What the Mac app handles
The app runs on your machine and talks to services you already have. None of these connections pass through Moorline.
- Your mailbox. You authorize it through Signet. Signet stores the durable OAuth authorization or app password encrypted; Moorline receives a time-limited lease in memory when it needs to sync or send. Mail is still read directly from your provider and replies are sent directly through your provider.
- Stripe, if you connect it. You attach a read-only restricted key to a product in Signet. Signet keeps the key encrypted and uses it server-side to return only the customer, charge and subscription fields Moorline needs. The key never reaches the Mac app or this website. Moorline cannot refund, cancel or charge anything.
- Apple Intelligence, if you use draft assistance. It runs on the device. No mail is sent to any server, and there is no API key or per-reply cost.
- Local storage. A single database file on your Mac, backed up hourly and kept for a week. It works offline.
What this website holds
- Your email address and licence key, so a licence can be issued, validated and recovered.
- Device identifiers for activated Macs, so the licence can be limited to the number of machines it covers. These are opaque identifiers, not device names or hardware serials shown to anyone.
- Subscription status from Stripe, received through a webhook so the licence stays in step with payment. Card details are handled by Stripe and never touch our servers.
Who else is involved
- Stripe processes payments and holds the billing relationship.
- LicenseWard issues and validates licence keys and records activated device identifiers.
- VersionWard publishes signed update metadata and release downloads.
- Signet stores product identity, encrypted mailbox authorization and encrypted provider credentials for services such as Stripe. It gives Moorline product-scoped access to allowlisted, read-only results and does not receive message content.
- Resend delivers transactional email, such as your licence key.
- Vercel hosts this website.
- DataFast provides privacy-focused website analytics. It records page views and referrers in aggregate. It does not use cookies for cross-site tracking and it does not build advertising profiles.
None of these receive your customer conversations, because this website never has them.
Your rights
You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Write to contact@moorline.app. Deleting your account data ends the licence, because the licence is the data.
Records are kept while your subscription is active and for as long afterwards as tax and accounting rules require for the payment record.
Changes
If this policy changes in a way that affects what is collected, the effective date at the top changes and existing customers are told by email. It will not change retroactively.