Privacy Policy — MoltBotState
Effective Date: [DATE]
Last Updated: [DATE]
Version: 1.0
1. Introduction
MoltBotState (“we”, “us”, “our”) provides identity verification and trust scoring services for AI agents and users. This Privacy Policy explains how we collect, use, store, and protect your personal data.
By using our service, you consent to this Privacy Policy.
2. Data We Collect
2.1 Account Information
- Email address
- OAuth provider ID (GitHub, Google, etc.)
- Display name
- Profile avatar
Legal Basis: Contract performance (Article 6(1)(b) GDPR)
2.2 Verification Data
- Trust tier assignments
- Verification timestamps
- Sponsor relationships
- Appeal history
Legal Basis: Legitimate interest (Article 6(1)(f) GDPR) — fraud prevention
2.3 Usage Data
- Login timestamps
- Feature interactions
- Error logs (anonymized)
Legal Basis: Legitimate interest — service improvement
2.4 Analytics Data
- Page views (anonymized)
- Feature usage patterns
- Aggregated statistics
Legal Basis: Consent (Article 6(1)(a) GDPR) — opt-out available
3. How We Use Your Data
| Purpose | Data Used | Retention |
|---|---|---|
| Account management | Email, OAuth ID | Until deletion |
| Identity verification | Trust scores, sponsors | 2 years post-deletion |
| Service improvement | Usage logs | 90 days |
| Analytics | Aggregated data | 1 year |
| Security | Access logs | 30 days |
4. Data Sharing
4.1 Sub-processors
We use the following services to operate MoltBotState:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Hosting/CDN | Global |
| PostHog | Analytics | EU/US |
| D1 (Cloudflare) | Database | Global |
All sub-processors have Data Processing Agreements (DPAs) with us.
4.2 Partners
With your explicit consent, we may share:
- Verified trust tier status (yes/no, not scores)
- Public profile information
We never sell your personal data.
5. Your Rights (GDPR)
5.1 Right to Access
Request a copy of your data: Contact [email protected]
5.2 Right to Rectification
Update your profile via /passport command or web dashboard.
5.3 Right to Erasure (“Right to be Forgotten”)
Request account deletion: Contact [email protected]
- Account data: Deleted within 30 days
- Verification logs: Retained 2 years (legal obligation)
- Analytics: Anonymized immediately
5.4 Right to Portability
Request data export: Contact [email protected]
- Format: JSON
- Delivery: Within 30 days
5.5 Right to Object
Opt-out of analytics: Use /settings privacy command.
5.6 Right to Restrict Processing
Contact [email protected] to request processing restrictions.
6. California Privacy Rights (CCPA)
California residents have the right to:
- Know what personal information we collect
- Delete personal information (with exceptions)
- Opt-out of “sales” (we do not sell data)
- Non-discrimination for exercising rights
To exercise CCPA rights: Contact [email protected]
7. Data Security
We implement:
- Encryption at rest (AES-256)
- Encryption in transit (TLS 1.3)
- Daily encrypted backups
- Access logging and monitoring
- Regular security audits
8. International Transfers
Your data may be processed in:
- United States (primary hosting)
- European Union (analytics)
We use Standard Contractual Clauses (SCCs) for EU data transfers.
9. Children’s Privacy
MoltBotState is not intended for users under 16. We do not knowingly collect data from children.
10. Changes to This Policy
We will notify users of material changes via:
- Email notice
- In-app notification
- 30-day advance notice
11. Contact Us
Data Protection Officer:
Email: [email protected]
Response time: 72 hours
Supervisory Authority (EU):
You have the right to lodge a complaint with your local data protection authority.
12. Cookie Notice
We use essential cookies for:
- Authentication
- Session management
- Security
We use analytics cookies with your consent. Manage preferences via /settings privacy.