Terms of Service — Moat8 Data Vault

Last updated: August 6, 2026

These Terms govern your use of moat8.space, the Moat8 web app, the moat8 CLI, and the Moat8 HTTP API (the "Service"), provided by Moat8 LLC, 30 N. Gould St, Ste R, Sheridan, WY 82801, USA ("Moat8", "we"). By creating an account, installing the CLI, or using a token, you agree to these Terms. If you agree on behalf of a company, you confirm you have authority to bind it ("Customer", "you").

1. Definitions

• Vault — the set of normalized files (Markdown/CSV) prepared from your connected Sources.
• Sources — the third-party systems and databases you connect (today Gmail, Google Drive — including Google Docs and Sheets — and Google Calendar; further Sources may be added over time).
• Customer Data — content read from your Sources and the files derived from it.
• Device Token — a scoped, read-only credential issued to one of your devices (the CLI or the desktop app) when you pair it with a Vault using a one-time Setup code.
• Services Engagement — paid setup, custom connector, or agent buildout work delivered by the Moat8 team under a separate statement of work ("SOW").

2. What the Service does

Moat8 connects to Sources you authorize, reads them read-only, normalizes the content into plain files with stable paths, and delivers those files to you — via the CLI to a folder on your machine, or via the read-only HTTP API.

Moat8 never writes back to your Sources. No connector requests or uses write access.

Prepared file content is held only in a short-lived delivery buffer and is purged automatically once your devices no longer need it (24 hours by default; the exact rule is in the Privacy Policy). We persistently store only your encrypted credentials and a file index (names, checksums) — not file contents. See the Privacy Policy.

3. Accounts, authorization and tokens

3.1 Authorization to connect. You represent and warrant that you have all rights, consents and authority required to connect each Source and to have its content read, copied and processed by Moat8 — including under your employer's policies, your agreements with the Source providers, and applicable data protection law. This is your responsibility, not ours. Connecting a Source you are not entitled to connect is a material breach of these Terms.

3.2 Third-party terms. Your use of the Sources remains governed by their own terms (Google today, and any further Source provider as it becomes available). You must comply with them. We are not responsible for a Source changing, throttling, or terminating its API access.

3.3 Device tokens. Device Tokens are secrets. Each token is issued to one device when that device is paired with a Vault and cannot be moved to another device. Pair each device separately, keep tokens confidential, and revoke any device you believe is compromised from the dashboard. You are responsible for all activity performed with your tokens.

3.4 Accounts. You must provide accurate information, keep credentials secure, and notify us at security@moat8.ai of any unauthorized access.

4. Acceptable use

You may not:

• connect Sources you lack authority to connect, or use the Service to exfiltrate data from an employer, client or third party without permission;
• use the Service to process data whose handling requires safeguards we have not agreed to in writing (e.g. regulated health, payment card, or government-classified data) unless expressly agreed;
• reverse engineer, resell, or provide the Service to third parties as a service, except as agreed in writing;
• circumvent rate limits, tenancy isolation, or security controls, or probe the Service without written authorization (responsible disclosure: security@moat8.ai);
• use the Service unlawfully, or in violation of any Source provider's terms.

We may suspend access immediately where use threatens the security or integrity of the Service or of another customer.

5. Customer Data and its use

5.1 Ownership. Customer Data is and remains yours. We claim no ownership of it.

5.2 Limited license. You grant us a limited, non-exclusive licence to access, copy, transmit, normalize, buffer and deliver Customer Data solely to provide the Service to you and as instructed by you.

5.3 No training. We do not use Customer Data to develop, improve, or train AI or machine learning models — ours or anyone else's. Ever.

5.4 Data protection. Where we process personal data on your behalf, we act as processor and you as controller; the data processing terms set out in our Privacy Policy apply and prevail over these Terms in case of conflict on that subject. Those terms serve as our data processing agreement; a separate signed agreement is available to enterprise customers on request.

6. The CLI

The moat8 CLI is licensed to you as a non-exclusive, non-transferable right to install and run it on machines you control, for use with the Service. It installs a background service that runs at login; you can remove it at any time with moat8 uninstall. Files synced to your machine are stored under your control and are your responsibility.

7. Fees, plans, payment and refunds

7.1 Subscription and pricing. The Moat8 Data Vault subscription is USD 99 per month, billed monthly in advance. Current pricing is shown on our pricing page and at checkout before you pay. We may change pricing for future billing periods on thirty (30) days' notice; the price you are charged for a period is the price shown when that period began.

