Privacy Policy

Effective date: 3 October 2026

This policy explains what personal data Mouline collects, why, and what you can do about it. It covers our website (mouline.co.uk), Nova — our AI agent for Slack — and its dashboard at control.mouline.co.uk, as we host them.

Who we are

Mouline is operated by Mouline Ltd, a Delaware corporation, 24a Trolley Square #1186, Wilmington, DE 19806-3334, USA ("Mouline", "we", "us").

Questions or requests: [email protected].

If your organisation runs Nova or the Shadow Broker on its own infrastructure (self-hosted), your organisation operates that deployment and decides what happens to the data in it; this policy covers only what Mouline itself hosts.

Our role

For the content of your Slack workspace that Nova handles — messages, files, connected data sources — the organisation that installed Nova is the controller and we process that content on its behalf, to provide the service.
For your account (signing in to the dashboard), website visitors and billing, we decide how the data is used and are the controller.

What we collect

From Slack, when your workspace installs Nova

Workspace ID and name, the person who installed Nova, and the bot's access token (stored encrypted).
Slack user IDs, names and email addresses of people who sign in to the dashboard or whom an admin allows to use Nova.
Messages that mention Nova or are posted in channels and threads Nova takes part in, files shared there when Nova opens them, and Nova's replies.

While Nova works

Conversation records: the requests Nova receives, the steps it takes and its answers, so a thread can continue and admins can review it.
Notes Nova saves to remember context between conversations ("memories"), feedback (👍/👎 and the reason given), and scheduled tasks admins set up.
Audit records: which tools Nova used and when (not their full output), the internet addresses it contacted and whether the request was allowed, and usage and cost figures (counts of model tokens).

Credentials you give us

AI provider keys, OAuth tokens and data-source credentials, encrypted with Google Cloud Key Management Service. They are never shown back in the dashboard.

Google Drive, if you connect it — see "Google user data" below.

Website and contact

mouline.co.uk uses Google Analytics, which sets cookies and records pages viewed, approximate location, device and referrer. You can block it with your browser's settings or Google's opt-out add-on.
When you book a call or email us, we receive your name, email address and what you write.

Payments — when paid plans are available, payments are handled by Stripe; we receive the billing contact and plan, never full card numbers.

How we use it

To run Nova: answer requests, act in the tools you connected, keep conversation context.
To keep it safe: enforce the limits your admins set, detect abuse, investigate incidents.
To operate the business: billing, support, and understanding usage in aggregate to improve the product.

We do not sell personal data, do not use it for advertising, and do not use your workspace's content to train AI models.

AI processing

To answer a request, Nova sends the relevant conversation and data to its AI model provider, Anthropic (Claude). If your workspace uses its own Anthropic key, that processing happens under your Anthropic account. Anthropic does not train its models on data sent through its commercial API.

Google user data

Nova can connect to Google Drive in one of two ways, chosen by your workspace admin:

Only folders I pick — Google's per-file permission (drive.file). Nova can reach only the folders the admin picks in Google's own picker and the files Nova creates.
Whole Drive, limited to folders — Google's Drive permission (drive). Our broker enforces that Nova reaches only the folders the admin chooses and their subfolders, and nothing else in the Drive.

Both also request your Google account's email address, to show who connected Drive.

What we do with it:

Nova reads, creates or updates Drive files only when a request in your workspace needs it, and only inside the allowed folders.
File content Nova reads is passed to the AI model provider to complete that request, and may appear in Nova's reply and conversation record.
The Google access token is stored encrypted in your workspace's broker. Disconnecting Drive in Settings deletes it; you can also revoke access at any time at myaccount.google.com/permissions.
We do not sell Google user data, use it for advertising, or use it to train AI or machine-learning models, and people at Mouline do not read it unless you ask us to, it is needed for security, or the law requires it.

Mouline's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else processes data

Provider	What for	Where
Google Cloud	Hosting, databases, encryption keys	United States (Iowa)
Anthropic	AI model (Claude)	United States
Slack (Salesforce)	Where Nova runs	Per your Slack plan
Cloudflare	DNS and network protection	Global
Google Analytics	Website statistics	United States
Stripe	Payments, once paid plans launch	United States
Voyage AI	Text embeddings for memory search, where enabled	United States

Each is bound by a data processing agreement or equivalent terms.

International transfers

Our service runs in the United States. When we transfer personal data from the UK or the European Economic Area, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

How long we keep it

Workspace data — conversations, memories, settings, audit records and stored credentials — is kept while Nova is installed, and deleted within 30 days after the workspace uninstalls Nova or asks us to delete its data.
Google Drive access is deleted as soon as Drive is disconnected or Nova is uninstalled.
Billing records are kept as long as tax and accounting law requires.
Website analytics follow Google Analytics' retention setting (14 months).

Security

Data is encrypted in transit (TLS) and credentials at rest with Google Cloud KMS. Each workspace gets its own database and its own isolated runtime; Nova's internet access goes through a filtering proxy under each workspace's rules; and access to production is limited to the people who operate it.

Your rights

Depending on where you live (for example under the UK or EU GDPR, or California law), you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent. Email [email protected]; we answer within 30 days. For content in your Slack workspace, we may refer you to your workspace's admin, who controls it, and help them respond. You can also complain to your data protection authority.

Children

Nova is a workplace tool and is not meant for anyone under 16.

Changes

If we change this policy we will update the date above, and tell workspace admins about significant changes before they take effect.

Contact

[email protected] — Mouline Ltd, 24a Trolley Square #1186, Wilmington, DE 19806-3334, USA.