to the service and applicable law.

11. Changes to this policy

We may update this policy as the service, providers or legal requirements change. We will publish the revised policy with a new “Last updated” date and provide additional notice where required.

12. Contact and grievance requests

Email: noreply@mooon.exchange

Address: To the Moon Technology Private Limited, House No. 558, Awas Vikas Colony, Gundaghat, Gorakhpur, Uttar Pradesh, India.