Moodio Privacy Policy

Last Updated: October 10, 2026


1 Introduction and Scope

Moodio Inc. ("Moodio," "we," "us," or "our") provides the Moodio website, AI creative production platform, and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and retain personal information when you use the Service or communicate with us. Personal information means information that identifies, relates to, or can reasonably be linked to an individual.

The Service is currently primarily directed to users in the United States. This Policy applies to our personal-information practices wherever you use the Service, subject to applicable law. Additional country- or region-specific privacy supplements may be made available and will form part of this Policy only within their stated scope. An applicable supplement controls conflicting provisions for the matters it covers, subject to mandatory law. The U.S. privacy addendum is included below. A separate privacy notice may apply to a particular service or feature and will explain any additional or different practices. Separate enterprise agreements may govern services provided to enterprise customers, including those in mainland China. Any additional local-law notices and consents required for our processing also apply.

If an organization provides or manages your account, its workspace owner or administrators may access, monitor, manage, share, remove, or reassign content, activity, and account settings within the workspace, depending on available features and permissions and subject to applicable law. Information you place in a workspace may therefore be visible to its administrators. Where we process personal information solely on an organization’s instructions under a separate agreement, that organization is responsible for its own use of the information under its applicable privacy notice, and we assist with privacy requests as required by applicable law and our agreement with that organization. This Policy covers our own processing, including account administration, billing, and security.

This Policy is a notice of our data practices. It does not replace any separate consent required by law. Our Terms of Service govern use of the Service.

2 Information We Collect

The information we collect depends on the features you use, the content you provide, and your settings. We receive information from you, your device, people who invite you or include your information in content, and the providers described below.

Account and profile information. Name, email address, username, profile image, preferences, account identifiers, and authentication information. If you use a supported sign-in provider, such as Google, we receive the profile and authentication information it makes available. Where passkey sign-in is available, biometric data used by your device to authenticate you is not received by Moodio.

Payment and transaction information. Billing details, subscription and credit purchases, transaction amounts and status, and payment or transaction references. Payment card information for individual users is processed by Stripe. Enterprise billing is governed by the applicable separate agreement. We receive information needed to administer purchases, subscriptions, refunds, and billing.

Prompts and creative instructions. Information you provide when interacting with the AI Agent or other AI-powered or creative features, including prompts, conversations and related context, instructions, search queries, workflow inputs, and generation or editing parameters.

Uploaded content and project files. Images, videos, audio, documents, scripts, reference materials, URLs, imported materials, and other files or content you choose to submit to the Service, including content captured using microphone or camera features you choose to use. We also process information associated with your projects and assets, such as names, folders, tags, comments, organizational information, editing history, and other project metadata. We refer to content you submit or create through the Service, including generated outputs, as "User Content" (also called "Your Content" in our Terms of Service).

Real-person likeness and voice information. Images, video, recordings, voice samples, and related information depicting or identifying you or others that you submit as creative materials or references. Section 5 explains how these materials are processed and the permissions you must obtain.

Generated and derived information. We process outputs and other information generated or derived through the Service, including AI-generated text, images, videos, audio and other media, transcripts, captions, previews and other derivatives, as well as related generation and processing metadata such as model, parameters, status, timestamps, and error information. Outputs may contain embedded metadata or visible or invisible watermarks identifying AI generation, the Service, or the content, including content identifiers. These outputs and metadata may contain or relate to personal information.

Collaboration, community, and sharing information. Team membership, invitations, roles, permissions, comments, approvals, activity history, and information associated with review links, public projects and works, and community participation.

Usage and technical information. IP address, approximate location derived from IP address, browser, operating system, device information, access times, referring pages, interactions with features, search and generation activity, downloads, sharing activity, diagnostic data, and logs. Our own product-event and generation records include IP addresses. This information may be associated with your account or device. We may also derive information about content preferences and usage patterns to personalize features and recommend references or other content. Section 8 distinguishes optional analytics from operational records and describes the current analytics configuration on app.moodio.art.

Cookies and similar technologies. We use cookies and similar technologies for essential Service functions, preferences, and optional analytics. As of October 10, 2026, the cookies used on app.moodio.art are first-party cookies, including session, authentication, private-media access, sharing and review-session, consent-record, language-preference, and consented analytics cookies. These application cookies are not used for advertising. First-party cookies do not prevent disclosure of relevant analytics information to an analytics provider. As of that date, the application has no advertising pixels. Section 8 and our Cookie Policy describe the current application configuration and the planned advertising technologies for moodio.art and app.moodio.art, which are subject to the activation conditions stated there.

