Privacy Policy.

Who we are and what this policy covers

Moon Rhino Studio, LLC, a Georgia limited liability company (“Moon Rhino,” “we,” “us,” or “our”) is an AI-native venture studio based in Atlanta, Georgia, United States. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit moonrhinostudio.com and use the features we offer there, including our published writing and encyclopedia, the Start a Moonshot intake, and MoonNet, our members’ commons (together, the “Services”).

What this policy does not cover. Moon Rhino builds and backs separate ventures and portfolio companies — for example, LiberaMD and WDMCS. Those are distinct products and, where applicable, distinct legal entities, with their own terms and privacy policies that govern your use of them. This policy covers only the Moon Rhino Studio Services described above. It also does not cover third-party websites we link to.

We are not a “covered entity” or “business associate” under HIPAA, and we are not a “financial institution” under the Gramm-Leach-Bliley Act; this policy makes no such claims. Any separately regulated product carries its own notices and obligations.

Information we collect

a. Information you provide to us

• Start a Moonshot submissions. When you pitch an idea, you may give us your name, email address, a link (such as a website or profile), and details about the opportunity — for example, the problem you understand, the customer, the market, where you’re stuck, and what you want from us. You decide what to include.
• Messages you send us. When you email us (for example, at hello@moonrhinostudio.com), we receive your email address and whatever you write.
• MoonNet account and profile. If you join MoonNet, we create an account tied to your email address. For sign-in, your email address is stored only as a cryptographic hash — a one-way fingerprint — and is not displayed in the commons. Your public profile (such as your display name, role, and what you’re building) and anything you post in the commons are visible to other members.

We do not intentionally collect sensitive personal information (such as government identifiers, financial account numbers, precise geolocation, health data, or data revealing race, religion, or similar characteristics), and we ask that you not include it in submissions or posts.

b. Information collected automatically

We keep this minimal:

• Server and security logs. Like most websites, our infrastructure processes basic technical data needed to deliver pages and keep the site secure — such as your IP address, browser type, and the pages requested. We use IP address for security and to rate-limit abuse of our forms.
• Strictly functional storage. We use a functional cookie to remember your language preference and a small amount of in-browser storage to remember, for the current session, that you’ve already seen our intro animation. These are used only to make the site work as expected.

We do not use third-party analytics or advertising SDKs, pixels, or cross-site tracking cookies.

c. Information from third parties

We do not buy personal information or acquire it from data brokers. We receive information from the service providers we use only as needed to operate the Services (for example, our email provider tells us whether a message was delivered).

d. How this maps to legal categories

For U.S. state-privacy purposes, the categories of personal information we may collect are: identifiers (such as name, email address, IP address); internet or network activity (such as basic log data); and inferences or professional information you choose to include in a pitch. We collect these from you directly and automatically from your device, for the business purposes described below.

How and why we use information

We use personal information to:

• respond to your Start a Moonshot pitch, your emails, and your requests;
• operate, maintain, and secure the Services, including MoonNet;
• generate AI-assisted responses in features you choose to use (see below);
• prevent, detect, and address fraud, abuse, security incidents, and violations of our Terms;
• comply with law and enforce our agreements; and
• communicate with you about the Services (we do not send unrelated marketing email; if we ever do, it will follow applicable law and include an easy way to opt out).

Where the laws of the European Economic Area or United Kingdom apply, our legal bases are our legitimate interests in operating and securing the Services and responding to you, performance of a contract or steps taken at your request, consent where we ask for it, and compliance with legal obligations.

We do not use your personal information for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects about you.

Data practices at a glance

How we use artificial intelligence

Some Services are AI-assisted — for example, our encyclopedia’s “explore” feature and other tools that generate a response from what you type. We want to be precise about what that means for your data:

• What is sent. When you use an AI feature, the text you submit for that feature (for example, a topic or prompt) is sent to our AI providers to generate a response.
• Who our AI providers are. We route AI requests through OpenRouter (an AI gateway) to model providers including Anthropic and Google. We may add or change providers over time and will keep this section accurate.
• What they may do with it. They process your input to produce the response and return it to us. Under the business/API terms we use, they may retain the input briefly (typically up to about 30 days) to monitor for abuse and provide the service, and then delete it.
• Training. We do not use your inputs or other personal information to train our own models. Our AI providers do not use data submitted through their business/API services to train their models, under the terms we operate on with them.

If you don’t want your text sent to an AI provider, simply don’t use the AI feature.

