PRIVACY POLICY
By using “To The Moon,” a service and product of Mol3cula LLC, you (“the client,” “the user,” or “your business”) agree to THE Privacy Policy described below. Please read these terms thoroughly, as they represent a legally binding agreement between you and Mol3cula LLC (“we,” “us,” “our”). Your use of To The Moon indicates full acceptance of these Privacy Policy.
1. Data Collection Overview
To The Moon, a service of Mol3cula LLC, takes privacy seriously at every stage of our client relationship. We collect a wide range of data as part of delivering, supporting, and improving our automation services. This information may include, but is not limited to, data you provide during onboarding, when creating your account, submitting forms, communicating with our team, connecting your business systems via API, or engaging with our digital tools. We also collect technical information generated automatically when you interact with our website, dashboards, or automations. We strive to ensure all data collection is transparent, purpose-driven, and compliant with applicable data privacy laws and industry standards. All data is handled in accordance with strict internal protocols designed to limit access, minimize retention, and ensure accountability throughout the lifecycle of your relationship with To The Moon.
2. Types of Information Collected
2.1. Personal Identification Information
We may collect a range of personal identifiers, such as your full name, company or business name, contact information (email, phone number, physical or mailing address), job title, and other details that can be used to identify or contact you directly.
2.2. Business and Technical Information
Depending on your use of our services, we may require information about your business, such as company size, industry, business objectives, and preferred communication channels. Technical information we collect includes API keys, integration tokens, user credentials for third-party platforms (when provided for setup), automation requirements, and unique identifiers assigned to your account or automation workflows.
2.3. Usage Data
We collect data regarding how you interact with our products, including log files, device information, browser types, user agent strings, IP addresses, interaction timestamps, navigation paths, error reports, session durations, and clickstream analytics. This information helps us monitor performance, troubleshoot issues, and optimize user experience.
We may collect a range of personal identifiers, such as your full name, company or business name, contact information (email, phone number, physical or mailing address), job title, and other details that can be used to identify or contact you directly.
2.2. Business and Technical Information
Depending on your use of our services, we may require information about your business, such as company size, industry, business objectives, and preferred communication channels. Technical information we collect includes API keys, integration tokens, user credentials for third-party platforms (when provided for setup), automation requirements, and unique identifiers assigned to your account or automation workflows.
2.3. Usage Data
We collect data regarding how you interact with our products, including log files, device information, browser types, user agent strings, IP addresses, interaction timestamps, navigation paths, error reports, session durations, and clickstream analytics. This information helps us monitor performance, troubleshoot issues, and optimize user experience.
3. Data Provided During Setup Calls and API Connections
In order to implement seamless automations tailored to your business, our team may request sensitive data such as API keys, integration credentials, or other secure platform access during an initial setup call. These sessions are conducted by our lead systems developer in a secure, private, and confidential environment. You will be guided through the process of authorizing connections to your software stack, with clear explanations of what permissions are being granted and how they will be used. We do not record, transmit, or store your credentials outside of encrypted environments. Furthermore, you retain full control over all API authorizations and can revoke access at any time through your own software provider. This collaborative, transparent process is designed to minimize risk while ensuring your automations function exactly as intended.
4. How We Use Your Data
The data we collect from you serves multiple legitimate business purposes. Primarily, we use this information to establish and manage your automations, create custom workflows, configure integrations, and provide high-quality technical support. Your data may also be used for communicating important updates, sending system notifications, addressing support inquiries, and personalizing your user experience. Internally, we analyze usage patterns and system performance metrics to enhance our platform, develop new features, improve troubleshooting, maintain security, and ensure regulatory compliance. All uses of your data are strictly related to providing, maintaining, and improving our services for you and are never for unrelated purposes.
