Moon

Terms of Service

Last updated 26 September 2026 · Version 2026-09-26

These terms are a contract between Moon Labs Inc. ("Moon", "we", "us") and the company that uses Moon (the "Customer") and each person who signs in to it (a "User"). They govern the recruiting workspace at app.getmoon.ai, the Moon for LinkedIn browser extension, and every related page and service we provide (together, the "Service").

What you are agreeing to — the short version. This box is a summary to help you read the rest. It is not part of the contract; the numbered sections below are.

1. Acceptance

You accept these terms by doing any of the following: ticking the acceptance box on the sign-in page, confirming the in-app acceptance screen, signing an order form that refers to them, or using the Service. We record each acceptance with the date, the version accepted, the IP address and the browser used.

If you accept on behalf of a company, you confirm that you have authority to bind it, and "Customer" means that company. If you do not have that authority, or the company does not agree, you may not use the Service.

Each User is also bound personally by the parts of these terms that govern their own conduct: sections 4 to 8 (accounts, connected accounts, the browser extension, AI features and acceptable use). Everything else binds the Customer.

Eligibility and electronic acceptance. The Service is for business use by people who are at least 18. By accepting electronically you agree that your acceptance, these terms and any notice we send by email or in the app have the same force as a signed paper document.

If you do not agree to these terms, do not use Moon.

2. Definitions

3. The service

Moon helps talent teams find candidates, contact them, schedule and run interviews, and record decisions. It includes the web app, the Extension, Public Pages, integrations with Connected Accounts and the Customer's applicant tracking system, and AI features described in section 7.

We may change and improve the Service over time. We will not materially reduce what a paying Customer receives during a paid term without notice to its administrators.

Trials and free plans are provided for evaluation, may be limited in features and time, and may be ended by us at any time.

Beta features. Features marked beta, preview, experimental or similar are provided for evaluation, may change or be withdrawn without notice, and are excluded from any warranty or uptime commitment.

4. Accounts and Users

Credentials

Users sign in with a magic link or one-time code sent to their work email address. Each User must keep that email account secure. A magic link or code is for the person it was sent to; do not forward or share it.

Responsibility for activity

The Customer is responsible for everything done under its account, including by its Users. Each User is responsible for their own actions in Moon. Tell us promptly at services@moon.ac if you believe a sign-in link, a device or a Connected Account has been compromised, or if a User who should no longer have access still does.

Shared devices

Do not use Moon, and in particular do not connect accounts or turn on the Extension's "Keep my LinkedIn connected" switch, on a device or browser profile that other people use or where someone else is signed in to LinkedIn, email or WhatsApp.

Administrators

The Customer designates administrators who add and remove Users, connect its applicant tracking system, and receive our notices. Removing a User ends that User's access; the Customer decides what happens to the User's Connected Accounts and work product.

5. Connected accounts

A User may connect one or more of the following to Moon:

What you authorise. By connecting an account, the User authorises Moon to access it and act from it on the User's instruction: to read messages that relate to candidates, to send messages and connection requests the User or the Customer has asked Moon to send, to place calls and SMS, to read free/busy time and create interview events, and to store the resulting conversation history in Moon. Moon does not read or store mail, chats or calendar content that has nothing to do with the Customer's recruiting.

What you confirm. The User confirms that they own each Connected Account or are authorised by its owner and by the Customer to use it this way, and that using it through Moon is allowed by the account provider's terms that apply to them. The Customer confirms it permits its Users to connect the accounts they connect.

Disconnecting. A User may disconnect any Connected Account at any time in Settings. Disconnecting stops future access and deletes the stored access credentials for that account. Messages already stored in Moon remain part of Customer Data until the Customer deletes them.

Provider limits. Each provider sets its own rules and limits. We are not responsible if a provider changes or withdraws access, rate-limits or restricts an account, or suspends it. Moon may pause or disconnect a Connected Account if we believe continuing would breach these terms, the AUP, the provider's rules or the law, or would put the account or the Service at risk.

6. Moon for LinkedIn browser extension

The Extension is optional. It runs only on LinkedIn, on the pages of the applicant tracking system the Customer has connected, on Google Meet and Microsoft Teams, and on app.getmoon.ai. The exact sites are listed in the Extension's own permissions when you install it. It collects nothing from any other website.

