MoCRA Ops Kit

Privacy Policy

Last updated: January 7, 2026

MoCRA Ops Kit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

1. Information We Collect

Waitlist Information

When you join our waitlist, we collect:

  • Email address (required) — To notify you about launch updates and early access
  • Shopify store URL (optional) — To understand our audience and prioritize features
  • Product category — To tailor our product to your needs
  • SKU count range — To understand business size and requirements

Technical Information

We collect limited technical data for security and abuse prevention:

  • Hashed IP address — We use a one-way SHA-256 hash of your IP address for rate limiting and abuse prevention. We do not store your raw IP address, and the hash cannot be reversed to identify you.
  • Cloudflare Turnstile tokens — We use Cloudflare Turnstile for bot protection. Turnstile is privacy-focused and does not use cookies or persistent tracking.

What We Don't Collect

  • We do not use tracking cookies or analytics that follow you across the web
  • We do not collect payment information on the waitlist
  • We do not collect personal information beyond what's listed above

2. How We Use Your Information

We use your information solely for:

  • Sending you updates about MoCRA Ops Kit launch and early access
  • Understanding our user base to improve our product
  • Preventing abuse and ensuring service security
  • Responding to your inquiries if you contact us

3. Data Storage and Security

Your data is stored on Cloudflare's infrastructure using their D1 database service. Cloudflare maintains enterprise-grade security controls and is SOC 2 Type II certified.

  • All data is encrypted in transit (HTTPS/TLS)
  • Database access is restricted and authenticated
  • We implement rate limiting to prevent abuse

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only in these limited circumstances:

  • Service providers — Cloudflare (hosting and security) processes data on our behalf
  • Legal requirements — If required by law, court order, or government request
  • Business transfers — In connection with a merger, acquisition, or sale of assets

5. Your Rights

You have the right to:

  • Access — Request a copy of the data we have about you
  • Correct — Request correction of inaccurate data
  • Delete — Request deletion of your data from our waitlist
  • Unsubscribe — Opt out of email communications at any time

To exercise these rights, contact us at [email protected].

6. Data Retention

We retain waitlist data until you request deletion or until our product launches and you either become a customer or opt out. Hashed IP data for rate limiting is automatically purged after 24 hours.

7. Children's Privacy

MoCRA Ops Kit is intended for business use by adults. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by email.

9. Service Data (When the App Launches)

This section describes data handling that will apply once MoCRA Ops Kit launches as a full application. It does not apply to the current waitlist functionality.

App Data Storage

When you use MoCRA Ops Kit as a Shopify app, your business data — including product documentation, internal adverse event logs, and export records — will be stored securely using designated infrastructure providers. Specific storage processors and data regions will be documented here at launch.

Data Minimization

  • We will not use tracking cookies or third-party advertising pixels
  • We collect only the minimum personal information required to provide the service
  • Your product documentation belongs to you and can be exported or deleted at any time

Retention and Deletion

Data retention and deletion policies will be finalized at launch. You will always have the ability to export your data and request account deletion. Specific retention periods for different data types will be documented here.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Back to Home