Privacy Policy

Last Updated: 09.23.2025

At Moonnox, Inc. (“Moonnox”, “Company”, “we”, “our” or “us”), we value your trust. We are committed to acting responsibly when we collect, use and protect your non-personal and personal information.

We believe in being clear and open about how we collect data related to you when you visit our website at moonnox.com (“Website”), subscribe to and/or purchase our enterprise-grade AI platform designed for professional services firms and system integration providers enabling organizations to build, deploy and manage AI-powered agents that integrate with their business systems and data, subscribe to our newsletter, interact with us, participate in online advertisements or marketing emails, or engage with any other websites, pages, features, tools, or content we own, operate and/or provide (collectively with the Website the “Services”) that direct you to this Privacy Policy (“Privacy Policy”).

This Privacy Policy does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company that does not direct you to this Privacy Policy or any third party (including our affiliates and subsidiaries); or
Any third party [(including our affiliates and subsidiaries)], including through any application or content (including advertising) that may link to or be accessible from or through the Website.

Federal and state laws say that we must tell you how we collect, share and protect your personal information. This Privacy Policy is designed to help you understand how we collect, use, share and safeguard the information you provide to us and to assist you in making informed decisions when using our Services. Please read this Privacy Policy very carefully.

This Privacy Policy governs the processing of Personal Information in the United States, the European Economic Area (EEA), the United Kingdom, Australia, and other jurisdictions where we operate. We will update this Policy as needed to reflect changes in our data practices. By using the Services, you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

In this Privacy Policy you will find information about:

Types Of Information We Collect
Children’s Online Privacy Protection Act (“COPPA”)
Information You Provide Us
Collected via Technology
Use of Your Personal Information
Use of Non-Personal Information
How We Share Your Personal Information
Your Rights Regarding the Use of Your Personal Information
How to Exercise Your Right(s)
How We Protect Your Personal Information and Personal Data
How we Retain Your Personal Information
Accessibility
Changes to This Privacy Policy
Other Jurisdictions
Notice to Residents of the European Union, the European Economic Area, United Kingdom, and Australia.
Notice to Residents of Australia
Notice to Residents Outside of the United States, EU, EEA, UK, and Australia .
Contact Information

1. Types of Data We Collect

We collect “Non-Personal Information” and “Personal Information” and the information we collect from you depends on how you use the Services. “Non-Personal Information” includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. “Personal Information” means data that allows someone to identify or contact you, including, for example, your name, address, telephone number, email address, as well as any other non-public information about you that is associated with or linked to any of the foregoing data. This includes:

| Context | Types of Data | Primary Purpose for Collection and Use Data | |:----------------------------------:|:-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:|:------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------:| | Website User Information | We collect the name, if stated, and email address if a user contacts us as well as communication preferences. | We have a legitimate interest in contacting our customers and communicating with them in relation to the Services. | | Account Information | If you set up an account through the Websites, we collect your: name role / title mailing address phone number email address, billing information and purchase history IP address | We have a legitimate interest in contacting our customers and communicating with them in relation to the Services. | | Cookies and Third Party Tracking | We participate in behavior-based advertising, this means that a third party uses technology (i.e.: a cookie, pixel or ‘LAL’) to collect information about your use of the Service so that they can provide advertising about products and services tailored to your interests. | We have a legitimate interest in engaging in behavior-based advertising, capturing website [and mobile application] analytics and engaging third parties to assist with providing Services to you. | | Email Interconnectivity | If you receive email from us, we may use certain tools to capture data related to when you open our message, click on any links or banners it contains and make purchases. | We have a legitimate interest in understanding how you interact with our communications to you. | | Feedback/Support | We collect personal data from you contained in any inquiry you submit to us regarding the Services, calling or emailing for the purposes of general inquiries, support requests, or to report an issue. | We have a legitimate interest in receiving, and acting upon, your feedback, issues, or inquiries. | | Mailing List | When you sign up for one of our mailing lists, we collect your name and email address. | We share information about our products and services with individuals who have provided their consent to receive such information through interactions on our website. In addition, we have a legitimate interest in sharing information about our products and services. | | Website & Application Interactions | We use technology to monitor how you interact with the Services. This may include: IP addresses, preferences, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors). | We have a legitimate interest in understanding how you interact with the Services to better improve the Services, and to understand your preferences and interests and select offerings that you might find most useful. We also have a legitimate interest in detecting and preventing fraud. | | Logs | We collect information, including your browser type, operating system, Internet Protocol (“IP”) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors. | We have a legitimate interest in monitoring networks and the visitors to our Website and access and use of the Services to provide the Services and enhance the Services. | | Surveys | When you participate in a survey, we collect information that you provide through the survey. If the survey is provided by a third-party service provider, the third party’s privacy policy applies to the collection, use, and disclosure of your information. | We have a legitimate interest in understanding your opinions and collecting information relevant to our organization and the Services. |