The LinkedIn session credential — read this before you turn it on

Plain statement of what happens. When you turn on the switch "Keep my LinkedIn connected" (a consent step when the Extension first runs, and a switch in the Extension's options afterwards), the Extension reads your LinkedIn session credential — the browser cookie that keeps you signed in to LinkedIn — from your browser and sends it to Moon. Moon holds that credential, together with our messaging-connectivity provider, so that Moon can act from your LinkedIn account (read threads, send the messages, InMails and connection requests you ask it to send) without you signing in to LinkedIn a second time. While the switch is on, the Extension re-reads and re-sends the credential periodically so the connection keeps working.

What that means. Anyone who holds this credential can act as you on LinkedIn. That is the point of it, and it is also the risk. Moon protects it: it is encrypted in transit, held by an infrastructure provider under contract with us, never written to logs, never stored inside the Extension, and deleted when you disconnect LinkedIn or turn the switch off.

Your consent. By turning the switch on you confirm that you understand the paragraphs above and that you expressly authorise the Extension to read your LinkedIn session credential and send it to Moon, and Moon to hold it and use it to act from your LinkedIn account on your and the Customer's instructions. You may withdraw this consent at any time by turning the switch off, disconnecting LinkedIn in Moon, or uninstalling the Extension.

Your responsibilities. You must only turn the switch on in a browser where you are the person signed in to LinkedIn, on a device you control. You are responsible for complying with LinkedIn's user agreement and the rules of any LinkedIn seat you use, and for deciding whether connecting your account this way is appropriate for you and for the Customer. Moon does not guarantee that LinkedIn will permit this kind of connection, and LinkedIn may restrict or challenge an account. Moon may suspend or end the connection at any time if we believe it is being misused, puts your account or the Service at risk, or is no longer permitted.

What else the Extension does

Each of these behaviours is controlled by a setting in the Extension. Turning a setting off stops that behaviour. Uninstalling the Extension stops all of them. Our Privacy Policy describes the data involved in more detail.

7. AI features and hiring decisions

Moon uses AI to draft outreach and replies, summarise conversations and interviews, write scorecards, suggest screening questions and score candidates against a role. Where the Customer turns it on, Moon can also place AI-conducted phone or video screening calls and record and transcribe interviews.

Human review. A person on the Customer's team reviews and sends every candidate-facing message, except where the Customer has expressly turned on automatic replies for a specific role. The Customer is responsible for what is sent either way.

Recording and AI calls. The Customer may enable AI screening calls and interview recording or transcription only where it has given every participant the notice and obtained the consent that the law requires where they are, including in states and countries that require all parties to consent. The Customer is responsible for that notice and consent.

Output can be wrong. AI output can be inaccurate, incomplete, out of date or biased. It is a draft or a suggestion, not a decision. Check it before you rely on it.

Hiring decisions are yours. The Customer makes every hiring decision. The Customer must comply with employment, anti-discrimination and privacy law wherever it operates, and with any law that governs the use of automated or AI tools in hiring where it operates, including any bias-audit, notice or candidate-rights requirements. Moon does not make hiring decisions and does not decide whether such laws apply to the Customer.

No solely automated decisions. Moon does not make decisions that produce legal or similarly significant effects on a candidate by solely automated means. Every such decision is made by a person on the Customer's team.

8. Acceptable use

The Acceptable Use Policy is part of these terms. In short, you must not:

Moon enforces unsubscribe requests and suppression lists across the Customer's account and may rate-limit sending. Breach of this section or the AUP is grounds for immediate suspension.

9. Candidate data, roles and the DPA

Roles. The Customer decides which candidates go into Moon and what is stored about them. For candidate and other personal data in Customer Data, the Customer is the controller (or "business") and Moon is the processor (or "service provider"), acting on the Customer's documented instructions, which include these terms and the Customer's use of the Service.

The Customer's obligations. The Customer is responsible for having a lawful basis to collect and process candidate data, for giving candidates the privacy notices the law requires, for honouring candidate rights requests, and for the lawfulness, content and opt-out handling of every message sent through Moon.

