Privacy Policy

Last updated: September 2026

NightMoose, Inc. (“we”, “us”, “our”), which operates DataContractGate, is committed to protecting your personal information. This policy describes what we collect, how we use it, and your rights.

1. Information We Collect

We collect information you provide directly (such as your name and email address when you create an account), usage data generated by your interaction with the Service, and technical data such as IP address and browser type.

2. Event Data You Send

You send us events and contracts through the dashboard, the API, or our integrations (including the DataContractGate MCP server and plugins for Claude Code and Cursor, which call the API with your API key). Events may contain personal data, depending on what your systems produce.

  • Contract inference and dry-run validation: events are processed and returned. We do not store them.
  • Live validation: we store an audit record for every event and a quarantine record for every rejected event. By default these records hold metadata only (contract, version, result, violations, source IP, timing), not the event body.
  • Event bodies are stored only if your organization turns on event payload storage (paid plans), which enables quarantine replay. You can turn it off, which purges stored bodies, or purge them per contract at any time.
  • Contracts you deploy are stored until you delete them.

3. How We Use Your Information

We use the information we collect to provide and improve the Service, send transactional communications, respond to support requests, and comply with legal obligations. We do not sell your personal data to third parties.

4. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Audit log retention periods are governed by your plan tier. You may request deletion of your data at any time by contacting us.

5. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at the address below.

7. Contact

Privacy questions or requests? Email us at datacontractgate@nightmoose.com.