5. Data Storage and Security Measures
Protecting your information is a top priority at To The Moon. All collected data is stored using enterprise-grade encryption, both in transit and at rest, within secure servers provided by trusted cloud infrastructure partners (such as AWS, Google Cloud, and Airtable). We employ access control policies, multi-factor authentication, network firewalls, and regular vulnerability scanning to prevent unauthorized access. Periodic audits are conducted to assess security compliance, and all data storage locations are chosen with careful regard for privacy, resilience, and legal jurisdiction. We routinely review our security architecture to address new threats and adjust our protocols accordingly, ensuring your data’s ongoing confidentiality and integrity.
6. Confidentiality and Access Control
Only authorized personnel—such as our systems developer, technical support staff, or vetted contractors—may access your sensitive data, and only for tasks directly related to service delivery or troubleshooting. All staff with access privileges are thoroughly vetted, receive privacy training, and are bound by robust confidentiality agreements that remain in effect even after termination of employment or contract. Access logs are maintained and monitored, and unauthorized access attempts are investigated with zero tolerance. Your data is never exposed to team members not directly responsible for your account, nor is it shared internally beyond what is necessary for efficient, secure service provision.
7. Third-Party Integrations and Data Processors
As part of our core service, we connect your business to a variety of third-party platforms (including but not limited to n8n, Airtable, Twilio, Softr, Stripe, and Google services). When these integrations require the transmission of your data, we ensure such providers are reputable, secure, and compliant with privacy standards such as GDPR, CCPA, and other relevant regulations. All data sharing with these processors is limited to what is strictly necessary for executing your automations, and all third-party vendors are required to maintain their own rigorous privacy and security protocols. We conduct periodic reviews of our vendor relationships and promptly address any concerns about third-party data handling or breaches.
8. Data Sharing Policy
To The Moon maintains a strict policy against the sale, rental, or unauthorized transfer of your personal, business, or technical information to any unrelated third parties. Data is only disclosed to external service providers, auditors, or legal authorities as necessary to fulfill contractual obligations, comply with law, or resolve disputes. We may share information with our business partners or affiliates only with your explicit consent, and always with clear disclosures. Any request for data by an external party is carefully reviewed by our legal counsel and only acted upon if required by valid legal process or for purposes directly related to service provision.
9. User Access and Control
As a user or client, you have full rights to access the data we store about you and your business. You may request an overview, correction, update, or deletion of your personal information at any time. For security, we require all such requests to originate from your official business contact email or verified identity. Some modifications or deletions may be subject to legal or contractual retention requirements, but we will always explain these limitations transparently. We provide simple, straightforward processes for exercising your data rights, and we respond promptly to all legitimate user requests in accordance with applicable law.
10. Data Retention
Data collected by To The Moon is retained only as long as necessary for the fulfillment of your services, compliance with our legal and financial obligations, or for the resolution of disputes. Once you terminate your account or end your relationship with us, you may request that your data be deleted from our systems. However, certain information may need to be retained for a defined period (e.g., for accounting, regulatory, or audit purposes). We regularly review our data stores and securely delete or anonymize information that is no longer required, ensuring your data is not held longer than absolutely necessary.
11. Cookies and Tracking Technologies
Our websites and dashboards may use cookies, tracking pixels, and related technologies to enhance your browsing experience, analyze website performance, and tailor services to your needs. Cookies may store preferences, authentication states, session data, and anonymous analytics. You may adjust your browser settings to refuse some or all cookies; however, this may result in reduced website functionality or limit your ability to access certain features. Full details about cookie usage, including options for consent and management, are disclosed in our Cookie Policy, available on request or on our website.
12. API Connections and Security
Connecting your business applications to To The Moon’s automations often requires sharing API keys, integration credentials, or access tokens. Our onboarding process includes a secure setup call, where you are guided step-by-step through the process of connecting your accounts in real time. At no point are your raw credentials stored in plaintext, emailed, or shared outside encrypted channels. We only retain API tokens in secured, encrypted environments, and solely for the duration of your service. You have the right and technical ability to revoke or change API keys at any time, and we encourage regular review of permissions as a best practice. Any API connection is used strictly for the specific automations you request, and never for unrelated access or external projects.