Communications and information from other sources. We collect information you provide when you contact us, including support requests, feedback, survey responses, and other communications. We may also receive information from service providers and other sources, such as authentication information from sign-in providers, transaction information from payment processors, and processing, safety, or diagnostic information from AI and infrastructure providers. Certain Service features may also involve information from external or third-party content sources, which may include personal information about creators or other individuals.

3 How We Use Information

We use personal information to provide and administer accounts, subscriptions, credits, and customer support; carry out search, AI generation, editing, and other creative requests; store and organize projects; and enable collaboration, sharing, community features, and export.

We also use information to diagnose errors and improve functionality, understand feature usage, remember preferences, send service and security messages, prevent fraud and misuse, investigate reports, enforce our terms, and comply with legal obligations. Records needed to carry out generation, administer credits and billing, maintain security, and investigate failures are distinct from optional product analytics. Optional analytics are subject to the choices and consent requirements described in Section 8 and applicable law. We may personalize your experience and recommend references or other content based on your content, instructions, preferences, and Service activity. We send marketing communications with consent where required and provide an opt-out. The planned advertising tools described in Section 8 will be used for conversion measurement and attribution, campaign-performance analysis, and advertising optimization, subject to the applicable notices, choices, and consent requirements.

For safety, abuse prevention, support, and troubleshooting, we and our providers may review relevant content or activity using automated and manual tools. The measures used vary by feature and provider.

Model training and improvement. Moodio may use non-enterprise User Content, including both public and private content, to train, fine-tune, develop, and improve our AI or machine-learning models, algorithms, related technology, products, and services, including through labeling, classification, and content moderation. We do not use enterprise-customer User Content for these purposes unless the applicable separate agreement expressly permits it, and we honor other separate agreements restricting these uses. Except where a separate agreement or applicable law requires otherwise, we do not offer a general opt-out from these uses. We seek to limit personal information used for these purposes, including through de-identification or aggregation where practicable. Research and publication. Subject to the applicable licenses in our Terms of Service, confidentiality obligations, and any required permissions, we may use content you make public, or data anonymized or aggregated so that it cannot reasonably identify an individual, for research, evaluations, benchmarks, and publication of findings, papers, or illustrative examples. Removing a name alone does not make data anonymous. We do not publish raw private User Content for these research purposes or use enterprise-customer User Content for them unless the applicable separate agreement expressly permits it. These uses do not override applicable privacy rights, consent requirements, or restrictions on sensitive or minors' information. Section 4 separately describes how third-party AI model providers may use information for their own purposes.

4 Third-Party AI Model and Other Service Providers

We use third-party AI model and computing providers, and providers of generation, media processing, search, and related services, to perform the functions you request. Depending on the task, we transmit relevant prompts, conversation context, reference files, media, and technical information to these providers, sometimes through an intermediary or aggregation platform. They return outputs and processing information to us. The providers and models available through the Service may change over time.

We also use cloud hosting, storage, content delivery, database, authentication, payment, email, support, analytics, and security providers to operate and support the Service. Providers acting on our behalf are subject to contractual restrictions appropriate to their role and the information they process. Some providers also process information for their own purposes under their privacy notices. The advertising partners described in Section 8 may act as independent or joint controllers, depending on their role and actual processing; they are not automatically service providers acting solely on our instructions.

Third-party AI model providers may, depending on the product, configuration, and applicable terms, use submitted information for their own purposes, including safety monitoring, service improvement, and model training. Those practices are distinct from Moodio’s own training described in Section 3 and may be governed by the provider’s applicable terms and privacy notice. Provider processing and retention may differ by product or configuration, and information is not necessarily deleted immediately after a request completes. We remain responsible for complying with applicable law in selecting providers and disclosing personal information to them.

When you connect or use third-party tools, information you or the Agent send to those tools at your direction is processed under their own terms and privacy notices. Links or integrations may also take you to services you use independently. Their notices govern their own practices. This does not change our responsibilities for personal information we disclose to them.

5 Likeness and Voice Information

When you submit a person’s likeness or voice, we and the relevant providers process the materials to generate or edit content at your direction. Moodio does not itself operate face- or voice-cloning models or extract biometric templates. Third-party models may provide such functions and process these materials under their own terms and privacy notices, as described in Section 4.

By submitting a person’s name, likeness, voice, or other identifiable attributes, you confirm that you have all rights, releases, and consents needed for the intended processing and use through the Service, including generation of outputs and any required authorization from that person or a parent or legal guardian. You may contact us to report unauthorized use of your likeness or voice or request deletion of information about you.

