Privacy Policy

1. Overview

This Privacy Policy explains how Monaro Studio collects and uses information when you visit monaro.studio, use app.monaro.studio, contact us, or use Monaro to create site visit records and reports.

For account, billing, and website data, Monaro Studio is generally the controller. For project materials you upload for your own clients or organisation, Monaro generally acts as a processor or service provider on your behalf, depending on the context.

Questions or privacy requests can be sent to edward@monaro.studio.

2. Information we collect

• Account information: name, email address, login details, workspace name, role, settings, and authentication events.
• Project and report content: photos, voice notes, transcripts, files, room or site notes, client names, project addresses, tasks, report drafts, shared report links, and related metadata that you choose to upload or create.
• Billing information: plan, subscription status, invoice and payment metadata, billing email, tax or business details, and Stripe customer references. Full card details are handled by Stripe, not stored by Monaro.
• Support and communications: messages you send us, feedback, support requests, and email delivery metadata.
• Website and device data: IP address, browser, device type, referring URLs, pages viewed, clicks, approximate location from IP, cookies, pixels, and similar analytics data.

3. How we use information

• Provide, secure, maintain, and improve Monaro.
• Create workspaces, authenticate users, process uploads, generate drafts, build reports, and share PDFs or report links.
• Process subscriptions, invoices, cancellations, and billing support through Stripe.
• Send service emails such as verification, password reset, billing, account, and support messages.
• Monitor performance, debug errors, prevent abuse, protect workspaces, and comply with legal obligations.
• Measure website and campaign performance, including with Meta Pixel or similar tools where enabled.

4. AI and uploaded content

Monaro may process your uploaded photos, voice notes, transcripts, files, and report context with AI providers to organise information and draft report wording. We send only the information needed to provide the feature you request.

You should avoid uploading unnecessary personal data or confidential material that is not needed for the report. You are responsible for making sure you have the right to upload and process any third-party or client information you add to Monaro.

5. Legal bases where GDPR or UK GDPR applies

• Contract: to provide Monaro, manage accounts, process subscriptions, and deliver requested features.
• Legitimate interests: to secure, improve, debug, and market the service in a proportionate way.
• Consent: where required for optional cookies, marketing, or similar tracking.
• Legal obligation: to keep tax, accounting, compliance, dispute, and security records where required.

6. Service providers

We use trusted providers to operate Monaro. They may process information only as needed to provide services to us and are expected to protect it appropriately.

• Hosting, database, and infrastructure providers for running the app and website.
• Cloudflare R2 or compatible object storage for uploaded media and generated files.
• OpenAI or similar AI providers for transcription, image understanding, organisation, and report drafting features.
• Stripe for checkout, subscriptions, invoices, billing portal, and payment processing.
• Resend and/or Cloudflare email services for transactional email delivery.
• Meta and similar analytics or advertising providers for website measurement where enabled.

7. Cookies and tracking

Monaro uses essential technologies needed for login, security, and service operation. The marketing website may also use analytics or advertising technologies such as Meta Pixel to understand visits and campaign performance.

You can control cookies through your browser settings. Blocking some technologies may affect login, security, or product functionality.

8. Sharing information

We do not sell your Customer Content. We share information only where needed to provide Monaro, comply with law, protect rights and security, process payments, work with service providers, or with your instruction such as when you share a report link or invite a team member.

9. Retention

We keep account, workspace, project, billing, and support information for as long as needed to provide Monaro, comply with legal obligations, resolve disputes, enforce agreements, and maintain backups and security records.

You can request deletion of your account or workspace data. Some information may remain in backups, logs, invoices, or legal records for a limited period where necessary or required by law.

10. Security

We use technical and organisational measures designed to protect information, including access controls, encryption in transit, provider security features, backups, and monitoring. No online service can be guaranteed completely secure, so please use strong login practices and avoid uploading unnecessary sensitive information.

11. International transfers

Monaro and its providers may process information in countries other than where you live or work. Where required, we rely on appropriate safeguards such as contractual protections or other lawful transfer mechanisms.

12. Your rights

Depending on where you are, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal data. You may also have the right to withdraw consent where processing is based on consent.

To make a request, contact edward@monaro.studio. We may need to verify your identity and account authority before acting on a request.

13. Changes to this policy

We may update this Privacy Policy as Monaro evolves or legal requirements change. The latest version will be posted on this page with its last updated date.