13. Transparency and Consent
We are committed to transparency in every data-related interaction. Before collecting sensitive information, you will always be informed of what is being collected, why it is necessary, and how it will be used. Your informed consent is required for any new or expanded data collection outside the original service scope. Where possible, we offer granular choices about what information you share, and we honor your preferences. Any major changes to our privacy practices will be communicated clearly, with opportunities for you to review and consent before new terms take effect.
14. Data Processing by Contractors and Subprocessors
To The Moon sometimes works with carefully selected contractors, technical consultants, or subprocessors to help deliver, maintain, or support our automations. Any individual or organization that processes your data on our behalf is subject to strict confidentiality agreements, privacy vetting, and contractual obligations that ensure they follow the same standards described in this Privacy Policy. We never authorize third parties to use your data for their own purposes, and we continuously monitor their compliance with our requirements. A current list of approved subprocessors is available upon request.
15. International Data Transfers
Because To The Moon’s operations, infrastructure, and service providers may be located in different countries, your data could be transferred to, stored in, or processed outside your home jurisdiction. Whenever international data transfers are required, we implement safeguards to protect your privacy rights, such as standard contractual clauses, adequacy decisions, or explicit user consent as required by law. All partners and subprocessors receiving data must adhere to equivalent or stronger privacy protections, regardless of geographic location, to ensure your data is treated with respect and security wherever it resides.
16. Security Breach Notification and Incident Response
In the unlikely event of a data breach, system compromise, or unauthorized access to your information, To The Moon will act swiftly to identify, contain, and mitigate the impact. We have formal incident response procedures that include immediate technical investigation, documentation, and notification of affected users. If required by law or contractual commitment, you will be notified promptly, with clear details of what occurred, what information was affected, and what steps are being taken to protect you. We will cooperate fully with regulators and take all reasonable measures to prevent future occurrences.
17. Data Portability
Upon request, you are entitled to receive a structured, commonly used, and machine-readable export of your personal and business data held by To The Moon. This right to data portability ensures you retain control over your information and can migrate to other providers if you wish. We provide these exports free of charge, within a reasonable timeframe, and in a secure format. Certain proprietary system data or aggregated analytics may be excluded, but all core user data is available for export as mandated by law and best practice.
18. Automated Decision-Making and Profiling
Some features of To The Moon may include automated decision-making or profiling—for example, to segment your leads, optimize workflow triggers, or suggest improvements to your automations. Any such processing is always transparent, non-discriminatory, and subject to human review. You have the right to request further information about any automated processes that affect your business and to challenge or request manual review of decisions where feasible.
19. Data Anonymization and Aggregation
To The Moon may occasionally anonymize and aggregate user data for the purposes of analyzing usage trends, improving our services, developing benchmarks, or publishing research insights. All such data is stripped of direct identifiers and cannot be linked back to you or your business. Aggregated insights are used internally or may be shared publicly for marketing or reporting purposes, but never in a way that compromises individual privacy or business confidentiality.
20. Policy for Minors and Children
To The Moon is a business service and is not intended for individuals under the age of eighteen (18). We do not knowingly collect, process, or retain personal data from minors. If we become aware that we have inadvertently received information from a child or minor, we will promptly delete it from our records and take appropriate steps to prevent further collection. If you believe a minor has submitted personal data to us, please contact our support team immediately so we can resolve the matter.
21. Legal Basis for Processing Data
Our processing of your data is justified by one or more legal bases, including your explicit consent, the necessity of fulfilling our service agreement, compliance with legal obligations, and our legitimate business interests (such as ensuring platform security, maintaining quality, and improving services). When consent is required, it is always clear, specific, and freely given; you may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
22. Privacy Policy Changes and Updates
We may occasionally update or revise this Privacy Policy to reflect changes in law, technology, business practices, or user feedback. When significant changes are made, we will notify you via email or website announcement, and provide the opportunity to review the new terms. Continued use of To The Moon’s services after an update constitutes your acceptance of the revised policy. We always include an effective date and change log for your reference, and previous versions are available upon request for audit purposes.