6 How We Disclose Personal Information

We disclose relevant personal information to the providers described in Section 4 to perform their functions; to analytics providers and, when activated under Section 8, advertising partners for the purposes stated there; to collaborators, workspace administrators, recipients, or the public as described in Section 7; and to others when you direct us or give valid consent. Research publications or external research disclosures are limited to the public content or properly anonymized or aggregated data described in Section 3 and remain subject to the permissions and restrictions stated there.

We may disclose information to authorities, professional advisers, or other parties where reasonably necessary to comply with law or valid legal process, investigate fraud or misuse, protect rights and safety, or establish or defend legal claims. Information may also be disclosed in connection with a proposed or completed merger, financing, reorganization, sale of assets, or similar transaction, subject to applicable legal requirements and appropriate confidentiality protections.

Section 8 describes the current analytics configuration on app.moodio.art, the planned advertising processing on moodio.art and app.moodio.art, and the notices and controls required before activation.

7 Sharing, Collaboration, Public Content, and Community

Sharing and Public Content. You may share content or projects with workspace members, selected recipients, or through review links, and may choose to publish projects, works, or community posts. Administrators and recipients may access or manage information according to the features and permissions available to them. Public content may be accessible to the public and indexed by search engines, and other users may access, copy, fork, or adapt it within the Service's functionality and the licenses described in our Terms of Service. Moodio may use content you make public, together with your associated username where authorized under Section 5.5 of the Terms of Service, to display and promote the Service in different media, including after your account is deleted, subject to applicable law, your legal privacy rights, and any applicable signed enterprise agreement. Limited Free Output Promotion. Section 5.5 of the Terms of Service also permits Moodio to display and use eligible Outputs generated on a free plan to showcase and promote the Service, even if you have not made those Outputs public. This permission applies only to eligible Outputs generated after you accept the applicable promotion terms and any separate consent required by law has been obtained; earlier private Outputs require separate authorization. Private Outputs generated on a paid plan, and enterprise-customer content protected by a separate agreement, are excluded. Private prompts, other private Inputs, usernames, and other account information are not automatically included in this permission and require separate authorization before promotional use. The scope, duration, and plan-change treatment of this permission are governed by Section 5.5. This limited promotional permission does not itself make your project public or grant other users rights to copy, fork, or remix private content. Changing permissions or revoking a review link may stop future access through that sharing method, but may not affect copies already obtained or independently retained by others. All promotional uses remain subject to applicable privacy rights, consent requirements, third-party rights, and any signed enterprise agreement.

8 Cookies, Analytics, Advertising, and Privacy Choices

Current application analytics. As of October 10, 2026, on app.moodio.art, the cookie banner currently offers Necessary or All. Browser-based Google Analytics 4 loads only after you select All and only when your browser is not sending Global Privacy Control (GPC). Path identifiers and URL query parameters are removed from browser analytics data; sharing, review, sign-in, and administration pages are excluded. For browser-based GA4, Google advertising storage, advertising user data, advertising personalization, and Google Signals are disabled. For users who have consented to analytics, server-side GA4 receives events for generation start, completion, and failure, saving to Library, and timeline export. As of that date, the application uses no advertising pixels. Relevant analytics and technical information is disclosed to Google for these analytics functions.

Operational records. Our own product-event and generation records include IP addresses. Optional analytics are subject to applicable consent and privacy choices; records needed to provide requested generation, administer billing, maintain security, and diagnose failures may be processed for those operational purposes in accordance with applicable law. You may change or withdraw consent through available cookie controls or contact support@moodio.art. Browser controls may limit cookies but can affect functionality and do not necessarily prevent all server-side processing.

Planned advertising tools. We plan to introduce advertising pixels and conversion-tracking tools from Meta, TikTok, and Google Ads on moodio.art and app.moodio.art approximately one to two months after October 10, 2026; timing may change. Their planned purposes are conversion measurement and attribution, analysis of campaign effectiveness, and advertising optimization. Depending on the configuration, relevant information may include online or device identifiers, usage and technical information, and conversion-event or campaign-interaction information. Before activation, the Cookie Policy and consent disclosures will identify the actual recipients, specific purposes, data categories, and applicable technologies and retention information. Advertising tracking events will not include private prompts, other private Inputs, or raw private Outputs. Any use of content in promotional materials remains governed by Section 7 and Section 5.5 of the Terms of Service and does not constitute consent to tracking. Retargeting, audience creation, or other personalized advertising will be used only within a specifically disclosed scope and subject to the applicable controls and any required consent.