Moon's obligations. We process Customer Data only to provide the Service, to keep it secure and to meet our legal obligations. We do not sell personal data, and we do not use Customer Data to advertise. We help the Customer respond to candidate requests. We route any candidate request we receive directly to the Customer.

Candidates who contact us. If a candidate asks us to correct or delete their information, we pass the request to the Customer that holds it and follow the Customer's instructions, unless the law requires us to act ourselves.

DPA. A Data Processing Addendum is available on request at services@moon.ac. For Customers that require one, the executed DPA forms part of these terms and prevails over them on data-protection matters.

US state privacy law. Where a US state privacy law applies, Moon acts as the Customer's service provider or processor. We will not sell or share Customer Data, retain, use or disclose it for any purpose other than providing the Service and as permitted by that law, or combine it with personal information we receive from others except as the law allows. We will tell the Customer if we can no longer meet these obligations.

10. Third-party services and sub-processors

Moon relies on third-party providers to run the Service. We do not list them by name here; we describe them by category. A current list of sub-processor categories is available on request at services@moon.ac, and we will notify Customer administrators of material changes before they take effect.

Each provider is bound by contract to protect Customer Data. Your use of a Connected Account, calendar or applicant tracking system also remains subject to that provider's own terms. We are not responsible for a provider's availability, changes or acts, but we remain responsible to the Customer for our sub-processors' handling of Customer Data as set out in the DPA.

11. Fees

Fees, billing frequency and the term are set out in the Order Form. Fees are payable in advance unless the Order Form says otherwise and are non-refundable except where the law requires a refund. Amounts exclude taxes; the Customer pays any sales, use, VAT or similar tax, other than taxes on our income. We may suspend the Service for fees that remain unpaid 30 days after we give notice. We will give notice before a price change takes effect at renewal.

12. Intellectual property and feedback

Moon and everything in it — software, models we build, design, documentation, the Extension — belong to us and our licensors. We grant the Customer and its Users a non-exclusive, non-transferable right to use the Service during the term, for the Customer's own recruiting.

Customer Data belongs to the Customer. The Customer grants us only the licence we need to host, process, transmit and display it to provide the Service and to keep it secure. The Customer may export Customer Data at any time while its account is active.

We may use aggregated, de-identified usage data to operate and improve Moon, provided it cannot identify the Customer, a User or a candidate.

If you send us suggestions or feedback, we may use them without restriction or payment. We will not identify you as the source without your permission.

13. Confidentiality

Each side will protect the other's confidential information with at least reasonable care, use it only to perform under these terms, and share it only with people and providers who need it and are bound to keep it confidential. Confidential information does not include what is public, already known, independently developed or received lawfully from someone else. Either side may disclose confidential information when the law requires it, giving the other notice where allowed. Customer Data is the Customer's confidential information.

14. Security

We protect Customer Data with encryption in transit and at rest, role-based access controls, audit logging of actions on candidate records, and isolation between Customer tenants. Access credentials for Connected Accounts, including the LinkedIn session credential, are encrypted and never written to logs. We will notify the Customer's administrators without undue delay after confirming a security incident that affects its Customer Data. The Customer is responsible for security on its side: who it adds as Users, the devices its Users use, and the accounts they connect.

Usage data and diagnostics. To keep the Service reliable we collect product usage data, error reports and, in the web app, session recordings of how a User moves through the app with typed input masked. These are used for troubleshooting and product improvement only, are not used for advertising, and are described in our Privacy Policy.

15. Availability and support

We work to keep Moon available and reliable, but we do not promise uninterrupted service. Maintenance, provider outages and events outside our control can interrupt it. Any uptime commitment or support level is in the Order Form. Otherwise we provide support by email at services@moon.ac during our business hours.

16. Warranties and disclaimers

We warrant that the Service will perform materially as described in our documentation during a paid term. The Customer's only remedy for breach of that warranty is that we fix the problem or, if we cannot, refund fees paid for the affected period.

Otherwise the Service is provided "as is". To the extent the law allows, we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that AI output is accurate, complete or suitable for any hiring decision; that a Connected Account, LinkedIn seat or the LinkedIn session connection will keep working or be permitted by the provider; that candidate contact information obtained from third parties is accurate; or that the Service meets the requirements of any particular law that applies to the Customer's hiring.

