Privacy Policy

1. What we collect

• Account details: your name, email address, workspace and role. Sign-in is handled by our identity provider, which keeps your password; we never see it.
• Your content: messages, files you upload, files and images generated for you, projects, skills, custom instructions and memories.
• Usage records: for each request, the time, the model used, the amount of text processed and its cost. These are what billing, budgets and the admin console are built on.
• Payment records: the amount, currency, status and the payment provider's reference. Card numbers go directly to the card payment processor and never reach us.
• Technical logs: request logs and error reports, kept to run and secure the Service.

2. How we use it

To provide the Service: answering your requests, storing your work, making your files searchable, billing your workspace, and keeping the Service secure. We do not sell your data or show advertising.

If memory is switched on in Settings (it is by default), the app saves short notes from your conversations to personalise later answers. You can see, delete or switch off memories at any time.

3. Who we share it with

Only the providers needed to run the Service, for that purpose:

• AI model providers, which supply the models offered in the app, reached through our gateway: the text of a request and the files it refers to, to produce the answer; audio you dictate, to transcribe it (we do not store the audio).
• A web search provider: the search queries a researched answer makes.
• Payment processors, which handle QR and card payments.
• Cloud hosting and storage providers, which hold the database and files. The visit statistics described in section 5 are counted by analytics software we run ourselves on that hosting, so they are shared with no one else.
• Error-monitoring services, which may receive technical details when something fails.

4. Language suggestion

To suggest a language, this website may look up the country your IP address belongs to, using a geolocation database on our own servers. Only the country is used, and the IP address is not stored for this purpose. The suggestion is a bar you can dismiss; we never redirect you.

5. Cookies and local storage

We use no advertising or tracking cookies. This website stores one value in your browser's local storage: that you dismissed the language suggestion. The app keeps your sign-in session in session storage and preferences such as language and layout in local storage; our identity provider sets the cookies sign-in needs.

To see which pages are read and which buttons are used, this website and the app count page views and button clicks with analytics software we host ourselves, not a third-party service. It sets no cookies and stores no IP address: visits are told apart by a one-way code that changes every month and cannot be turned back into an address or a person. It records the page address without its query or fragment (conversation, project and shared-link addresses are reduced to their type), the referring site, browser, device type, language, and the country and city the IP address points to (the address itself is then discarded), and never what you type or what a conversation contains. If your browser sends Do Not Track, nothing is counted.

6. How long we keep it

Your content stays until you or your workspace delete it. Temporary chats are deleted automatically. When you delete your account, your conversations, files, projects and memories are deleted; usage and audit records stay with your workspace with your identity removed, because they make up its bills and its audit trail.

7. Your choices and rights

From Settings you can export all of your data, switch memory off, and delete your account. You can also write to us to ask for a copy of your data, a correction, or deletion. If your workspace administers your account, some requests may be handled through them.

8. Security

Connections are encrypted with HTTPS. Each workspace's data is kept separate from every other workspace's, access is controlled by role, and administrative actions are recorded in an audit log. See the Security page for more.

9. Changes

We will post updates here with their date, and tell administrators in advance about significant changes.

10. Contact

Privacy questions and requests: mongo.chat/contact.