Activation and consent. Before these tools are activated, we will distinguish necessary technologies from independently selectable analytics and advertising; optional choices will be off by default, with equally easy and prominent options to accept or reject and an option to customize. Advertising tracking will remain blocked until an affirmative choice for the specifically disclosed advertising purposes is recorded, subject to recognized opt-out signals. We will obtain valid prior consent wherever applicable law requires it. Historical All choices for analytics do not authorize advertising. Consent may be withdrawn through the same readily accessible settings with the same ease as giving it. At activation, we will check that the consent remains valid for the actual purposes and recipients and has not been withdrawn; changed purposes or recipients require updated disclosures and fresh consent where required.

Advertising privacy choices. Disclosures to advertising partners may constitute a sale or sharing of personal information or processing for targeted advertising under applicable privacy laws, even without a monetary payment. Before such processing begins, the controls in Section 11 will apply to browser and server-side advertising flows. Using a first-party cookie or a server-side route does not bypass these requirements. The advance-notice provisions in Section 14 apply. Our Cookie Policy provides further information.

9 Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, subject to applicable law. Relevant factors include the duration of your account or project, the purpose for which the information is processed, the nature and sensitivity of the information, whether you request deletion, and applicable legal, accounting, security, fraud-prevention, and dispute-resolution requirements.

Different categories of information may be retained for different periods depending on their purpose. Account and project information may be retained while your account or project remains active. Inactive-account content may be placed in archival or cold storage where supported by the Service, subject to applicable retention and deletion requirements. Transaction, tax, support, usage, security, anti-fraud, and dispute records may be retained for one year or longer where reasonably necessary for their operational, legal, or compliance purposes. Sensitive information may be subject to shorter or more specific retention requirements under applicable law. Advertising information will be retained only as necessary for the disclosed purposes; relevant technology durations or retention criteria will be disclosed before activation. Consent and opt-out records may be retained as necessary to remember choices and demonstrate compliance, without using those records for advertising.

When you delete content or request account deletion, we generally seek to delete or, where permitted by applicable law, de-identify the relevant information from active systems within approximately 30 days. Backup, cache, and provider copies are normally deleted or overwritten within 30–90 days through the applicable deletion or backup cycle. These periods may vary with technical limitations, provider schedules, legal retention obligations, security or fraud investigations, and other exceptions permitted by applicable law. Providers processing information for their own purposes may apply their own lawful retention practices, without limiting our responsibilities for the information we disclose. Where information must be retained, we limit further use to the applicable retention purpose. Deleting source User Content does not automatically delete a trained model or remove learning already incorporated into its parameters; we nevertheless comply with any deletion, objection, withdrawal-of-consent, or other requirements imposed by applicable law. Deletion from your account does not remove copies that others have already received or independently retained.

10 Security

We use technical and organizational safeguards designed to protect personal information, taking account of the nature of the information and the risks involved. No transmission or storage system is completely secure. Please protect your account credentials and use available security and access controls appropriately.

11 Your Choices and Privacy Rights

You may contact support@moodio.art to request access to, correction of, or deletion of your personal information, obtain a portable copy where available, or exercise other privacy rights under applicable law. Depending on applicable law, these may include rights to opt out of targeted advertising, sales, sharing, or certain profiling, restrict certain uses of sensitive personal information, object to processing, or withdraw consent. If we process personal information solely on behalf of an organization, we may direct your request to that organization and assist as required. Before applicable sales, sharing, or targeted advertising begin, a working Your Privacy Choices control on moodio.art and app.moodio.art will enable opt-outs. We will honor legally required GPC and other recognized opt-out signals, carry the choice through browser and server-side advertising flows, apply it to an associated account where applicable, and display confirmation of the opt-out state. An earlier advertising choice will not override a legally recognized opt-out signal. These opt-outs and consent withdrawals will not require identity verification, sign-in, or creation of an account.

You may unsubscribe from marketing communications using the unsubscribe link provided or by contacting us. You may still receive necessary service, transaction, or security communications. You may also manage available account, content, device, and permission settings through the Service or your device.

Where permitted or required by applicable law, we may take reasonable steps to verify your identity or an authorized agent’s authority before responding to a request, except for the opt-outs and consent withdrawals described above. We will respond within legally required periods and explain any applicable refusal, exception, or appeal right. We will not discriminate against you for exercising a privacy right protected by applicable law.

12 Children

The Service is intended for users aged 13 or older. If you are below the legal age of majority where you live, you must have a parent’s or legal guardian’s permission to use the Service. We do not knowingly accept accounts from, or collect personal information from, children under 13 as users of the Service. If we learn that a child under 13 has created an account or provided personal information through an account, we will restrict or terminate the account and take appropriate steps to delete the information, subject to applicable law.

