Privacy Policy

1. Information We Collect

When you create an account, we collect your name, email address, and organization details. When you use Mondian, we process the data you upload (files, integrations) to provide our services.

We also collect usage data such as pages visited, features used, and interaction patterns to improve our product. This data is anonymized and aggregated.

2. How We Use Your Data

Your data is used to:

• Provide, maintain, and improve Mondian's services
• Run analyses and automations you configure
• Send transactional emails (reports, alerts, notifications)
• Provide customer support

We never sell your data to third parties. Your business data is yours — we only process it to deliver the features you use.

3. Data Storage & Security

All data is stored on encrypted infrastructure hosted in the EU (Railway + Supabase). We use TLS 1.3 for data in transit and AES-256 for data at rest. Access is controlled through role-based permissions with full audit logging.

4. Data Retention

Your data is retained as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days. You can request data export or deletion at any time by contacting us.

5. Third-Party Services

We use the following third-party services to operate Mondian:

• Supabase — authentication and database
• Railway — application hosting and storage
• Resend — transactional email delivery
• Anthropic — AI model provider (Claude)

These providers process data only as necessary to deliver their services and are bound by their own privacy policies and our data processing agreements.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Object to data processing

To exercise any of these rights, contact us at privacy@mondian.ai.

7. Contact

For privacy-related questions, contact us at privacy@mondian.ai.