Privacy Policy

At Moussaed AI Inc. (“Moussaed AI”, “we”, “our”, or “us”), we recognize that deploying autonomous AI agents within your enterprise pipelines requires absolute trust. This Privacy Policy details the types of data we collect, why we collect it, how it is secured, and your legal rights regarding your personal information.

Our architecture is built from the ground up around data minimization, end-to-end encryption, and a strict commitment never to sell your data or use private business intelligence to train public models.

Depending on how you interact with our platform and autonomous agents, we may collect the following categories of data:

• Account & Contact Details: Name, work email address, organization name, role, and authentication credentials (e.g., Google OAuth profile identifiers).
• Integration & Agent Configuration Data: API tokens, webhook URLs, connection credentials for integrated tools (HubSpot, Salesforce, Gmail, LinkedIn, Slack, Greenhouse, BambooHR), and agent behavior instructions.
• Pipeline Execution Data: Lead lists, candidate resumes, outreach templates, and CRM metadata ingested temporarily to execute requested workflows.
• Billing & Payment Data: Billing addresses, payment method tokens, and transaction receipts. Credit card numbers are processed directly via PCI-DSS compliant payment gateways and never stored on our servers.
• Technical & Telemetry Data: IP addresses, browser fingerprints, device diagnostics, request logs, and platform usage metrics used to guarantee uptime and deter security anomalies.

A core pillar of Moussaed AI is our enterprise-grade isolation model:

Data processed in flight by autonomous agents is purged or anonymized immediately after workflow execution completion, following your workspace's configured retention schedule.

We utilize the collected information strictly for legitimate business and operational goals:

• Operating, executing, and monitoring autonomous agent tasks and multi-agent coordination.
• Facilitating seamless integrations with your chosen third-party operational tools.
• Providing human-in-the-loop approvals, escalation dashboards, and reporting analytics.
• Billing subscription fees and processing payment renewals.
• Detecting, mitigating, and preventing security breaches, fraudulent activity, or service abuse.
• Providing technical customer support and system availability notices.

Moussaed AI does not sell, lease, or monetize your personal or corporate information under any circumstances. We disclose data solely under the following controlled scenarios:

• Authorized Subprocessors: Cloud infrastructure hosts (AWS / GCP with SOC2 Type II certification), database providers, and payment gateways operating under strict Data Processing Agreements (DPAs).
• Customer-Connected Third-Party Tools: When you connect Slack, CRM platforms, or email servers, agents exchange data exclusively per your configured rules.
• Legal Compliance: When compelled by enforceable court subpoena, regulatory mandate, or applicable statutory laws.

We implement defense-in-depth security measures to protect your data against accidental loss, unauthorized access, alteration, or disclosure:

• Encryption in Transit: TLS 1.3 encryption across all web traffic, API endpoints, and webhook triggers.
• Encryption at Rest: AES-256 bit encryption on all databases, object storage, and encrypted secret vaults.
• Granular Role-Based Access Controls (RBAC): Strict internal least-privilege access policies enforced with multi-factor authentication (MFA).
• Continuous Auditing: Automated vulnerability assessments and routine third-party penetration testing.

Depending on your jurisdiction, you enjoy specific legal rights regarding your personal data:

• Right of Access: Request a copy of all personal information we maintain about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Request immediate permanent deletion of your account and related pipeline records.
• Right to Restrict Processing: Request restrictions on specific processing activities.
• Right to Data Portability: Export your structured configuration and usage logs in standard JSON or CSV formats.

To exercise any of these statutory rights, please reach out directly to our privacy team at privacy@moussaed.ai.

We may revise this Privacy Policy from time to time to accommodate new regulatory standards or expanded platform features. If substantial updates are made, we will notify you by email or via a prominent notification on the Moussaed AI dashboard prior to the changes taking effect.