This is a working draft, not a finished legal document. It has not been reviewed by a lawyer and should not be treated as our final, binding privacy policy. Before Moniker launches to real users, this page must be reviewed and finalised by qualified legal counsel, including for GDPR, CCPA, and any other applicable regional data-protection law.

1. What this policy covers

This Privacy Policy describes how Moniker, a product of RevvBox Digital Pty Ltd ("RevvBox Digital," "we," "us," or "our"), an Australian company, collects, uses, stores, and shares information when you use the Service, including the website at getmoniker.id and your Moniker alias identity. We intend to handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and, for users located in other regions (e.g. the EU/UK or California), additional obligations such as the GDPR or CCPA may also apply. The specific compliance framework is still being finalised with legal counsel.

2. Information we collect

Verification information. Your business email address. It is stored by our authentication provider so that we can verify you at signup, sign you in, and send password resets, these are the only purposes it is used for. It is held separately from your Moniker profile and alias activity, is never joined into an inbox query or any vendor-facing response, and is never used for marketing or outreach. Your product profile stores only a one-way hash of it, so product features cannot read the address even in principle.

Identity information. At signup, we collect your full real name, job title/company name, and your state and country. This is real, identifying information. Used only to reduce fake or bot signups and to support account recovery. It is not used to generate your vendor-facing profile, which you select yourself (see below). It is never shown to vendors, never included in your public Moniker profile, and access to it is restricted even internally to the account-recovery and verification functions that need it.

Profile information. A chosen display name (not your real name), and a deliberately coarse, non-identifying company profile that you select from constrained options at signup. Broad industry, company size band, and HQ country (e.g. "Technology & Software · 201–1000 · Australia" rather than your actual employer), plus your self-described role and the product categories you're evaluating. This is what a vendor actually sees. We do not enrich, look up, or infer these values from any other source.

Alias activity. Email messages sent to and from your Moniker alias address (including sender/recipient addresses, timestamps, and message content) so we can route, classify, and display them in your Smart Inbox.

Waitlist and contact information. If you join the waitlist, your email address is collected via our form provider (Netlify Forms) for the purpose of contacting you about early access.

3. How we use information

  • To operate your alias identity, routing inbound email to your Moniker inbox.
  • To classify and categorise inbound outreach by product type and buying stage, using the routing rules you configure.
  • To enforce your whitelist, quarantine, and block preferences.
  • To communicate with you about your account, service changes, or (if you've opted in) early access and product updates.
  • To maintain the security and integrity of the Service.

We do not use your verification email, or any real personal information you have not explicitly chosen to share, for advertising or outreach purposes.

4. What vendors receive

A vendor you contact through Moniker receives your alias email address, and the coarse profile information you selected at signup (broad industry, company size band, HQ country) together with the product category you're evaluating. Vendors do not receive your real name, real email, real phone number, or employer unless you disclose it yourself outside the Service.

5. Service providers we use

Moniker relies on third-party infrastructure providers to operate the Service, including:

  • Cloud infrastructure and email routing (e.g. AWS SES, S3, and Lambda) to receive and process inbound mail to your alias.
  • Database hosting (Supabase) to store your account, routing rules, and inbox contents.
  • Netlify, to host this website and process waitlist form submissions.

These providers process data on our behalf under their own security and data-processing terms, and do not have independent rights to use your data for their own purposes.

6. Data retention

We retain alias activity data for as long as your account is active, and for a limited period after account closure or alias reset to allow recovery of your account if closure was accidental. A specific retention schedule is being finalised ahead of launch and will be reflected here.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, export, or delete your information, and to object to or restrict certain processing. You can reset your alias identity, adjust your whitelist/block settings, or close your account at any time from within the Service. Requests beyond that can be made through the contact method published on getmoniker.id.

8. Cookies and website analytics

This website sets no cookies, uses no local storage, loads no third-party scripts, and runs no analytics. There is no Google Analytics, no advertising or conversion pixel, no session recording, no A/B testing tool, and no fonts or other assets served from another domain. You can verify this rather than take our word for it: open your browser's developer tools, load any page on this site, and inspect the Network and Application tabs.

Two things do happen, and we would rather name them than imply that nothing at all touches your request. Our hosting provider (Netlify) processes standard server access logs, including IP address and user agent, as an inherent part of serving a web page, under their own terms. And if you submit the waitlist form, that submission is handled by Netlify Forms as described in Section 2.

9. Children's privacy

Moniker is a B2B product intended for use by working professionals. It is not directed at, and we do not knowingly collect information from, individuals under 18.

10. International data transfers

RevvBox Digital Pty Ltd is registered in Australia, and Moniker is operated as an Australian business. Where you are located outside Australia, your information may be transferred to and processed in Australia and other countries where our service providers operate (see Section 5). [Placeholder: specific safeguards (e.g. standard contractual clauses for EU/UK users, or other applicable cross-border transfer mechanisms) to be confirmed with legal counsel based on where users are located.]

11. Changes to this policy

We may update this Privacy Policy as the Service evolves. Material changes will be communicated to registered users before taking effect.

12. Contact

Questions, access and correction requests, and privacy complaints can be directed to privacy@getmoniker.id, or by post to RevvBox Digital Pty Ltd, Australia. We aim to acknowledge privacy enquiries within 5 business days and to respond substantively within 30 days.

If you are not satisfied with our response to a privacy complaint, you may refer it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. [Placeholder. A full postal address is required and must be added before launch. Escalation paths for users outside Australia to be confirmed with legal counsel alongside Section 10.]