17. Indemnification

By the Customer. The Customer will defend and indemnify Moon, its officers, employees and contractors against third-party claims, and pay resulting damages, costs and reasonable legal fees, arising from: (a) the Customer's or a User's breach of these terms or the AUP; (b) unlawful or unsolicited outreach sent through Moon, or failure to honour opt-outs; (c) use of a Connected Account or the LinkedIn session connection, including any claim by an account provider or by the account's owner; (d) recording, transcribing or AI-screening a person without the required notice or consent; (e) the Customer's hiring decisions, or its compliance with employment, anti-discrimination, privacy or AI-in-hiring law; or (f) Customer Data.

By Moon. We will defend and indemnify the Customer against third-party claims that the Service itself, as we provide it, infringes a patent, copyright or trademark or misappropriates a trade secret, and pay resulting damages and costs awarded or agreed in settlement. This does not cover claims arising from Customer Data, Connected Accounts, third-party services, AI output, modifications not made by us, use in breach of these terms, or combination with something we did not supply. If a claim arises, we may modify or replace the Service to avoid infringement or, failing that, end the affected part and refund prepaid fees for the remaining term. This section states our entire liability for infringement claims.

Process. The indemnified side must notify the other promptly, give it control of the defence and settlement, and cooperate reasonably. No settlement may admit fault on behalf of, or impose obligations on, the indemnified side without its consent.

18. Limitation of liability

To the extent the law allows: neither side is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, however caused, even if advised of the possibility. Each side's total liability arising out of or related to these terms is capped at the fees the Customer paid us in the twelve months before the event giving rise to the claim.

These limits do not apply to: a side's indemnification obligations under section 17; a Customer's obligation to pay fees; breach of section 13 (confidentiality); a User's or Customer's misuse of a Connected Account or the LinkedIn session credential; or liability that cannot be limited by law, including for fraud, gross negligence, wilful misconduct, or death or personal injury caused by negligence.

19. Term, suspension and termination

Term. These terms apply from the first acceptance and continue while the Customer has an account. A paid plan runs for the term in the Order Form and renews as the Order Form says.

Termination by the Customer. The Customer may stop using Moon at any time and may close its account by notice to us; prepaid fees are not refunded except as section 11 says.

Suspension and termination by Moon. We may suspend a User, a Connected Account or the Customer's account, or end these terms, if: there is a breach of these terms or the AUP that is not fixed within 10 days of notice (or at once, for spam, security or legal risk); fees are overdue as section 11 says; a provider or the law requires it; or we reasonably believe continued use would harm the Service, other customers, candidates or a provider relationship. We will tell the Customer's administrators why, unless the law prevents it.

What happens to data. The Customer may export Customer Data until its account closes. After termination we delete or, if asked before deletion, return candidate and other Customer Data within 30 days, except copies in backups (deleted within 90 days) and what the law requires us to keep. User account records are kept while the account exists and deleted afterwards on the same basis. Sections that by their nature should survive — including 9, 12, 13, 17, 18, 21 and 22 — survive termination.

20. Changes to the terms

We may update these terms. Each version carries a version number and date at the top. For material changes we will notify the Customer's administrators before they take effect, and we may ask Users to accept the new version at their next sign-in. Continuing to use Moon after a change takes effect means the Customer and its Users accept it. If the Customer does not agree, it may close its account before the change takes effect and we will refund prepaid fees for the remaining term.

21. Governing law and dispute resolution

These terms are governed by the laws of the State of California, United States, without regard to conflict-of-law rules. Before starting any claim, the sides will try in good faith to resolve the dispute by discussion between people with authority to settle it, for at least 30 days after one side gives the other written notice of it. If that fails, the state and federal courts located in Contra Costa County, California have exclusive jurisdiction, and each side submits to them. Either side may seek urgent injunctive relief in any court to protect its intellectual property or confidential information.

To the extent the law allows, each side waives the right to a jury trial, and agrees that claims will be brought only in its own name and not as a plaintiff or class member in any class, collective or representative proceeding.

22. Miscellaneous

23. Contact

Moon Labs Inc.
1990 N California Blvd, 8th Floor
Walnut Creek, CA 94596
United States
services@moon.ac