Privacy Policy

Updated June 30th, 2024

Your privacy is important to us, and we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share information about you when you use our services, including our website, mobile applications, and other online products. By using our services, you agree to the terms of this Privacy Policy. We believe in transparency and want you to understand the types of information we collect and how we use it to enhance your learning experience. We collect information to provide personalized educational content, improve our services, and communicate with you effectively.

Our commitment to your privacy includes ensuring that your data is handled responsibly and in compliance with applicable privacy laws. This Privacy Policy outlines our data collection practices, the measures we take to protect your data, and your rights concerning your personal information. We implement robust security measures to safeguard your information from unauthorized access, use, or disclosure. By entrusting us with your data, you help us create a more personalized and effective learning environment, and we take this responsibility seriously.

Download a copy of this Privacy Policy (PDF)

Explore our specific privacy policies for different users and use cases:

1
What Data We Collect
Data You Provide to Us

We collect various types of data that you provide to us directly. This includes account data such as your name, email address, and password, profile data like your profile picture and bio, payment data for billing purposes, shared content you upload or post, learning data related to your course interactions, and communications and support data when you contact us for assistance.

Data Collected Automatically

When you use our services, we automatically collect certain data such as your IP address, device type, operating system, browser type and version, pages visited, time spent on pages, features used, and your general location derived from your IP address.

Data From Third Parties

We may receive information from third-party services such as social media platforms if you link your account with them, as well as from payment partners to facilitate transactions.

2
How We Use Your Data
Data Usage Purposes

We use your data and PII to:

  • Identify you as a user or visitor of our services
  • Provide, administer, and improve your use of our services
  • Communicate with you
  • Help create and secure your account for use of our services
  • Secure your account and prevent fraud
  • Personalize your experience
  • Conduct research and analysis
  • Send you a welcome email to verify ownership of an email address provided when your account was created
  • Send you administrative email notifications
  • Respond to your inquiries and requests
  • Send you information about upgrades and special offers related to our Services
  • Comply with applicable laws and regulatory requirements
  • Respond to lawful requests, court orders and legal process
  • Protect our legal interests or those with whom we do business
  • Comply with legal obligations

We may also compile statistical or anonymized, non-personally identifiable information and use or transfer such information for any purposes; provided, however, that such data has been fully de-identified and cannot be traced back to the customer or user and does not contain any personally identifiable information. We may also use such anonymized information to help train our AI models or use aggregated information publicly to show trends about the general use of our services.

Third-Party Online Analytics Services

We may use third-party online analytics services, such as those of Google Analytics. These analytics services use automated technologies to collect information (such as email address, IP address, and device identifiers) to evaluate, for example, use of our products and services and to diagnose technical issues. To learn about how Google Analytics collects and processes data, you may visit https://policies.google.com/technologies/partner-sites.

Third-Party AI Services

We utilize a mixture of Google, OpenAI, Meta’s application program interface ("API") to power the AI functionality of our products and services. While we strive to maintain the highest level of data security, we encourage you to review these API Privacy Policies separately to understand their data handling practices. We are committed to ensuring that the use of these APIs aligns with applicable data protection laws and regulations.

3
Sharing & Disclosing your data

We may disclose your data (all data categories) to third parties if we (in our sole discretion) have a good faith belief that the disclosure is:

  • Requested as part of a judicial, governmental, or legal inquiry, order, or proceeding;
  • Reasonably necessary as part of a valid subpoena, warrant, or other legally-valid request;
  • Reasonably necessary to enforce our Terms of Use, Privacy Policy, and other legal agreements;
  • Required to detect, prevent, or address fraud, abuse, misuse, potential violations of law (or rule or regulation), or security or technical issues;
  • Reasonably necessary in our discretion to protect against imminent harm to the rights, property, or safety of Moonlight, our users, employees, members of the public, or our Services;
  • Necessary to assess our disclosure obligations and rights under this Privacy Policy, to our auditors and legal advisors;
  • Required or permitted by law.
  • Necessary for our affiliates or third-party organizations to support us such as hosting providers, subcontractors, and third-party payment processors. Service providers acting on our behalf are obliged to adhere to confidentiality requirements no less protective than those set forth herein and will only receive access to your PII as necessary to perform their functions.
  • Necessary as part of a business transfer, like a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Moonlight’s assets, financing acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities (e.g., due diligence).
  • Permitted after your prior informed consent
4
We Do Not Knowingly Collect PII of Minors