23. Policy on Government Requests and Legal Process
To The Moon respects your privacy and will only disclose user data to governmental authorities when required by law, such as in response to subpoenas, court orders, or legal investigations. All requests are carefully reviewed for validity and scope; we challenge overbroad or unlawful demands whenever possible. Unless legally prohibited, you will be notified before any such disclosure, allowing you the opportunity to contest or seek legal recourse. We are committed to transparency and accountability in all interactions with authorities.
24. Use of Cookies and Tracking Technologies
Our website and dashboard may use cookies, web beacons, pixels, and similar tracking technologies to provide essential functions, analyze usage patterns, personalize your experience, and improve security. All non-essential cookies require your consent, and you can manage preferences at any time via your browser or provided tools. Detailed information about the types of cookies and their purposes is available in our separate Cookie Policy, which supplements this Privacy Policy.
25. Data Protection Officer and Contact
We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and compliance. If you have questions, concerns, or requests regarding your data or privacy, you may contact our DPO directly at privacy@tothemoonspace.com. All communications are handled confidentially, and we strive to resolve all matters promptly and professionally.
26. Data Storage, Retention, and Deletion Policy
Your information is stored securely in encrypted databases, hosted on reputable cloud infrastructure providers with strong security certifications. Data is retained only as long as necessary for the purposes described in this policy, or as required by law, contract, or regulatory obligations. Upon service termination, your personal and business data will be deleted or irreversibly anonymized within 60 days, except where longer retention is required by law. You may also request early deletion at any time, subject to verification and applicable contractual terms.
27. Business Transfers and Change of Ownership
In the event that To The Moon, Mol3cula LLC, or substantial assets are acquired, merged, or sold to another entity, your data may be transferred as part of that transaction. You will be notified well in advance of any such change, and the successor entity will be required to honor the commitments made in this Privacy Policy. If your data is to be handled under a materially different policy, you will be given the opportunity to opt out or request deletion before the transfer takes place.
28. Limitation of Liability for Data Handling
While To The Moon employs best-in-class security practices, no online system is immune to all risks. We expressly disclaim liability for indirect, incidental, or consequential damages arising from unauthorized access, data loss, or breaches beyond our reasonable control. In any event, our aggregate liability for data-related claims shall not exceed the amount paid by you for services in the twelve (12) months prior to the claim, except where otherwise mandated by law.
29. User Responsibilities for Security
You are responsible for safeguarding your own login credentials, API keys, and devices used to access To The Moon. We strongly recommend the use of strong passwords, multi-factor authentication, and periodic security reviews. Promptly notify us of any suspected unauthorized access or loss of credentials. To The Moon is not responsible for security breaches or data loss caused by your own negligence, insecure devices, or sharing of access with unauthorized individuals.
30. Commitment to Continuous Improvement
Data privacy, confidentiality, and ethical handling are at the core of To The Moon’s business model. We continuously evaluate and improve our privacy practices to adapt to new regulations, technologies, and user needs. Suggestions from users and partners are always welcome, and our privacy program undergoes regular audits to ensure ongoing compliance and best-in-class standards.
31. Links to External Sites and Third Parties
Our services may contain links to external websites, applications, or content not operated or controlled by To The Moon or Mol3cula LLC. We are not responsible for the privacy practices or security of these third-party sites. We encourage users to review all external privacy policies before submitting any personal or business information, and we disclaim liability for any actions or omissions by third-party operators.
32. Enforcement and Regulatory Compliance
To The Moon complies with all applicable privacy regulations and data protection laws, including but not limited to the GDPR, CCPA, and other relevant U.S. and international laws. We cooperate fully with regulatory authorities and have established mechanisms for timely resolution of privacy-related complaints and disputes. You may escalate unresolved concerns to the relevant regulator or supervisory authority at any time.
33. Acceptance and Consent
By using To The Moon’s website, platform, or services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. Your continued use of our services after any updates constitutes acceptance of the revised policy. If you do not agree with any aspect of this Privacy Policy, please discontinue use of our services and contact us to discuss your options for data removal or service termination.