‍

2. Children’s Online Privacy Protection Act (“COPPA”)

Our Services are not directed to, and we do not knowingly collect personal information from, children under the age of 13. If you are under 13, please do not provide any personal information through our Sites or Services. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will delete that information as quickly as possible.

3. Information You Provide to Us

We collect Personal Information from you listed in Section 1 above.
If you provide us feedback or contact us via email, we may collect your name, if stated, and email address, as well as any other content included in the email, in order to send you a reply.
We will maintain the information you send via email in accordance with applicable laws and regulations.
In compliance with the CAN-SPAM Act, all emails sent from our organization will clearly state who the email is from and provide clear information on how to contact the sender. In addition, all email messages will also contain concise information on how to remove yourself from our mailing list so that you receive no further e-mail communication from us.

4. Collected via Technology

In an effort to improve the quality of the Services, we reserve the right to track information provided to us by your browser or by our software application when you view or use the Services, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to the Services, the time and date of access, and other information that does not personally identify you.

We use trusted third-party service providers to help operate, secure, and maintain our services. These providers only access user data as necessary to perform their services and are contractually restricted from using it for any other purpose. They include:‍
- Enterprise Large Language Model (LLM) providers (such as OpenAI, Anthropic, and Google) that power AI responses. These providers agree not to store or train on customer data sent via API.‍
- Cloud hosting and backup providers (such as AWS and Google) that host our production infrastructure and securely store encrypted backups, replicated across multiple U.S. regions.‍
- Logging and analytics provider that supports monitoring, security anomaly detection, and troubleshooting.

‍5. Use of Your Personal Information

In general, Personal Information you submit to us is used either to respond to requests that you make, or to aid us in serving you better. We use your Personal Information in the following ways:

to facilitate the creation of and secure your account
to provide you Services as you requested;
to identify you as a user in our system;
to provide improved administration of the Services;
to improve the quality of experience when you interact with the Services;
to send you administrative email notifications, such as security or support and maintenance advisories;
to perform marketing or data analysis;
to comply with legal obligations, as part of our general business operations, and for other business administration purposes; and
in very limited circumstances where we believe necessary to investigate, prevent or act regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person or violations of this Privacy Policy.

6. Use of Non-Personal Information

In general, we use Non-Personal Information to help us improve the Services and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Services. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

7. How We Share Your Personal Information

As a general rule, we do not sell, rent, lease or otherwise transfer any information collected either automatically or through your voluntary action. We may disclose your Personal Information as described below and as described elsewhere in this Privacy Policy.

Third Party Service Providers. We may share your Personal Information with third party service providers to provide you with the Services that we offer you; to conduct quality assurance testing; to perform marketing; to run data analysis; to facilitate creation of accounts; to process your payment; to provide technical support; and/or to provide future services to you. Prior to engaging any third-party service provider, Moonnox performs due diligence to evaluate their defensive posture and executes an agreement requiring each third-party service provider to maintain appropriate security practices.
[Integrations and Third-Party Services. We integrate third-party Application Programming Interface (“API”) in connection with the Services that we offer you. The information we collect when using the API, is processed in compliance with this Privacy Policy. Information collected by third-party API partners is governed by their privacy policies and Moonnox does not own or control those third parties.
Business Transfers. If (i) Moonnox is acquired by, merges with, or receives investment from another company or (ii) if any of Moonnox assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we may share certain of your Personal Information with lenders, auditors, attorneys and consultants.
Other Disclosures. Regardless of any choices you make regarding your Personal Information (as described below), we may disclose Personal Information if it believes in good faith that such disclosure is necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on us; (c) to protect or defend our rights or property, or the rights or property of users of the Services; (d) to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person and/or (e) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or any agreements you may have with us, as applicable.

8. Your Rights Regarding the Use of Your Personal Information

We may send periodic promotional emails to you. You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional email. If applicable, you can also indicate that you do not wish to receive marketing communications from us in the “Notifications” section of your Account. Please note that notwithstanding the promotional preferences you indicate by either unsubscribing or opting out in the Notification section of your Account, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy. You may unsubscribe to promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process unsubscribe requests. If you unsubscribe from receiving promotional emails, we may still send you emails about the Services.

