Privacy Policy

Last updated 17 September 2026

This policy explains what personal data Moneypenny collects, why, and your rights. Moneypenny is operated by Sincere Software LLP, a limited liability partnership registered in India, which is the controller of this data. Contact: hello@moneypennyagent.com.

The short version

• Your code, files, chats, prompts and bot data stay on your own machines. Moneypenny's servers do not store them.
• We store what we need to run your account: your email, your paired machines and usage counts.
• We count visits to this site and which steps people reach, on our own servers. We never sell your data, use no advertising trackers and no third-party analytics.

What we collect

• Account: your email address and an account ID, when you sign in with an email link. Sign-in is handled by Google Firebase Authentication.
• Account activity: when your account was created and last used, and the country your requests come from (derived by Cloudflare from your IP address; we do not store the IP address).
• Visits to this site: a random identifier made afresh for each page load, where the visit came from (a utm_source tag or the referring site), the country Cloudflare reports, and whether Get started was pressed. Nothing is stored in your browser and the identifier cannot be linked to any other visit. If you then ask for a sign-in email, that address is held against the visit so we can tell which sources lead to accounts, and it is replaced by your account ID as soon as you sign in, or discarded within a week if you never do.
• Machines: the name, operating system and Moneypenny version of each machine you pair, and when it was paired and last seen.
• Usage counts: the number of requests, bytes transferred and errors per day; and for each agent turn, its time, provider, model, duration, token counts and whether it succeeded. These records hold numbers and identifiers only, never the content of your work.
• Operational logs: the timing, size and status of requests passing through the gateway, used to fix faults. They do not include request content.
• Billing: your plan, subscription status, and the amount, tax and status of each payment. Creem, our merchant of record, collects your payment details; we never see or store card numbers.
• Account emails: the emails we send you, such as sign-in links and a welcome email, and whether they were delivered.
• Support: the emails you send us.

What passes through but is not stored

When you use the web app, the pages and data you open travel between your browser and your machine through our gateway, encrypted in transit. The gateway relays them and does not keep them. The AI agents on your machine send what they work on to Anthropic or OpenAI under your own account with them; their privacy policies govern that data.

Why we use it

• To provide the service: sign-in and account emails, pairing, relaying traffic and enforcing plan limits (performance of our contract with you).
• To bill you and meet tax and accounting duties (contract and legal obligation).
• To keep Moneypenny secure, reliable and improving, using aggregate usage counts (our legitimate interests).
• To answer support requests and send essential service emails, such as changes to terms or prices.

Who we share it with

We use these service providers, each only for the purpose stated:

• Hetzner (server hosting in Helsinki, Finland): runs the gateway and stores the data above.
• Cloudflare: network, website hosting, secure tunnel and email routing.
• Google Firebase: sign-in.
• Resend: delivers account emails, such as sign-in links and the welcome email, to your email address.
• Creem (Armitage Labs OÜ, Estonia): payments, tax and invoicing, as merchant of record.

Some providers may process data outside your country, including in the United States. We disclose data to authorities only when the law requires it.

How long we keep it

• Account, machine and usage data: while your account is open. We delete it after the account is closed, except where we need to keep it for legal, security or backup purposes.
• Operational logs: kept for a limited time and overwritten as they reach a fixed size.
• Payment records: as long as tax and accounting law requires.

Cookies and storage

moneypennyagent.com sets no cookies and stores nothing in your browser: the identifier described above lives only for the page you are reading. The web app stores your sign-in session in your browser so you stay signed in; it is essential and not used for tracking.

Your rights

You can ask to access, correct, export or delete your data, or object to or restrict how we use it, by emailing hello@moneypennyagent.com.

Changes

We may update this policy. The current version is always published on this page.