Privacy Policy

How we collect, use, and protect your information.

Last updated: March 8, 2026

MoltShell ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use MoltShell, how we use it, and the choices you have.

1. Information We Collect

We collect information you provide directly and information generated by your use of the service:

  • Account information: Your email address and display name when you sign in via Google OAuth.
  • Usage data: AI model token usage, agent activity, and session metadata to power billing and enforce plan limits.
  • Device tokens: Push notification tokens if you use our mobile app and enable notifications.
  • Billing information: Subscription and payment status managed by Stripe. We do not store your payment card details.
  • Log data: Server logs including IP addresses, request timestamps, and error information for debugging and security.

2. How We Use Your Information

  • To provide, operate, and improve MoltShell.
  • To authenticate you and manage your account.
  • To track token usage and apply the correct billing tier.
  • To send product updates and transactional notifications (you can opt out of marketing emails at any time).
  • To detect fraud, abuse, and security incidents.
  • To comply with legal obligations.

3. Data Storage & Security

Your account data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure. Your AI agent workspaces and conversation history run on ephemeral Fly.io machines with attached persistent volumes — this data is scoped to your account and not shared with other users.

We use industry-standard practices including TLS encryption in transit, access controls, and environment-based secret management. No security measure is perfect, and we cannot guarantee absolute security.

4. Third-Party Services

We rely on the following third-party services, each with their own privacy policies:

  • Anthropic (Claude) — AI model provider that processes your agent messages and any images you share. See Anthropic's Privacy Policy.
  • OpenAI (GPT) — AI model provider that processes your agent messages and any images you share. See OpenAI's Privacy Policy.
  • Supabase — Authentication and database hosting.
  • Stripe — Payment processing and subscription management.
  • Fly.io — Cloud infrastructure for running your AI agents.
  • Sentry — Error monitoring and performance tracking (anonymized where possible).
  • Google OAuth / Apple Sign-In — Sign-in authentication providers.
  • Firebase Cloud Messaging — Push notifications for the mobile app.

We do not sell your personal information to third parties, and we do not use your data to train AI models.

5. AI Agent Data

When you interact with your AI agents, the messages you send and any images you attach are transmitted to third-party AI providers — specifically Anthropic (Claude) and OpenAI (GPT) — to generate responses. Only the content you explicitly provide in your conversations is sent; we do not send background data, contacts, or other personal information to these providers.

These providers process your data in accordance with their own privacy policies and data protection practices. We do not read or store the content of your agent conversations beyond what is necessary to display them to you.

6. Your Rights

Depending on your location, you may have rights to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Export your data in a portable format.
  • Object to or restrict certain processing.

To exercise any of these rights, email us at emre@zoragrad.com. We will respond within 30 days.

7. Cookies

We use cookies and similar technologies for authentication session management. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling them may affect your ability to log in.

8. Children's Privacy

MoltShell is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, by email. Continued use of MoltShell after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at emre@zoragrad.com.