We are committed to protecting the privacy of children and we do not knowingly solicit personal information from children under the age of 13 who do not have the appropriate consents to use the Website or Services in accordance with applicable privacy laws. Please do not send us more information than is required to use the Services and Website. If you are aware Moonlight is collecting information from a child under age 13 without appropriate consents, please contact your school, your school district or us immediately at support@moonlight.com.

5
Student Data

When an educational institution (“School”) makes our student-facing services available to students, Moonlight may collect and process personal information related to identifiable students (“Student Data”). Moonlight collects and uses Student Data for educational purposes only as authorized by the School and subject to its control. Moonlight enters into student data privacy agreements with individual Schools which govern our use and responsibilities for Student Data.
We process Student Data solely as directed by the applicable School under these agreements. For more information about the principles that guide our collection, use and disclosure of Student Data, please refer to our Student Data Privacy Policy and Student Data Privacy Policy Supplement.

Information Processed Under the Direction of Schools

If a school or other educational institution has registered for our services (“School”) and your PII has been collected by Moonlight as a result, Moonlight collects and processes any such PII of yours under the directions of the relevant School. If these circumstances apply to you and you wish to access, edit, delete, or exercise any rights you may have under applicable data protection laws with respect to any PII that we have collected about you, please direct your query to the relevant School as this may expedite the completion of your request. We nevertheless provide reasonable assistance to our School to give effect to data subject rights as appropriate and required by applicable laws.

6
Legal Bases for Processing Your Data

Our legal bases for processing your data include performance of a contract, legitimate interests, consent, and compliance with legal obligations.

7
Retention of Your Data

We retain your data for as long as necessary to provide our services and for other essential purposes such as compliance with legal obligations, resolving disputes, and enforcing our policies.

8
Protecting Your Data

We implement robust security measures to protect your data from unauthorized access, use, or disclosure. However, no internet-based service can be completely secure.

9
Transfer of Your Data

Your data may be transferred to and processed in countries outside of your own. We use appropriate safeguards to ensure your data remains protected according to this Privacy Policy.

10
Use of Cookies and Tracking Technologies

We use cookies and similar technologies to collect information, personalize your experience, and conduct analytics and marketing activities. You can manage your cookie preferences through your browser settings.
These technologies fall into three categories:

  • Essential Cookies: These cookies are required for basic website functionality and can't be disabled.
  • Performance Cookies: These cookies help us improve Moonlight by tracking usage data anonymously.
  • Personalization Cookies: These cookies (optional) provide a more tailored experience by remembering your preferences.
11
Your Rights & Choices

You have rights regarding your personal data, including the right to access, update, or delete your data, object to or restrict processing, and data portability. To exercise these rights, contact us at privacy@moonlight.com

Opt-Out

We offer you choices regarding the collection, use, and sharing of your PII. Where permitted by applicable law, we may periodically send you free newsletters and e-mails that directly promote the use of our products or services. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications from us and you will have the opportunity to "opt-out" by following the unsubscribe instructions provided in the e-mail you receive or by contacting us directly. Despite your indicated e-mail preferences for other matters, we may send you administrative notices such as updates to our Terms of Use or Privacy Policy and similar account notices.

Your Rights to Access, Correct, or Delete Your Personal Information

You may edit any of your PII in your account on the services, including contact information and/or notification settings, by editing your account profile or editing your data on partner databases. You may have the right to make other requests under applicable law related to your personal data in our possession, and depending on applicable law, you may have the right to appeal our decision regarding your request. Contact us at support@moonlightfocus.com if you have questions or a request regarding your personal data.

Your rights may include a right to access your personal data that we process and transfer it, correct it, delete it (erasure), restrict it or object to its sale or use for direct marketing purposes, and to not be retaliated against for exercising your rights. We will do our best to honor your requests.

