Privacy policy
How Moolamochi uses your information, works with service providers and handles access, export and deletion requests.
Who operates Moolamochi
Moolamochi is operated by Great Lakes Computing Office LLC. This notice describes information handled for Moolamochi accounts, workspaces, the public website and support. Use the contact options below for questions about this notice or your information.
Information we use and why
We use your name, email address, account credentials, preferences and sign-in records to operate your account and protect access. Workspace information includes client contacts, projects, estimates, invoices, signatures, uploaded files, time entries and messages. We use it to provide the features you request, record approvals and payments, send service notices and respond to support requests.
Payment and subscription records include provider references, amounts, currency, billing status and relevant fees. Card details are entered in Stripe’s secure payment forms; do not enter them in Moolamochi invoice fields, chat or support messages. Security and delivery records help us prevent abuse, investigate errors and honor opt-outs.
A business using Moolamochi chooses which client information to add and which records to share. If your information was supplied by a business you work with, you can ask that business about its use of your information and contact Moolamochi support for help with the information we hold.
Optional website analytics and cookies
When website analytics is enabled, the Google Analytics tag loads on public information pages before you make a choice. If your browser reports a United States time zone and does not send a Global Privacy Control signal, analytics storage starts enabled for visitors Google locates in the United States, so Google Analytics can set analytics cookies and identifiers before you choose. Otherwise, the tag starts with analytics and advertising storage denied and sends cookieless page-view requests. Those requests can still convey page, browser, device and network information to Google. Accepting allows analytics cookies and their identifiers; rejecting stops our analytics measurement. Advertising storage, advertising personalization and advertising user data remain disabled.
Where analytics starts enabled, we do not show the cookie banner; use Cookie settings on public pages to reject analytics at any time. Elsewhere, use Cookie settings to change or withdraw your choice. We remember your choice in this browser for up to 180 days using local storage. If browser storage is unavailable, we may ask again on your next visit. Rejecting or withdrawing consent stops our analytics collection and removes accessible Google Analytics cookies; it does not delete information already processed by Google.
Our page-view events use public page paths without query strings or fragments. We do not load this tag on signed-in workspaces, client portals, payment documents or email confirmation pages. We do not send your form field values or waitlist email address in our analytics events. Essential sign-in and security storage is separate. Rejecting analytics does not prevent browsing, account use or waitlist participation.
Waitlist and launch invitations
If you join the waitlist, we use your email address to send a confirmation request. Launch updates are sent after you confirm. We keep your email address, request and confirmation times, consent and unsubscribe status, and protected confirmation-link records. Abuse-prevention records help protect the signup form.
We also use the confirmed email address to check eligibility for the waitlist subscription offer. Joining or confirming does not create a product account, start a trial or authorize a purchase. Opening an email link alone does not change your preferences: confirm or unsubscribe on the linked page. You can unsubscribe using the link in a waitlist email, and we retain the information needed to honor that choice.
Service providers and connected services
When the relevant features are enabled, Amazon Web Services (AWS) provides private file and backup storage, public asset delivery, and email delivery and processing through Simple Email Service (SES). These services receive the files, recipient details, messages or technical requests needed for the relevant feature.
Stripe processes subscription billing and client invoice payments, including payment details and transaction records. Each business connects its own Stripe account to collect client payments. Stripe also handles information under its own privacy notice and service terms.
Google or Microsoft receives information for mailbox and calendar connections you authorize. Depending on the connection, Moolamochi can read mailbox messages, send messages, read calendar availability and create or update events. Google Analytics separately receives the website analytics information described above.
When our support integration is enabled, Linear receives a support requester’s name, email address, subject, message and ticket reference so our team can handle the request and replies. Authorized support staff can read support conversations. Operational email records shared with authorized staff include recipient addresses, message types and delivery references; audit copies omit message content and access links.
AWS services in the deployment are configured in United States regions. Connected providers may process information in other countries under their own terms. Using Moolamochi from Japan does not mean your information is stored only in Japan. Contact support for questions about a particular connection or data location.
Sharing and connection choices
Workspace roles and client permissions control which records people can access. Private mailboxes require their owner’s sharing permission. Published client records, permitted payment links and authorized integrations can make information available to the recipients you choose. Treat a shared document link as confidential.
If you authorize an AI assistant or another integration, it can receive the workspace information allowed by the permissions you grant. Review those permissions and the connected provider’s data practices before approving access. Connections that can prepare drafts still require you to review the resulting work in Moolamochi.
Disconnecting a provider stops future use of that connection by Moolamochi. It does not recall messages or files already sent, erase the provider’s own records or automatically remove business history held in a workspace. You can also review and revoke access in the provider’s settings.
How long information is kept
Workspace records are kept for the service and its business history until they are deleted through the applicable process. Draft PDF previews and unfinished uploads are scheduled to expire after 24 hours. Original inbound email files can remain alongside the resulting conversation or support ticket until cleanup or the applicable deletion process removes them. Issued invoices and signature records are not removed by the temporary-file expiry rules.
The planned backup retention is 48 hours for 15-minute snapshots, 30 days for daily copies and 12 months for monthly copies. This schedule applies once backup storage is enabled. Removal from historical backups then follows that expiry schedule. Deletion records are retained to prevent deleted content from being restored when a backup is recovered.
Limited payment records, including provider references, amounts, currency and fees, can remain to handle later refunds, disputes and reconciliation. Opt-out records remain to prevent unwanted email. A workspace deletion does not automatically delete your separate account, personal support conversations or copies already held by recipients or connected providers.
Exporting and deleting information
Authorized workspace users can request exports. Only the workspace owner can request workspace deletion, which has a seven-day recovery window. The request immediately restricts access, revokes access links and stops optional future sends. It also requests subscription cancellation. Final deletion can be delayed by pending payments, refunds, disputes, payouts or unconfirmed subscription cancellation; the deletion settings show outstanding issues.
Account export and deletion are separate from workspace deletion. Before deleting your account, transfer ownership or finish deleting every workspace you own. Account deletion has a seven-day recovery period and can also be held while an outgoing private-mail result is unresolved. Canceling deletion does not automatically restore revoked connections, links or subscription renewal. Export records you need before requesting deletion.
Privacy requests and contact
Use support to request access, correction, export or deletion, or to ask about other privacy rights that apply to you. If you cannot sign in, you can contact support@moolamochi.com. We may need to verify your identity and authority before releasing or changing information. Tell us which account, workspace or message your request concerns, without including passwords or full payment card details.
The options available depend on your relationship to the information and applicable law. Records needed to resolve payments or honor another person’s rights may need separate handling. If a request concerns copies held by an external provider, tell us so we can identify the provider and the next step. The date on this page shows when this notice was last updated.
