Privacy Policy
Effective date: October 28, 2026
Chariot is a product of Moltcorp Inc., a Texas corporation ("Moltcorp", "we", "us"). This policy explains how we handle personal information when you use chariotai.com, the Chariot app, and the form delivery service on sites built with Chariot.
1. Who we are
Moltcorp Inc.
5900 Balcones Drive, Suite 100
Austin, TX 78731
United States
Email: support@chariotai.com
For accounts, billing, and the Chariot product, Moltcorp is the controller. When a form on a customer site is submitted through Chariot, the site owner is the controller of that submission and Moltcorp is their processor. We only use those submissions to deliver them to the site owner and to keep the form service secure.
2. Information we collect
- Account information. Name, email address, and sign-in details when you create an account or contact us.
- Project content. Prompts, chat messages, files, and the websites you build, including content stored so we can preview and publish a site.
- Form submissions. The fields a visitor enters on a Chariot form, plus files they upload. We email the submission to the site owner and store uploaded files so that delivery works.
- Billing information. Subscription status, plan, and transaction records. Card numbers are collected and stored by Stripe, not by us.
- Usage and device information. Pages viewed, features used, approximate location derived from IP address, browser type, and identifiers in cookies or similar storage.
- Support and operations messages. What you send to support, and short activity notes we use to operate the product.
3. How we use it, and why
- To provide Chariot. Creating your account, building and publishing sites, delivering form submissions, and running your subscription. This is necessary for the contract.
- To take payment and keep tax records. Necessary for the contract, and for legal obligations once a tax applies.
- To keep the service secure. Fraud prevention, rate limits, abuse detection, and debugging. This is our legitimate interest, and it is also needed to provide the service.
- To measure and advertise, where allowed. Analytics and marketing cookies run only after you accept them in countries that require prior consent. Elsewhere they run until you turn them off. Where consent is required, consent is the legal basis. Where it is not, we rely on legitimate interests and you can opt out.
- To email you about Chariot. Service emails are part of the contract. Product emails to existing customers are sent with an unsubscribe link. You can opt out of those at any time.
We send prompts, project files, and related content to AI model providers so they can generate and edit your site. We do not sell your personal information for money.
4. Cookies and similar technologies
Necessary cookies are required to run Chariot. Analytics and marketing cookies are optional. In the UK, the EEA, Switzerland, and other countries that require prior consent, we ask before those optional cookies are set, and Reject is as available as Accept. In the United States and other countries, they are on until you turn them off. Use Cookie settings in the footer, or in your account menu, to change your choice. The choice is stored for six months.
If your browser sends the Global Privacy Control signal, we treat it as an opt-out of marketing cookies unless you later choose to allow them.
US state privacy laws treat some advertising cookies as "sharing" personal information. Turning marketing cookies off is an opt-out of sale or sharing. The footer link "Do Not Sell or Share My Personal Information" opens the same settings for visitors in the United States.
| Cookie | Who sets it | Purpose | Duration | Category |
|---|---|---|---|---|
| chariot_consent | Chariot | Stores your cookie choice | 6 months | Necessary |
| Session cookies | Chariot | Keep you signed in | Session, or until you sign out | Necessary |
| sidebar_state | Chariot | Remembers whether the sidebar is open | 7 days | Necessary |
| auth_method, is_new_user | Chariot | Records that a sign-in just happened so we can measure it once | 5 minutes | Analytics |
| Umami | Chariot (analytics.moltcorporation.com) | Page and feature measurement | Session | Analytics |
| chariot_content_id, chariot_attribution | Chariot | Remembers which ad or campaign brought you in | 30 days | Marketing |
| _fbp, _fbc | Meta, via our tag manager | Ad measurement | Up to 90 days | Marketing |
| Google Tag Manager cookies | Google and advertising partners, including Meta and Reddit | Ad measurement and campaign attribution | Set by those partners, often up to 90 days | Marketing |
| rewardfulReferral and Rewardful cookies | Rewardful | Affiliate attribution | Set by Rewardful | Marketing |
| OpenAI ads pixel | OpenAI | Ad measurement | Set by OpenAI | Marketing |
5. Who we share it with
We use these companies to run Chariot. They process information on our instructions:
- Stripe, for payments and billing
- Vercel, for hosting the application
- Neon, for the application database
- Amazon Web Services, for file storage and chat storage
- Postmark and Resend, for email
- Anthropic, OpenAI, Google, and Moonshot, for the models that generate and edit sites
- e2b, for preview environments
- GitHub, for site source code
- Netlify, for hosting published sites
- Slack, for internal notices about account activity
- Axiom, for logs used to operate and debug the service
When marketing cookies are allowed, information such as a truncated IP address, cookie identifiers, and pages viewed can also be received by Google, Meta, Reddit, Rewardful, OpenAI's ads pixel, and other partners configured in our tag manager. Those partners use it to measure and show ads.
We also share information if the law requires it, or to protect the rights, safety, and security of Moltcorp, our users, and others.
6. Where it is processed
Moltcorp is in the United States, and the providers above mostly process information there. If you are in the UK, the EEA, Switzerland, or another country with transfer rules, your information is processed in the United States. We use contracts with those providers, including standard contractual clauses where the provider offers them.
7. How long we keep it
We keep account and project information while your account is open. After a verified deletion request, we delete or de-identify personal information within 30 days, except records we need for tax, accounting, fraud prevention, or to establish or defend a legal claim. Billing records are kept for the period tax law requires. Form uploads are kept so the site owner can receive them, and are removed when the project is deleted or when you or the site owner ask us to delete them. Security logs are kept for a limited time.
8. Your rights
Depending on where you live, you can ask us to:
- Confirm whether we process your personal information, and for a copy of it
- Correct it
- Delete it
- Restrict or object to processing, including processing based on legitimate interests
- Receive a portable copy of information you provided
- Withdraw consent. Withdrawal does not affect processing that happened before you withdrew it
- Opt out of sale or sharing, and opt out of marketing cookies
- Appeal a refusal of a privacy request
Email support@chariotai.com. We may need to confirm it is you. You can also complain to the data protection authority where you live. In the UK, that is the Information Commissioner's Office.
9. Children
Chariot is not directed at children under 16, and we do not knowingly collect their personal information.
10. Customer websites
If you publish a site with Chariot, you are responsible for that site's privacy notice and for any cookie consent your own analytics or ads require. Our processing of form submissions is described in the Terms of Service.
11. Changes
We will post changes on this page and update the effective date. If a change materially affects how we use information, we will also notify account holders by email or in the product.
12. Contact
Moltcorp Inc., 5900 Balcones Drive, Suite 100, Austin, TX 78731, USA
support@chariotai.com