Moment Privacy Policy

Version: 2026-10-19.en.3. Last updated: 19 October 2026.

1. Scope, regions and contact

This policy covers the Moment public website at moment.metana.ai, the product at moment-app.metana.ai, the Moment Android and iOS applications, and related support and creator services. It applies to the features actually provided to you. Visiting the public website does not by itself create a product account. An organizer's independent service or a provider's own processing may have a separate notice.

This English edition addresses international services in the United States, Japan, Singapore, Hong Kong, Macao and Taiwan; the Chinese edition addresses mainland China. These are the territories covered by the notices, not a statement that every service is offered there. Mandatory rights depend on the processing and your circumstances, not a language choice or IP estimate. Both editions are available.

Moment provides account-based product features alongside public product information, legal documents and contact/request instructions. Feature availability depends on the service configuration, your permissions, applicable regional restrictions and any feature-specific terms. Describing a feature does not guarantee its availability in every region. Reading legal documents or submitting a support or rights request does not require an account.

International services are provided by ANATEM INCORPORATED, at 19192 Coastal Highway, Lewes, DE 19958, United States; it is responsible for the associated personal-information processing. The operator identified for any separately launched mainland China services is 元石数据科技（苏州）有限公司, at 中国江苏省苏州市南京大学苏州创新研究院智能软件基地215室 (Room 215, Intelligent Software Base, Nanjing University Suzhou Innovation Research Institute, Suzhou, Jiangsu, China). The English address rendering is for reference. The applicable service or order identifies the responsible legal entity; language selection does not change it or create a joint-controller arrangement.

For privacy questions or requests, email service-moment@metana.ai, stating “Privacy request”. Do not send passwords, one-time codes, complete identity documents, private keys or recovery phrases.

2. Information and purposes

The information involved depends on the feature you actually use:

Account and login: email where supplied, password hash for password accounts, public name and avatar, linked login provider and provider user identifier, verification and session records. These support registration, sign-in, account linking, recovery and security. Optional profile details are not all required to browse public pages.
Activities and community: profiles, interests and participation, activity proposals, attendance and ticket validation, posts, comments, messages, membership and uploaded media. These support your chosen audience or participants, collaboration and moderation. Files can contain identifying details or embedded metadata; avoid unnecessary location or sensitive information.
Agent features: when you use enabled Agent features, necessary prompts, conversations, preferences, proposed matches, drafts and outputs support user-initiated suggestions and matching. Applicable notices and choices are provided for the relevant use; see section 4.
Orders and fulfillment: order and payment references, items, prices, currency, refunds and disputes; delivery name, address and contact details when physical fulfillment requires them. These support purchases, delivery, accounting and customer support.
Creators and payouts: legal identity, country, agreement and verification status, provider account references, payout details and transaction records. Stripe or another verification provider can collect identity or bank documents directly. Moment receives information and status needed for the workflow, not your bank login credentials.
Wallets and onchain records: linked public addresses, proofs of address control, asset identifiers, custody allocations, orders, transaction hashes, proceeds and withdrawal records. These support enabled custody, marketplace, reconciliation and recovery functions. Public records are explained in section 5.
Devices and operations: IP address and approximate IP-derived country, browser/app version, installation and push registration identifiers, notification preferences, request/error and security logs. These support delivery, fraud prevention, diagnostics and regional access checks. Cloudflare country information also selects the initial language of product legal pages; it is not proof of residence or nationality.
Support and legal requests: contact details, messages and evidence you submit, case history and responses. These support assistance, complaints, rights requests and legal obligations.

Information necessary for a transaction or verification is needed for that function. Declining optional profile fields, marketing or an optional permission does not authorize collection of unrelated information. Without information essential to a function, that function may be unavailable.

3. Grounds, permissions and choices

We process information to provide requested services, meet applicable obligations, protect users and maintain the service, using a ground permitted by the applicable law. A commercial interest is not a universal legal basis. Where consent is required, including separate consent for certain disclosures, sensitive data or transfers, that consent is distinct from reading this policy or accepting the Terms.

Camera access supports QR scanning or a media action you initiate; photo/file access supports an upload you choose; push permission supports notifications. Device prompts and settings control these permissions. Declining permission can prevent the associated feature. A push preference does not cancel necessary transactional notices.

You can use the available profile, linked-provider and notification settings and clear browser storage. You can also contact us to withdraw consent or exercise an applicable right if a relevant control is unavailable. Withdrawal does not invalidate lawful prior processing but can prevent the function that needs that information.

4. Recipients and service providers

Relevant information can be disclosed to the following recipients for the corresponding function:

Other users and organizers: public profile/content and participation information made visible by the function, and relevant order, admission or delivery information for fulfillment. Private messages are shared with intended recipients and processed by the service; they are not represented as end-to-end encrypted.
Login services: Google, Discord, LINE or WeChat when the corresponding route is offered and selected. Native OAuth scopes are Google openid email profile, Discord identify email, and LINE profile openid; LINE email access is not included. WeChat fields depend on the approved application and authorization. Providers process authentication requests and return permitted identity information.
Payments and identity: Stripe for enabled fiat checkout, identity/onboarding and payout workflows. Its own processing is explained in the Stripe Privacy Policy.
Current infrastructure: Upstash for cache/coordination; Cloudflare, including Pages/R2, for edge delivery, country estimates and object storage; Railway for service hosting; Supabase for database services. The information handled depends on each service's function.
Email and push delivery: configured delivery routes can use Brevo, Google Firebase/FCM or Apple APNs for transactional messages and enabled notifications.
Model service — DeepSeek: necessary prompts and context are sent to DeepSeek when you use enabled model-assisted features for suggestions or drafts; see the DeepSeek Privacy Policy. Do not assume zero retention or no secondary use; applicable service arrangements and legal safeguards govern processing. This policy does not authorize unrelated training. Do not include secrets or unnecessary personal information.
Marketplace and network services: OpenSea for enabled marketplace orders, RPC providers for network reads/submission, and public blockchain participants for onchain publication. IPFS gateways and storage/pinning providers can receive files and retrieval requests when that route is used.
Advisers, authorities or successors: necessary information for professional advice, a valid legal obligation, protection against abuse or an actual business transfer, subject to applicable safeguards, notice and consent requirements.

Not every recipient receives all account information. A recipient can have its own legal responsibilities; using a provider does not remove Moment's responsibilities. Contact the privacy address for information about recipients and safeguards applicable to your use.

5. Public content, blockchain and IPFS

Public posts and profiles can be copied by others. Wallet addresses can be linked with transactions, public activity and offchain information. Onchain transactions and published metadata can remain publicly accessible indefinitely. IPFS content can remain available from independent nodes after Moment stops hosting or pinning a copy. Do not put identity documents, addresses, private messages or other sensitive information into a public asset or immutable metadata.

Moment cannot promise to delete a blockchain record or every independent copy. Eligible offchain account data and links still require assessment for deletion, correction or minimization. A wallet connection proves address control; it is not general consent to publish personal information.

6. Cookies, analytics and embedded content

The landing site stores the moment_language language-preference cookie for up to one year and the moment-language local-storage preference until cleared or replaced. Product and administrative interfaces also use session, authentication, draft and preference storage for their functions. Clearing it may sign you out or remove unsent local drafts.

The landing site can load Cloudflare Web Analytics when configured, using a browser beacon to measure page visits and performance. The demo page and gallery can embed third-party video players, including YouTube through youtube-nocookie.com. Loading a player contacts its provider and can transmit connection, device and usage information; privacy-enhanced mode does not prevent all information transmission. The provider may process information under its own policies, and its behavior can differ when you interact with the player. These integrations remain in use where configured; they are not represented as disabled or entirely free of tracking.

Browser and device settings can limit storage and permissions, although disabling essential storage may affect a function. For an applicable consent withdrawal, advertising opt-out or objection, use the available control or the privacy contact above. Marketing messages, when sent, are subject to applicable permission and unsubscribe requirements. The use of an embedded service is not consent to unrelated marketing.

7. International processing

Moment uses providers operating across borders. Information can be stored or accessed outside your location; remote access can also be a transfer. DeepSeek's published privacy policy describes processing in the People's Republic of China. Other providers' processing locations depend on the service and configuration; the operator's incorporation address does not establish every data location.

Applicable transfer protections can require recipient information, contracts, assessments, consent or regulatory procedures, depending on the territory and processing. Where a specific notice or consent is required, this general policy does not replace it. Contact the privacy address to request information about the locations, recipients and safeguards applicable to your information. No domestic-only storage, certification or regulatory approval is represented here.

8. Retention, security and deletion

Information is retained for the purposes described and any applicable legal requirement. Account and login records support the account and security; content, messages and Agent records support the requested function and relevant requests; orders, payout and verification records support fulfillment, accounting, refunds and disputes; support and security records support case handling and abuse prevention. The required period depends on the record, purpose, account use, settlement, applicable accounting/tax rules and any specific legal hold.

When information is no longer necessary and no lawful retention ground remains, it is subject to deletion or anonymization. Necessary records retained for a legal obligation or dispute must be limited to that need. Backup expiry and independent public copies can differ from removal from an active system. You may ask about the treatment of a particular record through the privacy contact.

User self-service deletion and a complete data-erasure workflow are currently unavailable. The administrator closure process releases login identities after a recovery period but retains email, login history and other historical information. The default 30-day recovery period is not a data-erasure deadline. You can submit a request for manual handling as explained in Account deletion and data requests; closure status alone does not establish erasure.

Moment uses access and session controls and protections at service/provider boundaries. No system is risk-free. Security incidents are subject to assessment, protective action and notification obligations under applicable law.

9. Rights and regional notices

Email the contact in section 1 to request access, correction, deletion, consent withdrawal or another applicable right. State the service, request and account identifier, if any. Proportionate verification or a representative's authorization may be needed; do not send unnecessary identity documents or create another account to make a request. Applicable law governs deadlines, extensions, fees, exceptions, explanations and any appeal. You can complain to the competent regulator or use another available remedy.

United States: applicable state laws can provide access, correction, deletion, portability and opt-outs, with appeal and nondiscrimination rights where required. Where the CCPA applies, California residents also have its applicable sale/sharing and sensitive-information rights.
Japan: APPI rights can include disclosure of retained personal data and relevant third-party provision records, correction and cessation/deletion in statutory circumstances. You can request information about applicable foreign recipients and safeguards.
Singapore: PDPA rights include access, correction and withdrawal of consent, subject to the Act's conditions. Privacy questions and complaints can be sent to the contact in section 1; a general statutory erasure right is not assumed.
Hong Kong: the PDPO provides access/correction rights and principles governing purpose, security and retention. Applicable direct-marketing choices can also be exercised through the privacy contact.
Macao: Law 8/2005 governs information, access, correction and other applicable rights, security and transfers outside Macao, subject to its conditions.
Taiwan: applicable rights include inquiry/access, copies, supplementation/correction, cessation and deletion under the PDPA. Sections 2, 4, 7 and 8 describe the information, purposes, recipients, processing and retention criteria; declining necessary information can prevent the associated function.
Mainland China: the separately written Chinese policy addresses personal information, sensitive information, minors, automated decisions, transfers and rights. Selecting English does not waive applicable protections.

10. Children and changes

Accounts are intended for adults aged 18 or over who meet applicable legal-capacity requirements; there is no minor or guardian-account route. Children's information remains subject to additional legal protections. Contact the privacy address if you believe a child's information has been provided improperly; a guardian can identify their authority when making a request.

Updates identify the version and update date. Material changes require appropriate notice and, where required, fresh consent. A new policy does not retroactively authorize an unrelated purpose. Mandatory local protections prevail over inconsistent wording.