Privacy Policy

We collect the following categories of personal information.

Information you give us

• Contact form submissions: your name, email address, and the message you write.
• Waitlist and eligibility submissions: your first and last name, email address, phone number, service address and unit number, the approximate coordinates of that address, whether you rent or own, the number of units in your building, your tenancy type, your relationship to the property owner, your parking situation, your electric vehicle status, your expected timeline, your utility provider, your disadvantaged community attestation, whether you are asking for yourself or someone else, and any comments you add. We also store the eligibility result we compute from those answers and the reasons behind it.
• Communication preferences: whether you opted in to email updates or to text messages.
• Support and scheduling correspondence you send us by email, text, or phone.

Information we receive when you sign in

• Identity claims from your chosen sign in provider, described in the Google User Data section below.
• Session records such as sign in time and the property or properties your account is associated with.

Information collected automatically

• First party analytics events: pages viewed, the page that referred you, which sections of a page came into view, and how long you spent on them.
• A randomly generated visitor identifier stored in your browser, plus a per tab session identifier. Neither contains your name or email address.
• With each batch of those events, our server stores your full browser user agent and a one way hash of your IP address. We use them to remove duplicate events, to work out roughly what part of the world a visit came from, and to detect abuse. We do not store your raw IP address alongside these events.
• QR flyer scans: if you scan one of our flyers, we record which flyer it was, when it was scanned, your browser user agent, and a one way hash of your IP address.

Information third parties collect in your browser

• Address autocomplete is provided by Google Maps Platform. When you type into an address field, the characters you have typed so far are sent to Google so it can suggest matches. This happens as you type, before you submit anything.
• Maps are rendered by Mapbox. Mapbox GL stores its own anonymous identifier in your browser and sends usage events, including your IP address, to Mapbox.
• Both providers handle that data under their own privacy policies, not ours.

Charging information

• If you use a Moon Five charger, we record charging session data such as start and stop times, energy delivered, charger and connector identifiers, and fault or diagnostic codes reported by the equipment.

We do not intentionally collect government identifiers, payment card numbers, precise real time location, biometric data, or any special category of sensitive personal information through this website.

You can sign in to Moon Five with your Google Account. When you do, Google sends us a limited set of identity claims under the openid, email, and profile scopes. Specifically we receive your Google Account email address, whether Google has verified that address, your name, your profile picture where you have one, and the stable Google account identifier that lets us recognize you on your next visit.

We use that data for one purpose only: to create and secure your Moon Five account, and to show you the right name and email inside the product. We do not use it for advertising, we do not build advertising profiles from it, and we do not sell it. We never request access to your Gmail messages, your Google Drive files, or your Google Calendar for a resident or prospective customer account.

Separately, our internal tooling offers an opt in Google Workspace connection, intended for our own employees and contractors, that operates on the connected work account. Its scopes are broader than the sign in scopes above, so we state them plainly: it can read, send, organize and archive mail in that account, it has read only access to that account's Drive files, and it can read and manage that account's calendar events. It cannot permanently delete mail. This connection is never offered to, and never touches, a resident or prospective customer Google Account.

Moon Five's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Moon Five's access to your Google Account at any time from your Google account permissions page. Revoking access does not delete the Moon Five account itself; to delete that, email us using the address at the bottom of this page.

• To answer your question, respond to a contact request, and follow up about installing charging at your building.
• To determine whether your building qualifies for a Moon Five installation or for an incentive program, and to tell you the result.
• To create your account, authenticate you, and keep your session secure.
• To operate, monitor, and troubleshoot the charging hardware and the software that manages it.
• To send service messages such as scheduling, outage, and account notices, and, if you opted in, product updates.
• To understand which parts of the site people find useful so we can improve them.
• To detect and prevent fraud, abuse, and security incidents, and to comply with law.

We do not sell your personal information, and we do not share it for cross context behavioral advertising. We disclose it only in the following situations.

• Service providers who process data on our behalf under contract, including cloud hosting and database providers, email and text message delivery providers, the spreadsheet we export waitlist submissions to, and our customer relationship management system. They may use the data only to perform work for us.
• Mapping and address lookup providers, namely Google Maps Platform and Mapbox, which receive data directly from your browser as described above.
• Property owners, property managers, and their installers, where sharing is necessary to evaluate, schedule, permit, or complete an installation at your building. This is limited to what the project actually requires.
• Utilities and incentive program administrators, where you have asked us to pursue a rebate or program on your behalf.
• Legal and safety recipients, when we believe in good faith that disclosure is required by law, or is necessary to protect the rights, property, or safety of Moon Five, our customers, or the public.
• A successor entity, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We do not use advertising cookies, and we do not use cross site advertising trackers. We store a randomly generated visitor identifier in your browser's local storage and a session identifier in session storage so that repeat pageviews can be grouped together. If you sign in, we also store the tokens that keep you signed in. On pages that show a map, Mapbox GL stores an anonymous identifier of its own. Clearing your browser storage removes all of these and signs you out.

We keep form submissions and account records for as long as your relationship with Moon Five is active, and afterwards for as long as we need them to meet legal, tax, warranty, and dispute resolution obligations. Analytics events and QR flyer scan records are currently stored in their raw, per visit form and are not automatically expired. We are working to put a fixed retention window on them, and you can ask us to delete the records tied to you in the meantime. When we no longer need personal information we delete it or de identify it.

Data is transmitted over TLS and stored on Google Cloud infrastructure in the United States. Access to production systems is limited to staff who need it, protected by single sign on, and logged. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify affected users and regulators of a qualifying breach as the law requires.

You can ask us to access, correct, or delete the personal information we hold about you, and you can withdraw consent to marketing messages at any time by using the unsubscribe link or by replying STOP to a text message.

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information we have collected, to have it deleted, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined by that law, and we do not exchange it for money. We will not discriminate against you for exercising any of these rights.

To make a request, email privacy@moonfive.tech from the address on file, or include enough detail for us to verify who you are. We will respond within the period the applicable law allows, normally 45 days. An authorized agent may act for you with written permission.

Moon Five is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

We may update this policy as the product changes. When we do, we will revise the effective date at the top of this page, and for material changes we will give notice on the site or by email before the change takes effect.

Moon Five Technologies Inc., California, United States. Privacy questions and requests go to privacy@moonfive.tech. General questions go to hello@moonfive.tech.