Privacy Policy | Molt AI

Molt AI Corp ("Molt AI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at moltaicorp.com (the "Site"), use our products and services, or interact with us through other channels.

1. Information We Collect

1.1 Information You Provide Directly

When you request an engagement, contact us, or create an account, we may collect:

Contact Information: Name, email address, phone number, organization, and role
Engagement Details: Information you provide in our request form, including your mandate or business needs
Account Information: Username, password (encrypted), and authentication credentials
Communications: Content of emails, messages, or other communications you send us

1.2 Information Collected Automatically

When you visit or use our Site and services, we may automatically collect:

Usage Data: IP address, browser type, device information, operating system, referring URLs, pages viewed, time spent on pages, and clickstream data
Cookies and Similar Technologies: Session cookies, authentication cookies, and analytics cookies as described in our Cookie Notice below
Server Logs: Standard server log data including timestamps, request paths, and HTTP headers

1.3 Information Collected Through Our Services

When you use our Fisher platform, Policy Agents, Secure Personal Agent, Agentic SDLC, Small Models, or other products, we may collect:

Agent Configuration Data: Configuration settings, policy rules, and integration parameters you define
Testing Data: Agent endpoints, API keys, test parameters, and vulnerability findings (for Fisher users)
Operational Data: Agent execution logs, audit trails, and performance metrics
Content Data: Documents, policies, code, or other materials you submit for processing by our agents

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain our services: Operating the Site, processing engagement requests, and delivering our products
To communicate with you: Responding to inquiries, providing customer support, and sending service-related notifications
To improve our products and services: Analyzing usage patterns, identifying issues, and developing new features
To ensure security and compliance: Monitoring for threats, preventing fraud, conducting security testing (with your authorization), and meeting regulatory obligations including EU AI Act, GDPR, and CCPA requirements
To send marketing and engagement communications: Informing you about relevant products, services, and updates (you may opt out at any time)
To fulfill legal obligations: Complying with applicable laws, regulations, and legal processes
To anonymize and aggregate data: Creating de-identified datasets for product improvement, benchmarking, and research

3. How We Share Your Information

3.1 Service Providers and Processors

We share information with third-party service providers who perform services on our behalf, including:

Cloud infrastructure providers: Hosting and computing services (e.g., AWS)
Database providers: Data storage and processing
Communication tools: Email and messaging platforms
Analytics providers: Website and product analytics
Payment processors: Billing and payment processing (when applicable)

All service providers are bound by contractual obligations to protect your information and may only use it for the purposes for which they were engaged.

3.2 Legal and Compliance Disclosures

We may disclose your information when required by law, court order, or government regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other business transaction, we may transfer information as part of that transaction, subject to the confidentiality and privacy protections described in this policy.

3.4 We Do Not Sell Your Data

Molt AI Corp does not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement industry-standard technical, administrative, and physical safeguards designed to protect your information, including:

Encryption: Data encrypted in transit (TLS) and at rest
Access controls: Role-based access with least-privilege principles
Audit logging: Comprehensive logging of access and actions
Regular security assessments: Including adversarial testing using our own Fisher platform
Infrastructure security: Enterprise-grade cloud infrastructure with continuous monitoring
Incident response: Documented procedures for detecting, responding to, and disclosing security incidents

Despite these measures, no system can guarantee perfect security. We continuously work to improve our security posture and will notify affected users in the event of a confirmed data breach as required by applicable law.

5. Data Retention

We retain your information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:

Account data: Retained while your account is active and for 90 days after account closure
Engagement and testing data: Retained for the duration of the engagement and for 3 years thereafter for compliance and audit purposes
Server logs: Retained for 90 days
Communications: Retained for 3 years for legal and compliance purposes
Anonymized and aggregated data: May be retained indefinitely, as it cannot be used to identify you

You may request earlier deletion of your data, subject to legal retention obligations, by contacting us as described below.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for the Site to function (authentication, session management, security)
Analytics cookies: Help us understand how visitors use our Site (page views, navigation patterns)
Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Site.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to access: Request a copy of the personal information we hold about you
Right to rectification: Request correction of inaccurate or incomplete information
Right to deletion: Request deletion of your personal information (subject to legal retention obligations)
Right to restrict processing: Request that we limit how we use your information
Right to data portability: Request a machine-readable copy of your information
Right to object: Object to certain types of processing
Right to withdraw consent: Withdraw consent for processing that relies on your consent

To exercise any of these rights, contact us at privacy@moltaicorp.com.

7.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising privacy rights.

7.2 European Union and UK Residents (GDPR)

Residents of the EU and UK have rights under the General Data Protection Regulation and UK Data Protection Act. Our legal basis for processing your information includes:

Consent: Where you have provided explicit consent
Contractual necessity: Where processing is necessary to provide our services
Legal obligation: Where processing is required by law
Legitimate interests: Where processing serves our legitimate business interests and does not override your rights

For GDPR-related inquiries, our EU representative can be contacted at privacy@moltaicorp.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We take appropriate measures to ensure that cross-border transfers comply with applicable data protection laws, including through standard contractual clauses or other approved transfer mechanisms.

9. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

10. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, sending a notification to the email address associated with your account. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@moltaicorp.com
Website: moltaicorp.com
Mailing Address:
Molt AI Corp
Attn: Privacy
2950 NE 7th Ave.
Miami, FL 33137

We will respond to your request within 30 days, or as required by applicable law.