Your Rights and Choices

If applicable privacy laws allow, you may have rights over your Personal Information. This includes, but is not limited to:

Right to Know. You have the right to request disclosure about our Personal Information collection practices during the prior 12 months, including the categories of Personal Information we collected, the sources of the information, our business purposes for collecting or sharing the information and the categories of third parties with whom we shared such information. You may request a copy of the specific pieces of Personal Information we may have collected about you in the last 12 months.
Right to Delete. You may request that we delete (and direct our service providers to delete) your Personal Information, subject to certain exceptions.
Right to Opt-Out. You have the right to opt-out of any ‘sales’ of your Personal Information, if a business is selling your information. For clarity, we do not sell your Personal Information.
Non-Discrimination. You have the right to not be discriminated against for exercising these rights.

You can make the following choices regarding your Personal Information:

Access To Your Personal Information. You may request access to your Personal Information by contacting us at the address below. If required by law, upon request, we will grant you reasonable access to the Personal Information that we have about you. We will provide this information in a portable format, if required. Note that California residents may be entitled to ask us for a notice describing what categories of Personal Information (if any) we share with third parties or affiliates for direct marketing.

Changes To Your Personal Information. We rely on you to update and correct your Personal Information. Please contact us at the address below immediately if there are any changes to your Personal Information. Note that we may keep historical information in our backup files as permitted by law.

Deletion Of Your Personal Information. Typically, we retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law, or as otherwise described in this Privacy Policy. You may, however, request information about how long we keep a specific type of information, or request that we delete your Personal Information by contacting us at the address below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
Objection to Certain Processing. You may object to our use or disclosure of your Personal Information by contacting us at the address below.
Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include ‘Do Not Track’ instructions.
Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you communications related to your use of the Services and administrative purposes for reasons such as providing you with updates to this Privacy Policy.
Revocation Of Consent. If you revoke your consent for the processing of Personal Information, we may no longer be able to provide you Services. In some cases, we may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. You may revoke consent to processing (where such processing is based upon consent) by contacting us at the address below.

9. How to Exercise your Right(s)

You may enquire about your Personal Information by contacting us as described below in Section 18. Moonnox will generally respond to all access requests within 30 days of the receipt of all necessary information. We will need to verify your identity before providing you with the Personal Information we hold about you. In circumstances where we are not able to provide access, or if additional time is required to fulfill a request, we will advise you in writing.

In certain circumstances, such as where the request is excessive or unfounded, we may charge you an administration fee for access to your Personal Information. We may also charge for additional copies. We will advise you of any fees before proceeding with a request.

You may learn more about the process or obtain assistance in completing an access request by contacting us as described below. Note that, as required by law, we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name or other account information. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete Personal Information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us. If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:

A completed written notice indicating that you have authorization to act on the consumer’s behalf signed by you and the consumer.
If you are a business, proof that you are registered with the appropriate Secretary of State to conduct business in that state.

If we do not receive this information, the request will be denied.

10. How We Protect Your Personal Information and Personal Data

We implement security measures designed to protect your information from unauthorized access, alteration, disclosure and/or destruction. Because the internet is not a completely secure environment, we cannot warrant the security of any information a user transmits to us or guarantee that information on the Services may not be accessed, disclosed, altered, and/or destroyed by breach of any of our physical, technical and/or managerial safeguards. Any account you have In connection with our Services is protected by your account password and we urge you to take steps to keep your Personal Information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures; however, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. While we use reasonable efforts to protect your Personal Information, we cannot guarantee the Services are absolutely secure.

11. How we Retain Your Personal Information

We will retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise periods for which we keep your Personal Information vary depending on the nature of the information and why we need it. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use and/or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances we may anonymize your Personal Information (so that it can no longer be associated with a user) for research or statistical purposes in which case we may use this information indefinitely without further notice. We may retain information (including without limitation your personally identifiable information) for a commercially reasonable time for backup, archival, audit purposes, and/or to comply with legal obligations, resolve disputes and enforce agreements. In some cases, if you choose not to provide us with requested information, you may not be able to use the Services. You can request further details of retention periods for different aspects of your Personal Information by contacting us.

Please note that in the course of providing the Services, we collect and maintain aggregated, anonymized, or de-personalized information which we may retain indefinitely.

