01Who this covers
MoonFactory X (“MoonFactory”, “we”) builds and operates websites, booking platforms, and reporting for its clients. [LEGAL ENTITY NAME AND REGISTERED ADDRESS]
This notice covers two things: the reports served from reports.moonfactory.dev, and the internal application we use to assemble them, which connects to Google accounts belonging to our clients.
02What the application reads
With a client's explicit grant, the application requests access to that client's own Google accounts. It holds these permissions and no others:
- Google Analytics — read only. Property configuration, and traffic and engagement data for the date ranges printed on each report.
- Google Search Console — read only. Search performance data, sitemap status, and index coverage for the client's verified properties.
- Google Business Profile — where a client asks for it. Location details, performance metrics, and reviews. Google publishes no read-only permission for Business Profile; the only permission available also allows editing. We use it to read. The application contains no function that writes, and its network layer refuses any request other than a read.
The application reads data that already belongs to the client. It does not collect anything from that client's website visitors directly, and it sets no tracking of its own.
03What we do with it
We use it to produce the reports described on this host — the monthly performance report and the incident record — and to do the work those reports call for. Nothing else.
Specifically, we do not sell it, rent it, trade it, use it for advertising or ad targeting, use it to train machine learning or artificial intelligence models, or transfer it to any party other than the client it belongs to, except where required by law.
04Google user data — limited use
MoonFactory X's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data obtained through Google APIs is used only to provide and improve the reporting described here, is not transferred to others except as necessary to provide that reporting, to comply with applicable law, or as part of a merger or acquisition, is never used for advertising, and is never read by a human except with the client's express permission, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised.
05Where reports are held, and who can open them
Reports are published as static documents at unguessable addresses on this host. Each is protected by a username and password issued to the client. There is no index, no directory listing, and no search. The host is excluded from search engine indexing.
Anyone holding both the address and the credentials can open the report, so treat them as you would any other login. If you believe a link or password has been shared beyond the people who should have it, tell us and we will reissue both.
06Retention
We keep the assembled reports for the life of the engagement plus [RETENTION PERIOD], so that historical months remain available for comparison. The credentials the application uses to reach a client's Google accounts are held on our own machines, encrypted at rest, and destroyed when the engagement ends or when access is withdrawn, whichever is first.
We do not keep a separate copy of a client's raw Google data beyond what appears in the reports themselves.
07Visitors to this host
Our host records ordinary server logs — IP address, timestamp, requested path, browser user agent — for security and troubleshooting. These are retained for [LOG RETENTION PERIOD] and are not used to build a profile of anyone. This host sets no advertising cookies and runs no analytics of its own.
Typefaces are loaded from Google Fonts, which means Google receives the request for those files. Nothing else on the page calls a third party.
08Service providers
We use a small number of providers to host and deliver these pages: [HOSTING PROVIDER], [DNS / CDN PROVIDER], and Google Fonts. Each is bound to handle data only as instructed. We add no others without notice.
09Your control
A client who has granted access can withdraw it at any time, without asking us, from their Google account permissions page. Removing our account from an Analytics property, a Search Console property, or a Business Profile has the same effect. When access ends, the data stops flowing immediately.
You can ask us what we hold about you, ask for a copy, or ask us to delete it. Write to rev@moonfactory.dev and we will answer within 30 days. Depending on where you live, you may have additional rights under the GDPR, the UK GDPR, or the CCPA; we honour those requests regardless of where you are.
10Children
Nothing here is directed at children, and we do not knowingly collect information from anyone under 16.
11Changes
If this notice changes materially, we will change the effective date at the top and tell affected clients directly rather than relying on you to check.
12Contact
MoonFactory X — rev@moonfactory.dev. [POSTAL ADDRESS]