7.2 Our payment provider — Paddle is the merchant of record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders: Paddle sells the subscription to you, issues the invoice or receipt, and handles all payment-related enquiries. Your purchase is therefore also subject to the Paddle Checkout Buyer Terms. The charge on your card or bank statement will appear as Paddle or Paddle.net, not as Moat8. Moat8 never receives or stores your payment card details.

7.3 Taxes. Applicable VAT, GST and sales taxes are calculated, collected and remitted by Paddle as merchant of record, and are shown at checkout. Prices are displayed exclusive or inclusive of tax depending on your location, as indicated at checkout.

7.4 Renewal and cancellation. Subscriptions renew automatically at the end of each billing period at the then-current price, unless cancelled before the renewal date. You may cancel at any time from within the Service or through the link in any Paddle receipt. On cancellation, your subscription continues until the end of the period already paid for, and is not renewed. Cancelling does not by itself delete your data — see Section 8.

7.5 Refunds. Refunds are governed by our Refund Policy, which forms part of these Terms. In summary: a full refund is available within thirty (30) days of your first purchase. Paddle may additionally issue a refund at its own discretion under the Paddle Refund Policy.

7.6 Delivery of the Service. Access is provisioned immediately after payment is confirmed: your account is activated and you can connect Sources and install the CLI right away. Because the Service is digital content supplied immediately, by completing the purchase you request immediate performance and acknowledge that you thereby lose any statutory right of withdrawal that would otherwise apply to digital content under EU or UK consumer law. Your right to a refund under Section 7.5 is unaffected.

7.7 Engagements. Setup, custom connectors and agent buildout are billed on milestones under an SOW. Scope, milestones, and deliverables are defined there. IP in deliverables created for you under an SOW transfers to you on full payment, excluding Moat8's pre-existing materials, the platform, the CLI, and generic know-how, for which you receive a perpetual licence to use them as part of the deliverable.

7.8 Non-payment. We may suspend the Service after fourteen (14) days' overdue payment, following notice.

8. Term, termination and what happens after

8.1 These Terms apply for as long as you have an account. Either party may terminate for convenience with thirty (30) days' notice; either may terminate immediately for material breach not cured within 30 days.

8.2 On termination: connector credentials and Device Tokens are deleted, buffered content is purged, and the file index is deleted within thirty (30) days.

8.3 No lock-in. Files already synced to your own machines are plain Markdown and CSV, remain readable, and are yours to keep. Export before you leave — we are not obliged to keep any copy for you.

9. Availability, beta features and support

The Service is provided on an "as is" and "as available" basis. No uptime SLA applies unless agreed in writing. Features labelled beta or preview may change or be withdrawn, and are provided without warranty. Support channel and hours: email support at support@moat8.ai, answered within two business days.

10. Disclaimers

To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that Vault files are complete, accurate, or up to date, or that outputs generated by any AI agent reading the Vault are correct. You are responsible for decisions made on the basis of that output. Moat8 is not an AI model provider; how third-party models you point at the Vault use the data is governed by your agreement with them.

11. Limitation of liability

Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, however caused.

Our aggregate liability arising out of or relating to the Service is limited to the amounts you paid us in the 12 months preceding the event giving rise to the claim , and in any event will not exceed USD 1,000 where you have paid us nothing.

Nothing here excludes liability that cannot be excluded by law (including fraud, willful misconduct, death or personal injury).

12. Indemnity

You will defend and indemnify Moat8 against third-party claims arising from (a) your connecting a Source you were not authorized to connect, (b) your breach of Section 4 (Acceptable use), or (c) your violation of a Source provider's terms or of applicable law.

13. Confidentiality

Each party will protect the other's confidential information with at least reasonable care and use it only to perform under these Terms. Customer Data is your confidential information.

14. Changes

We may update these Terms. Material changes take effect thirty (30) days after notice by email or in the app. Continued use after that date means acceptance. If you do not accept, terminate before the effective date.

15. General

• Governing law and venue: the laws of the State of Wyoming, USA, without regard to its conflict-of-laws rules, courts of Sheridan County, Wyoming.
• Assignment: you may not assign these Terms without our consent; we may assign in connection with a merger or acquisition.
• Force majeure: neither party is liable for failures caused by events beyond reasonable control.
• Severability: if a provision is unenforceable, the rest survives.
• Entire agreement: these Terms, the Privacy Policy, the Refund Policy and any SOW form the entire agreement. In case of conflict: SOW → Privacy Policy (data processing terms) → these Terms.
• Notices: to legal@moat8.ai, and to you at the email on your account.

Contact: Moat8 LLC, 30 N. Gould St, Ste R, Sheridan, WY 82801, USA Support: support@moat8.ai · Legal: legal@moat8.ai · Security: security@moat8.ai