Privacy Policy
This policy explains what personal information Eunha Labs Inc. collects when you use Moa and our website, and how we handle it. Moa is designed to measure websites without tracking people.
1. Information about our customers
- Account: name, email address, password (stored only as a salted hash), sign-in session tokens.
- Websites: site names, addresses, time zones, client names and report settings you enter.
- Billing: handled by Paddle. We receive your name, email, country, plan and payment status, but never your full card details.
- Support: emails you send us.
We use this information to provide and secure Moa, process payments, answer you and send important service notices. We do not sell it or use it for advertising.
2. Data about visitors to our customers’ websites
When a customer installs Moa, we process visits on their behalf. The tracking script sets no cookies and stores nothing in the visitor’s browser.
- We record the page address, referrer, UTM campaign tags, custom event names, and the device type and browser derived from the user agent.
- To count unique visitors, the site, IP address and user agent are combined with a random secret that changes every day and is then deleted. Only the resulting hash is stored; the IP address itself is never stored.
- We do not build profiles of visitors or follow them across websites.
Customers decide what is collected on their sites and are responsible for informing their own visitors.
3. Cookies
- moa_session (app.moametrics.com): keeps you signed in; strictly necessary.
- moa_lang (moametrics.com): remembers the language you chose, for up to one year.
We use no advertising or tracking cookies.
4. Service providers and international transfers
We use the following providers to run Moa. Your information may be transferred to and stored in these countries, protected by the providers’ contractual and security commitments.
| Provider | Purpose | Location |
|---|---|---|
| Render Services, Inc. | Hosting of the Moa application and database | Singapore |
| Cloudflare, Inc. | DNS, this website, email forwarding, encrypted backup storage | Global network / USA |
| Paddle.com Market Ltd | Checkout, payments, invoices and refunds (Merchant of Record) | United Kingdom and its processors |
| Google LLC (Gmail) | Receiving support email sent to [email protected] | USA |
5. Retention
- Account and website data: while your account is active, and deleted within 30 days after you ask us to delete your account.
- Encrypted backups: kept for up to 30 days, then removed automatically.
- Billing records: kept for as long as tax and commercial laws require (in Korea, up to 5 years).
6. Security
Data is sent over HTTPS, passwords are hashed, and daily backups are encrypted with AES-256 before they leave our server. Access is limited to people who need it to run the service.
7. Your rights
You can ask to access, correct, delete or stop the processing of your personal information, or to receive a copy of it, by emailing [email protected]. We will respond within 10 days. You may also contact your local data protection authority; in Korea, the Personal Information Protection Commission and the KISA privacy centre (privacy.kisa.or.kr, 118).
8. Privacy officer
Jooha Lee, Representative · [email protected] · +82 10-7148-0277
9. Changes
If we change this policy we will post the new version here with its effective date, and notify customers by email of important changes at least 7 days in advance.