Users may include information about minors in User Content. This does not make a child under 13 an eligible user of the Service. You should submit a minor’s image, voice, or other personal information only where you have all rights and permissions required for the intended use, including parental or guardian authorization where required. Processing minors’ personal information for model training, sensitive-information uses, sales, sharing, or targeted advertising is subject to any additional consent, minimization, opt-out, and use restrictions required by applicable law. Permission to use the Service does not replace any additional consent required for those purposes. You may contact us if you have concerns about a minor’s personal information or unauthorized use of a minor’s likeness or voice.

13 International Data Transfers

Moodio Inc. is based in the United States, and our servers are located in North America. Personal information may be stored or processed in the United States and other countries where our providers operate, including China, when prompts, reference images, audio, or other information are routed through an aggregation platform to a third-party AI model or computing provider. These countries may have different data protection laws from those where you live.

Where applicable law imposes transfer restrictions, we use legally permitted safeguards or transfer arrangements, together with any required assessment or additional protections. Contact us for information about safeguards relevant to your data and how to obtain a copy where applicable, subject to appropriate redactions.

14 Changes to This Privacy Policy

We may update this Policy to reflect changes to the Service, our practices, or legal requirements. We will post the updated version and update the Last updated date above. We will provide additional notice of material changes by email or a prominent notice in the Service. For material changes that significantly affect how we process your personal information, we will provide at least 30 days' advance notice by email or an in-product notification. Activating a specifically disclosed plan, including the Section 8 advertising plan, does not by itself restart that period if we have already given the required advance notice and the implementation remains within the notified scope. Merely posting this Policy does not substitute for that notice. Material departures from the plan, including significant changes in purposes, recipients, or data practices, remain subject to these notice requirements. We will obtain consent where required by applicable law before beginning the relevant new processing. Publication of an updated Policy or continued use does not replace any separate consent required by law or authorize retroactive expansion of the purposes for previously collected personal information.

15 Contact

For privacy questions, requests, or concerns, contact Moodio Inc.:
8 The Green, Ste R, Dover, DE 19901, United States
Email: support@moodio.art Website: https://moodio.art

Addendum A United States

Depending on where you reside and which state privacy laws apply to our processing, you may have rights to receive information about our personal-information practices; access, correct, or delete personal information; obtain a portable copy; opt out of sales, sharing, targeted advertising, or certain profiling; restrict specified uses of sensitive personal information; or withdraw consent where applicable. Applicable law may also provide authorized-agent, appeal, and non-discrimination rights. Section 11 describes the advertising opt-out controls, recognized browser signals, and confirmation process. You may also contact us using Section 15, subject to applicable verification requirements for requests other than those opt-outs or consent withdrawals and to legal exceptions.

California online tracking. As of October 10, 2026, the app.moodio.art configuration described in Section 8 sends consented analytics information to Google and blocks browser-based GA4 when GPC is present; its application cookies are first-party and are not used for advertising, and it has no advertising pixels as of that date. The planned Meta, TikTok, and Google Ads tools cover both moodio.art and app.moodio.art and may disclose online identifiers, technical and activity information, and conversion or campaign-interaction information for the purposes in Section 8. Those prospective disclosures may constitute sale, sharing, or targeted advertising under applicable law. The Section 11 opt-out controls and legally required browser signals will apply before they begin.

California categories, sources, and disclosures. The information described in Section 2 includes identifiers and account/profile information; commercial and transaction information; internet, device, and activity information; User Content, including audio, visual, and related creative materials; collaboration and communications information; and derived information and inferences about content preferences or usage patterns. Sources include you, your device, people who invite you or include your information in content, sign-in and payment providers, AI and infrastructure providers, and external content sources used by Service features. We use these categories for the purposes in Sections 3 and 5.

For the functions described in Sections 4, 6, and 7, relevant categories are disclosed to AI and computing providers; hosting, storage, delivery, authentication, payment, support, analytics, and security providers; collaborators, administrators, selected recipients, or the public according to your sharing choices and the applicable promotional permissions; and legal, professional, or transaction recipients when appropriate. Google receives the relevant application analytics and technical information described in Section 8. Planned advertising disclosures to Meta, TikTok, and Google Ads are separately described above and are subject to activation and privacy-choice requirements.

Where the CCPA or another state privacy law applies, its additional notice-at-collection and rights requirements also apply, including applicable limits on sensitive information. Nothing in this Policy limits your rights under applicable law.

LegalPrivacy Policy