Back to Monaro →
Monaro / Legal

Privacy Policy

How Monaro handles information when you use our website, join a pilot, or communicate with a business using our service.

Last updated

At a glance

We use information to run Monaro, support business messaging and orders, and respond to your requests. You can contact us about access, corrections, or deletion.

Who this policy covers

Monaro is an early-stage service for business messaging, order management, and reorder reminders. This policy covers our website, staff accounts, pilot workspaces, and connected messaging features.

For questions about Monaro or this policy, contact contact@getmonaro.app.

If you are a customer of a business using Monaro, that business also decides how it uses your order and conversation information. Contact it about its products, purchases, or privacy practices. We help with information held in Monaro and requests related to our service.

Information we collect

  • Waitlist details: your email address and signup time, used to send Monaro launch updates. You can ask us to remove your signup by emailing our contact address.
  • Account and business details: staff email addresses, account identifiers, workspace membership, business names, and settings.
  • Customer and order details: names, messaging identifiers, phone numbers, delivery addresses, order items, quantities, prices, and order status, when provided through an enabled feature.
  • Messages and reminders: message content, timestamps, delivery status, consent and opt-out records, and scheduled-send information.
  • Connected account information: identifiers and access credentials needed to connect an authorized Meta account or Page. Staff passwords are managed through our authentication provider.
  • Information you send us: support requests, feedback, and details you provide when asking about pilot access.
  • Technical information: IP addresses, request details, browser information, and operational logs processed by our hosting and service providers.

The information collected depends on which features are enabled. A fictional preview does not automatically import its sample records into a live messaging account.

How we use information

We use information to provide and secure accounts, manage workspace access, display conversations and orders, process authorized messages, record consent, schedule reminders, troubleshoot problems, and answer support requests.

We also use relevant records to investigate abuse, resolve disputes, and meet applicable obligations. We do not sell personal information or use customer conversation content to build advertising profiles.

Messaging choices and consent

Businesses are responsible for obtaining the permissions and consent needed to contact their customers. Connecting a business account does not by itself give permission to send marketing messages.

Where Monaro's live reminder feature is enabled, sending STOP in the connected conversation stops future queued Monaro reminders for that contact. Sending START opts that contact back into those reminders. These commands do not delete previous messages or control messages sent outside Monaro.

You may also contact the business directly to change your messaging preferences.

Service providers and sharing

Information is shared with the people authorized to access the relevant business workspace and with providers needed to operate the service:

  • Supabase: authentication and database services.
  • Cloudflare: hosting, network security, scheduled processing, and related operational services.
  • Meta and WhatsApp: connected account authorization, message delivery, and delivery notifications, when those integrations are enabled.

If a business separately enables Meta Business Agent, Meta processes the information required to provide that agent under its applicable terms and privacy information. That feature is not automatically enabled for every Monaro workspace, and Monaro product records are not automatically synced to the agent.

The main app may load Google Fonts, which involves a request from your browser to Google. These policy pages use system fonts and do not load an external font.

We may also disclose information where required by applicable law, to protect people or the service, or to professional advisers supporting those purposes.

Browser storage

The app uses browser storage to maintain sign-in sessions and, in preview mode, save demo data. Authentication and hosting providers may use cookies or similar technologies to deliver and protect their services.

You can clear browser storage or block it in your browser settings. Doing so may sign you out or prevent parts of the app from working. Clearing browser storage does not delete information already stored in a business workspace.

Retention and deletion

We keep information while it is needed to provide the service, maintain an active workspace, support authorized business records, or meet applicable legal and security obligations. During the pilot, retention and deletion are managed through requests and operational review; there is no universal automatic deletion period for all records.

When information is no longer needed, we delete or de-identify it, subject to justified retention requirements. Copies in provider backups may remain until the provider's normal backup cycle expires.

See our Data Deletion Instructions to make a request. Disconnecting Meta access or sending STOP does not automatically erase existing records.

Security and international processing

We use access controls, protected server credentials, and encrypted HTTPS connections to help protect information. No system can guarantee complete security. Please do not send passwords, access tokens, payment-card details, or unnecessary sensitive information through customer chats or support email.

Our providers may process or store information in countries different from your own. Their infrastructure and the connected business's configuration affect where processing takes place.

Your requests and choices

Depending on the laws that apply to you, you may be able to request access, correction, deletion, restriction, a copy of your data, or withdrawal of consent. Contact contact@getmonaro.app and explain your request. We may ask for limited information to verify your identity and authority over an account or record.

When a business controls the records, we may direct the request to that business or work with it to respond. We respond within the time required by applicable law and explain any limitations that apply. You may also contact the relevant privacy regulator where you have that right.

Children

Monaro staff accounts and pilot access are intended for adult business users. We do not knowingly invite children to create staff accounts. If you believe a child has supplied personal information inappropriately, contact us so we can review the situation.

Policy changes and contact

We may update this policy as the service changes. The date at the top identifies the latest version. We will provide additional notice of material changes where appropriate or required.

Privacy contact: contact@getmonaro.app.

Questions? Get in touch.

Contact us about Monaro, your information, or these terms.

contact@getmonaro.app