How we share information

We share personal information only with service providers who process it on our behalf, under contract and only to run the Services, and in the limited other cases below. We share by category of recipient:

• Hosting and content delivery — Vercel (application hosting) and Cloudflare (DNS and content delivery).
• Database — SpacetimeDB, operated by Clockwork Labs, where submissions, accounts, and commons data are stored.
• Email — Resend, to deliver messages such as MoonNet sign-in links and to relay your pitch to us.
• Artificial intelligence — OpenRouter, Anthropic, and Google, as described above.

We may also disclose information (a) to comply with law or valid legal process, or to protect the rights, safety, and security of our users, the public, or Moon Rhino; and (b) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

We do not sell your personal information, and we do not “share” it for cross-context behavioral or targeted advertising, as those terms are defined under the California Consumer Privacy Act and similar state laws. We have not done so in the preceding 12 months.

Cookies and tracking technologies

We use only strictly functional cookies and in-browser storage: a cookie that remembers your language, and a session flag that remembers you’ve seen our intro. We do not use advertising or analytics cookies, tracking pixels, or cross-site trackers.

Global Privacy Control and Do Not Track. Because we do not sell or share personal information or serve targeted advertising, there is nothing for these signals to opt you out of. Even so, we recognize and honor recognized browser opt-out preference signals, including Global Privacy Control (GPC), as a valid request to opt out of any sale or sharing, should our practices ever change.

How long we keep information

We keep personal information only as long as reasonably necessary for the purpose it was collected, and then delete or de-identify it:

• Pitches and messages — for as long as needed to consider and act on them, and for a reasonable period afterward for our records; we delete them on request.
• MoonNet accounts — for as long as your account is active; we delete your account and profile on request (email us).
• Technical and security logs — for a short period appropriate to operations and security.
• AI inputs — retained briefly by the AI provider (see above), then deleted.

How we protect information

We use administrative and technical safeguards appropriate to the nature of the information we hold, including encryption in transit, access controls, storing sign-in email addresses only as hashes, and limiting who and what can reach personal data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and any authorities as required by applicable law.

Your privacy rights and choices

Depending on where you live, you may have some or all of the rights below. We extend these choices to every U.S. user, regardless of state, as a matter of practice:

• Know / access — confirm whether we process your personal information and get a copy, along with the categories, sources, purposes, and recipients.
• Correct — fix inaccurate personal information.
• Delete — ask us to delete personal information we hold about you.
• Portability — receive a copy in a portable, readily usable format.
• Opt out of sale, “sharing,” and targeted advertising — we do none of these, but the choice is yours if that ever changes.
• Opt out of profiling in furtherance of decisions producing legal or similarly significant effects (we do not do this).
• Limit the use of sensitive personal information (we aim not to collect any).
• Non-discrimination — we will not treat you differently for exercising any of these rights.

How to exercise your rights. Email us at hello@moonrhinostudio.com with the subject “Privacy Request,” or use the contact form on the site. To protect you, we will take reasonable steps to verify your identity (typically by confirming control of the email address associated with your information) before acting. You may use an authorized agent to submit a request; we may ask the agent for proof of authorization and may still ask you to verify your identity directly.

Our response. We will respond within 45 days. If we need more time, we may extend by another 45 days and will tell you why. There is no fee unless a request is excessive or repetitive, in which case we will tell you first.

Appeals. If we decline your request, we will explain why. If your state provides an appeal right (as Virginia-model states do), you may appeal by replying to our decision; we will respond in writing within 60 days. If we deny the appeal, you may contact your state Attorney General.

California, Virginia-model, and other state residents. The rights above reflect the superset created by the California Consumer Privacy Act (as amended) and the Virginia-model state privacy laws. Because we do not sell or share personal information, offer no financial incentives for personal information, and serve no targeted advertising, some obligations that apply only to businesses that do those things do not apply to us; we describe our actual practices honestly above.

Children’s privacy

The Services are intended for adults. You must be at least 18 years old to use them. The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us personal information, contact us at hello@moonrhinostudio.com.

Users outside the United States

Moon Rhino operates in the United States, and the Services are hosted and administered in the United States. If you access the Services from outside the United States, your information will be processed in the United States, where privacy laws may differ from those in your location. By using the Services, you understand that your information will be handled as described in this policy. The Services are intended for a U.S. audience; we do not target the Services to, or monitor the behavior of, individuals in the European Economic Area or the United Kingdom. If you are in one of those regions and contact us, we will handle your information consistently with this policy and applicable law.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. We will not retroactively apply materially different, less protective practices to information we already collected without giving you notice and, where required, obtaining your consent. Your continued use of the Services after an update means you accept the revised policy.

How to contact us

Questions, requests, or concerns about this policy or your information:

Moon Rhino Studio, LLC
285 W Wieuca Rd NE, STE 68017
Atlanta, GA 30342, USA
Email: hello@moonrhinostudio.com
See also our Terms of Service.