What Moat holds, why, where,
and how you take it back.

Updated 30 September 2026 · Clean Design Company, India

Moat is a service of Clean Design Company. It reads the conversations, calendar, meeting transcripts and, with your consent, the mail you connect, and keeps a working memory of your work so it can brief you, draft for you, and act only on your word. This page says what we hold, why, where, for how long, and how you take it back. It is the same policy as the one inside the app at app.moat.works/privacy.

What we collect

• Account. Your name and email address from Google sign-in.
• What you connect or upload. Transcripts you upload or that arrive from Fireflies or Google Meet; your calendar events; Gmail threads, only after you connect Gmail; and the notes you write to Moat in the app or over Telegram.
• What Moat writes from it. Pages of what is known, a journal of what happened, a ledger of what is owed, the questions it holds for you, drafts, briefings, and the notes it keeps on how you like to be served.
• Operational logs. Request paths, error traces without content (Sentry), and usage counters per workspace.

Google user data

When you connect a Google account, Moat asks for these permissions and uses each for one thing:

• Sign-in (openid, userinfo.email): who you are, and which workspace is yours.
• Google Calendar (calendar.readonly, calendar.events): reads your events to prepare you before a meeting and to see what is coming; writes an event only when you ask for a hold, and asks before the first one.
• Google Meet (meetings.space.readonly): reads the transcripts of your own recorded meetings after they end.
• Gmail, read (gmail.readonly): reads the threads people write to you, a few times a day, and files what changed: who owes what, what moved on a page. Automated mail — receipts, notifications, newsletters — is read past and filed nowhere unless it names money, a date, or a person you hold.
• Gmail, compose (gmail.compose): writes drafts of replies you owe into your own mailbox, threaded to the conversation. Nothing is sent unless you approve sending, and the first time Moat asks.

We use Google user data only to provide Moat's features to you. We do not use it for advertising, we do not sell it, and we do not share it with anyone outside the processors named below. No person at Clean Design Company reads it except with your permission, to fix a fault you report, or where the law requires. It is not used to develop, improve, or train generalised artificial-intelligence or machine-learning models. The model that reads your material (Gemini, on Google Cloud Vertex AI) processes it to serve you and does not train on it.

Moat's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Where it lives

Records live in Postgres hosted by Neon (AWS, US East); files in Google Cloud Storage (United States); the service runs on Google Cloud Run (us-central1). Everything is encrypted in transit and at rest. Each workspace is isolated by its own id, and the API refuses any read across workspaces.

Processors

• Google Cloud Platform — hosting, storage, and Vertex AI inference.
• Neon — managed Postgres.
• Google Identity — sign-in.
• Cloudflare — hosting of the web app and this site.
• Sentry — error reporting; stack traces only, never content.
• Telegram — only the messages you exchange with Moat's bot, if you use it.

How long we keep it

While your account is active. Disconnecting Google Calendar, Meet or Gmail in Settings deletes the access tokens at once and stops all reading. What Moat has already read stays in your workspace until you delete it, because that memory is the service. When you delete your workspace, records leave Postgres and files leave Cloud Storage within 7 days, and backups within 30 days.

Deleting and revoking

• Disconnect any Google account in Settings → Integrations. You can also revoke Moat at myaccount.google.com/permissions; Moat stops reading at its next attempt.
• To delete your workspace, or any part of it, email pk@cleandesign.company. We act within 7 days and confirm. Export and delete controls inside the app are on their way; until they ship, email is the door.

Your rights

You may ask for a copy of your data, a correction, or deletion at any time, by the same address. We answer within 7 days.

Children

Moat is for working professionals and is not directed at anyone under 16.

Changes

We may update this policy. Material changes are announced in the app, and the date at the top moves.

Contact

Clean Design Company, India. pk@cleandesign.company