12. Accessibility

If you are visually impaired, you may access this Privacy Policy through your browser’s audio reader.

13. Changes to This Privacy Policy

We reserve the right to change this Privacy Policy or any agreement you entered into with Moonnox from time to time. When we make changes, we will update the “Last Updated” date at the top of this policy.

If the changes are material, we will provide additional notice, such as through email or within the platform. We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Other Jurisdictions

Personal Information that you submit through the Services may be transferred outside of the jurisdiction in which you live. We also store Personal Information locally on the devices you use to access the Services. Your Personal Information may be transferred to other jurisdictions that do not have the same data protection laws as the jurisdiction in which you initially provided the information. The following provisions may apply to you depending on where you are located.

Nevada

This Policy is provided to you pursuant to state law. Nevada state privacy laws permit us to make marketing calls to existing users, but if you prefer not to receive marketing calls, you may be placed on our internal opt-out list by emailing us at legal@moonnox.com or you may also contact the Nevada Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Ste 3900, Las Vegas, NV 89101; telephone 702-486-3132; email: AGCinfo@ag.nv.gov.

Vermont

In accordance with Vermont law, we will not share information we collect about you with companies outside of Moonnox except as described in this Policy, or otherwise required or permitted by law.

Virginia

This Section is only applicable to you if you are a resident of the state of Virginia (“Virginia Residents”). If you have a complaint, first contact us at legal@moonnox.com. We will respond within 45 days after receipt of your request, and such time may be extended for an additional 45 days if it is reasonably necessary. We will notify you of any extension within the initial 45-day period. If you are not satisfied with our responses, you have the right to appeal. We will respond within 60 days of receipt of your appeal. If you still have an unresolved complaint, please direct your complaint to the Virginia Attorney General at service@oag.state.va.us or call (804)786-2071.

California

At this time, California Privacy laws (California Consumer Privacy Act, California Privacy Rights Act) do not apply to us, but we will still protect your Personal Information as outlined in this Privacy Policy.

15. Policy to Residents of the European Union, the European Economic Area and the United Kingdom

This Policy is meant to supplement our Privacy Policy. If you reside in the European Union (“EU”) or the European Economic Area (“EEA”), the European Union General Data Protection Regulation (“GDPR”) will apply to how we collect and process your “Personal Data”, which is defined as “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.” If you reside in the United Kingdom, the United Kingdom Data Protection Act 2018 (“UK GDPR”) will apply to how we collect and process your Personal Data.

The Personal Data we collect and process, as described in this Privacy Policy, may be transmitted or transferred to countries other than the country in which you reside. Those countries may have data protection laws that are different from the laws of your country.

The data centers for the Services are located in the United States, and third-party processors operate in many countries around the world. When we collect your Personal Data, we may process it in any of those countries.

We have taken appropriate steps and put safeguards in place to help ensure that your Personal Data remains protected in accordance with this Privacy Policy.

We also require that third-party processor to whom a data transfer is made has appropriate safeguards in place to protect your Personal Data, in compliance with applicable data protection laws. The particular measures used will depend on the processor, and our agreements with them may include but are not limited to the European Commission approved Standard Contractual Clauses, UK International Data Transfer Agreements and /or reliance on the processor’s Binding Corporate Rules, as defined by the European Commission.

Legal Basis For Processing

We primarily utilize your consent for lawfully using your Personal Data. We may also use your Personal Data lawfully and fairly based on any of the following situations:

to fulfill a contract that you are a party to, and you requested to enter into;
to fulfill a compliance obligation we are subject to; or
our legitimate interests which do not override the rights and freedoms given to you under the GDPR.

In addition to your rights described in our Privacy Policy, you have the following rights:

Right to be informed – about how your Personal Information is being processed.
Right of access – to the Personal Information we hold about you. You have the right to request copies of your Personal Information. We may charge you a small fee for this service.
Right to rectification – to have your Personal Information corrected if it is inaccurate and to have incomplete Personal Information completed.
Right to erasure – this means that under certain circumstances, you have the right to request we remove your Personal Information from our system.
Right to restrict processing – this means that in certain conditions you have the right to restrict processing of your Personal Information.
Right to data portability – you have the right to request us to transfer the data that we have collected to another organization/ company, or directly to you, under certain conditions.
Right to object – this means that under certain conditions, you have the right to object to the processing of your Personal Information.
Rights in relation to automated decision making and profiling – this means that under certain circumstances you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

How to Exercise your Right(s)

We will not discriminate against you for exercising your rights. You may exercise your rights about your Personal Data by contacting us as described below in Section 17.