You may request that we delete your account information by sending an email to support@moonlightfocus.com, but please note that we may be required (by law or otherwise) to keep this information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). Moonlight will respond to such requests within thirty (30) days or sooner if required by applicable law. When we delete account information, it will be deleted from the active database, but may remain in our archives for a limited amount of time. We will otherwise retain your information for as long as your account is active, as needed to provide you with the services you have requested, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

12
Generative AI and Data Governance
Definitions

Foundation Models: Large-scale machine learning models trained on extensive datasets for a broad range of tasks.

Adapter Models: Smaller models that enhance the performance of Foundation Models for specific tasks.

Customer Data: Defined as per Moonlight’s Terms of Service.

Training: Using data to train an ML model.

Prediction: Processing inputs with ML models to generate outputs.

Safety Classifiers: Tools to identify content categories during the Prediction process.

Foundation Model Training

By default, Moonlight does not use Customer Data to train its Foundation Models. Your prompts, responses, and any Adapter Model training data are not used for training these models.

Adapter Model Training

Moonlight allows customers to train Adapter Models. This data is Customer Data and is not used to improve our Foundation Models. Your Adapter Models are available only to you, and you can control their encryption and delete them at any time.

Prediction

Inputs and outputs processed during Prediction are considered Customer Data and are not logged without your explicit permission. By default, Moonlight caches your inputs and outputs for up to 24 hours to accelerate responses. You can manage caching settings through our API.

Opting Out

If you previously allowed Moonlight to use your data for improving pre-GA AI/ML services, you can opt out using our opt-out request form.

Learn more about our responsible AI practices and safety measures on our website.

13
California Consumer Privacy Act (CCPA) Notice

If you are a California resident, you have additional rights regarding your personal data. See our full CCPA notice for details in our downloadable Privacy Policy.

If you are a California resident, the CCPA allows you to make certain requests about your personal information. Specifically, the CCPA allows you to request us to:

  • Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information.
  • Provide access to and/or a copy of certain personal information we hold about you.
  • Delete certain personal information we have about you.
  • Provide you with information about the financial incentives that we offer to you, if any.
  • The CCPA further provides you with the right not to be discriminated (as provided for in applicable law) for exercising your rights. Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide our services to you. We also will take reasonable steps to verify your identity before responding to a request. In doing so, we may ask you for verification information so that we can match at least two verification points with information we maintain in our files about you. If we are unable to verify you through this method, we shall have the right, but not the obligation, to request additional information from you.
    Please also note that if your personal information has been collected by Moonlight as a result of a School’s (as defined above) use of our services, Moonlight collects and maintains your personal information under the directions of the relevant School. If these circumstances apply to you and you wish to access or delete any personal information that we have collected about you, please direct your query to the relevant School as this may expedite the completion of your request. We nevertheless provide reasonable assistance to our Schools to give effect to consumer choices as appropriate and required by applicable laws.

    If you would like further information regarding your legal rights under California law or would like to exercise any of them, or if you are an authorized agent making a request on a California consumer’s behalf, please contact us at support@moonlightfocus.com. The CCPA provides certain rights if a company “sells” personal information, as such term is defined under the CCPA. We do not engage in activities that would be considered “sales” of personal information under the CCPA.

    Shine the Light Disclosure: The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.Do Not Track Signals: Moonlight does not track users over time and across third-party websites and therefore does not respond to Do Not Track (“DNT”) signals from web browsers. Further, because there currently is no industry standard concerning what, if anything, a service should do when they receive such signals, we currently do not take action in response to these signals.

    14
    Other State Laws

    Data protection laws change and update frequently, and we endeavor to always comply with applicable laws where we operate. If you have any questions, concerns, or requests regarding the handling of your personal information, contact us at help@studentinfosolutions.ca. Please note we may take reasonable steps to verify your identity and the authenticity of the request. See our full state-specific privacy notices for details.

    15
    Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes and update the effective date at the top of this policy.

    16
    Contact Us

    If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: