Legal & Compliance

Privacy Policy

Effective Date: October 14, 2026 · Built for the United States (CCPA / CPRA Compliant)

1. Our Core Commitment: No Sale of Personal Data

Moltbound operates as an agentic authorization and consent protocol. **We do not sell, rent, or trade your personal information, contact details, or quoting history to third-party data brokers or marketing networks.**

2. Passkey & Biometric Security Isolation

Moltbound utilizes WebAuthn / FIDO2 Level 3 public key cryptography for user authentication and purchase approval. When you verify an action using Touch ID, Face ID, or Windows Hello:

Biometric data never leaves the secure enclave of your physical hardware device.
Moltbound receives only a cryptographically signed assertion and public key ID.
No passwords or biometric templates are ever transmitted over the network or stored in our databases.

3. Data We Collect and How It Is Used

Quote Risk Profiles: When an AI assistant requests quotes on your behalf, we receive categorical data (e.g. vehicle make/model, residential ZIP code, deductible preference). We deliberately instruct agents not to submit personal identifiers such as names, social security numbers, or street addresses during the quoting phase.

Account Credentials: If you register a human account, we store your public key credential ID and verified email address for service-related communications.

Session Telemetry: In the sandbox environment, anonymous sessions and quote cache records automatically purge after 2 hours.

4. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you hold specific privacy rights under California Civil Code Section 1798.100:

Right to Know: You may request disclosure of any personal information we maintain regarding your account.
Right to Delete: You may request the permanent deletion of your account and public key identifiers.
Right to Non-Discrimination: We will never alter pricing or deny service quality for exercising your privacy rights.

5. Third-Party Partners & External Integrations

When you explicitly authorize a quote from a partner provider using your passkey, the relevant transaction token is transmitted to that licensed provider to fulfill your order. Each licensed provider maintains their own independent privacy policy governing active policy servicing.

6. Contact Privacy Team

For any privacy inquiries, data subject requests, or CCPA verification, email our privacy officer at privacy@moltbound.dev.