Once we receive your request, we will need to verify your identity before providing you with the Personal Data we hold about you. Typically, we will respond to your request within thirty (30) days. If we are unable to verify your identity, complete your request or if additional time is required to fulfill a request, we will notify you in writing.

Moonnox may not release certain types of information based upon exemptions specified in applicable laws. Where possible, we will sever the information that will not be disclosed and provide you with access to the remaining information. Should we be unable to provide access to or disclose Personal Data to you, we will provide you with an explanation, subject to restrictions. In certain circumstances, such as where the request is manifestly unfounded, excessive or repetitive, we may charge you a reasonable fee. We will advise you of any fees before proceeding with a request.

Withdrawal of Your Consent

If we used consent to lawfully and fairly use your Personal Data, you may withdraw your consent at any time by contacting us as described below. Doing so may prevent you from accessing the Website. In some cases, we may limit or deny your request to withdraw consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. If you unsubscribe from the promotional emails you will still receive emails regarding your account.

To withdraw your consent, contact us at: legal@moonnox.com.

Retention of Personal Data

As we are committed to the privacy of your Personal Data, we only hold on to Personal Data for as long as we need it to provide Services to you. We may retain limited Personal Data to meet legal or compliance obligations our Company must meet. You can request further details of retention periods for different aspects of your Personal Data by contacting us.

How to Lodge a Complaint

If you are in the EU or the EEA and have a complaint about how we use your Personal Information, you have the right to lodge a complaint with a supervisory authority. A list of the Data Protection Authorities and their contact information can be found here: Our Members | European Data Protection Board (europa.eu)

If you reside in the UK and have a complaint about how we use your Personal Information, you have the right to lodge a complaint with the Information Commissioner’s Office (“ICO”). You can find additional information on how to do so here: Make a complaint | ICO

16. Policy to Residents of Australia

This Policy supplements our Privacy Policy. If you reside in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to how we collect, use, disclose, and protect your “Personal Information.” Under Australian law, “Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether recorded in material form or not.

The Personal Information we collect and process, as described in this Privacy Policy, may be transferred to countries outside Australia, including the United States and other jurisdictions where our service providers operate. We take reasonable steps to ensure that any overseas recipients handle your Personal Information in a manner consistent with the APPs.

Your Rights Under Australian Law In addition to the rights described in our Privacy Policy, if you are an Australian resident, you have the following rights under the APPs:

Right of access – You may request access to the Personal Information we hold about you.
Right of correction – You may request that we correct any inaccurate, out-of-date, incomplete, irrelevant, or misleading Personal Information.
Right to complain – If you have concerns about how we handle your Personal Information, you may lodge a complaint directly with us (see Section [18] “How to Contact Us”), and we will respond within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). More information can be found at www.oaic.gov.au.

Retention of Personal Information We only retain your Personal Information for as long as reasonably necessary to provide our Services, comply with our legal obligations, and resolve disputes.

Withdrawal of Consent Where we rely on your consent to process your Personal Information, you may withdraw that consent at any time by contacting us.

17. Policy to Residents Outside of the United States, EU, EEA and UK, and Australia

Personal Information may be accessed by us or transferred to us in the United States or to our affiliates, business partners, or service providers elsewhere in the world. If you are located outside of the United States, the European Union (“EU”), the European Economic Area (“EEA”), the United Kingdom (“UK”), or Australia, please be advised that any information you provide to us will be transferred to and stored in the United States. By submitting information to us, you explicitly authorize its transfer and storage in the United States.

We will protect the privacy and security of Personal Information in accordance with this Privacy Policy regardless of where it is processed or stored.

Residents of the EU, EEA, and UK should also review Section 15 (Policy to Residents of the EU, EEA, and UK), which provides additional information about our legal basis for processing, international transfers, and your rights under the GDPR and UK GDPR.

Residents of Australia should also review Section 16. (Policy to Residents of Australia), which provides additional information about how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as your rights to access, correction, and complaint.

18. Contact Information

If you have any questions comments, or complaints concerning our privacy practices, please contact us by sending an email to legal@moonnox.com or send correspondence via mail to: 2045 W Grand Ave Ste B #205304 Chicago, Illinois 60612-1577.

We will attempt to respond to your request and to provide you with additional privacy-related information.