# Security and confidentiality

Plain-English answers for MoyoMap and Moyo Scan, operated by SenTeGuard Inc.. Last updated: October 19, 2026.
HTML: https://moyomap.com/security

## Where do customer uploads go?

A MoyoMap workspace stores the maps, claims, labels, comments, and imported text you keep there. A Moyo Scan takes text you type: a target name, optional focus, and contact email. It does not accept a confidential file dump. Payment goes through Stripe.
Map data, order records, and files live in Firestore and object storage. The website is hosted on Netlify. Password-gated Moyo Scan copies are kept in a dedicated report bucket.
White-box or custom work that involves private corpora is only accepted under a written engagement.

## How long do you retain them?

A private MoyoMap stays until you delete it. A hosted Moyo Scan link and its password stay available for 7 days after the link is created. Public sample reports are not on that timer.
Order and payment records needed for receipts, support, accounting, and fraud prevention are kept. Working scan materials are not kept forever. Longer retention for custom or team work is set in writing.

## Who can access them?

People at SenTeGuard Inc. who need them to run, deliver, or support the order, and processors that host the site, store files, send email, or take payment.
A private MoyoMap is visible to its owners and the people they invite. A hosted Moyo Scan opens with the link and password sent to the customer. Customer orders are not on the public reports list unless the customer asks to publish a sample.

## Are they sent to third-party AI providers?

A MoyoMap job that calls a model, and a Moyo Scan, send the topic, prompts, and the text that job needs to commercial AI providers (for example OpenAI, Anthropic, Google, xAI, and similar APIs).
Use your own API for added security. Save a provider key on your MoyoMap account and run retrieval on that key. Those requests are billed to you and sent under your provider account.
Stripe card numbers are not sent to AI providers. Private document corpora are not uploaded through the public Moyo Scan form.

## Are they used for training?

SenTeGuard Inc. does not use Moyo Scan inputs, model outputs, report files, or a private MoyoMap workspace to train its own models or to build a shared training corpus.
Public maps are different. Contributor terms version 1.2 and later allow SenTeGuard Inc. to use a map the member chooses to publish, and its review labels, to evaluate, train, and fine-tune models SenTeGuard Inc. operates, and for resale. Earlier contributor-terms versions do not include that clause.
You can use your own API for retrieval. That keeps the provider request on your key. It does not put a private map into training or resale. Third-party providers process prompts under their API terms. Customer prompts are not enrolled in consumer “improve the model” settings.

## How do customers request deletion?

Email david@senteguard.com or use /contact. Name the order, report link, or email address. Ask to delete personal data and hosted report copies.
Deletion follows the law and any payment or tax record duties.

## Do report outputs remain private?

Yes by default. Delivered reports are behind a passworded link and are not listed on the public reports page unless the customer authorizes publication.

## What metadata do you retain?

Typical order metadata: contact email, target or prompt text, audience, models used, Stripe order and payment status, timestamps, and delivery link details.
Hosts may log IP address and user agent. Full card numbers are not stored on SenTeGuard Inc. servers.