Your data and how we protect it

Each business has its own database. No table holds another business's data.

Each database is hosted by Neon in one region, in the United States (Oregon). Choosing a Canadian region is not offered yet.

Every database has point-in-time recovery and a nightly snapshot. The newest seven snapshots are kept.

Some of our service providers operate from the United States, so some personal information is processed there. Each one is listed in our privacy policy.

An administrator requests a full export in Settings, under Your data. It is a zip of spreadsheet files, one for each kind of record. The download link is emailed, works once and expires after seven days. Files and photos are not included.

Month to month at the published price, you can cancel at any time by emailing support, effective at the end of the billing period.

After you close your account, your data is kept for 30 days so it can be exported, and then it is deleted.

Every form records consent, with the wording the person agreed to.

Contacts imported from another system arrive with marketing turned off until they opt in, and anyone who unsubscribed there stays unsubscribed.

Each marketing email carries your business name, a postal address, a contact and a one-click unsubscribe. Monody checks for them before it sends.

Monody counts implied consent from a person's last purchase or enquiry, and stops marketing to them when it lapses.

A child is kept on their parent's or guardian's record, and every message goes to the parent or guardian.

Every page is served over HTTPS. Database credentials and service tokens are encrypted with AES-256-GCM, and our storage providers encrypt data at rest.

Passwords are hashed with Argon2id. Owners and administrators must use a second factor, either an authenticator app or a passkey.

What each person sees is limited by their role and their locations, and the location limit fails closed.

Every action that touches money, access, messaging or a customer's status is written to an append-only log.

If a breach creates a real risk of significant harm, we notify the businesses affected, and regulators where required, within 72 hours.

Monody holds no SOC 2 or ISO 27001 certification today and claims none. A SOC 2 programme is planned.

Support comes from the people who built Monody, by email and in the app, every day from 6 pm to 1 am Pacific, excluding BC public holidays.

A critical issue is answered within 2 hours between 7 am and 10 pm Pacific every day, and by 8 am outside those hours.

We aim for 99.5% availability each month. The target is not a contractual commitment.

Live checks of every part of Monody, and any open incident, are on our status page.

Everything Mai writes to a lead waits for a staff member to review and send it.

Only the owner can turn Mai on. Until then, your team does not see her.

On Monody's key, Mai will work under a daily spending limit of $5. A business can use its own Anthropic key instead.

Mai has no access to payments, refunds or card details.

Words on a page are information to Mai, never instructions.

Every change Mai makes will be recorded in the activity log, marked as hers.

The agreement between Monody and the businesses that use it, including uptime, support and cancellation.

What we collect, where it is kept, who processes it, and your rights. Privacy questions go to privacy@monody.app.

Monody Platform Inc., Vancouver, British Columbia.