Privacy Policy

1. The short version

• We collect what we need to run your workspace, power your AI coworkers, bill usage, keep things secure, and support you.
• We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising.
• We do not use your workspace content to train AI models— ours or anyone else’s — and our AI providers are contractually barred from training on it.
• You can access, export, or delete your content and close your workspace at any time.

2. Two roles: who controls your data

Monad is a multi-tenant product. Most data in the Service lives inside a workspace that belongs to an organization (the “Customer”).

• For workspace content (messages, documents, databases, tasks, files, agent activity), we act as a service provider / processor on behalf of the Customer. The Customer’s admins control that content and its settings. If you use Monad through your employer or team, their policies govern, and privacy requests about workspace content should go to them. Our handling of that content is governed by our Data Processing Addendum.
• For account, billing, website, and support data — and for anything you do outside a workspace — we act as the business / controller, and this policy describes how we handle it.

3. Information we collect

Information you provide

• Account & profile — name, email, password or passkey credentials, workspace name and subdomain, profile photo, and settings.
• Workspace content — messages, direct messages, threads, comments, canvas documents, databases, tasks, uploaded files and attachments, custom emoji, reactions, and the instructions and configuration you give your agents.
• Billing — your plan, usage, and payment details. Card data is handled by our payments processor (Stripe); we don’t store full card numbers.
• Support & communications — messages you send us, and feedback such as agent response ratings.

Information we collect automatically

• Usage & log data — actions in the product, feature usage, timestamps, and error/diagnostic logs used for reliability, security, and improvement.
• Device & connection data — IP address, browser and device type, operating system, and app version.
• Cookies & local storage — used to keep you signed in and to make the app work. See our Cookie & Tracking Notice.

Information from integrations you enable

If you sign in with Google or Apple, or connect third-party tools (such as an MCP server or your own AI provider key), we receive the data those connections provide so the feature can work. You control these connections and can remove them.

4. How we use information

• Provide, maintain, and secure the Service and your workspace.
• Run your AI coworkers — see “AI and your content” below.
• Authenticate you and prevent fraud, abuse, and security incidents.
• Process billing and meter usage-based AI charges.
• Provide support and respond to your requests.
• Understand and improve the Service using usage data and aggregated or de-identified information. We do not use your workspace content to train AI models.
• Send service and transactional messages (e.g., verification, security alerts, billing). Marketing emails are optional and you can unsubscribe.
• Comply with law and enforce our terms.

5. AI and your content (transparency)

Monad’s core feature is AI agents that work inside your workspace. Because that involves processing your content with AI, we spell out exactly how it works.

When content is sent to an AI provider

When an agent runs — because it was mentioned, sent a message, assigned a task, triggered on a schedule, or detected relevant activity in a space it belongs to — the content relevant to that run (for example, the conversation, a linked document or database, and the agent’s memory) is sent to an AI model provider to generate a response. Agents only act within the spaces, tasks, and resources you grant them.

No training on your content

We do not train models on your workspace content, and we direct inference to AI providers under agreements and settings that prohibit them from training their models on it. Inputs and outputs may be retained briefly by a provider for abuse-monitoring and to deliver the response, then deleted per that provider’s terms.

Bring your own key (BYOK)

Eligible workspaces can connect their own AI provider key so inference runs under their own account and that provider’s terms.

Agent memory

Agents can store notes to a memory they read later — preferences, context, and accumulated know-how — so they improve over time. This memory lives in your workspace, is visible to the workspace, and can be viewed, edited, or deleted. It is not used to train any model.

Web and other tools

When an agent uses a tool — searching or reading the web, or calling a third-party (MCP) server an admin has connected — the relevant request is sent to that tool’s provider. Tools and external servers you enable operate under their own terms.

Automated processing & human oversight

Agents act on their own within the scope you grant, but they are tools you direct: they’re labeled as AI, quiet by default, and you can correct, rate, or turn them off. AI output can be wrong — keep a human in the loop for anything important, and don’t use Monad for decisions that legally require individualized human review without one. We do not use your content to make automated decisions that produce legal or similarly significant effects about you.

6. How we share information

• Within your workspace — content is visible to the members and agents granted access to it, per your workspace’s permissions.
• Service providers (sub-processors) — vendors that help us run Monad (hosting, storage, AI inference, payments, email). They may only process data to provide services to us. See our Sub-processor list.
• Integrations you enable — when you connect a tool, MCP server, or your own AI key, data flows to that destination as you configure.
• Legal & safety — when required by law, to enforce our terms, or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. Cookies & analytics

We use cookies and local storage to keep you signed in and to make the app work, plus limited first-party analytics to understand and improve usage. We don’t use advertising cookies. Details and your choices are in our Cookie & Tracking Notice.

8. Data retention

We keep workspace content while your workspace is active and as needed to provide the Service. When you delete content or close a workspace, we delete or de-identify the associated personal information within a commercially reasonable period, except where we must retain it for legal, security, backup, or accounting reasons. Backups age out on a rolling schedule.

9. Security

Each workspace’s data is isolated, every action runs through authorization checks, sensitive credentials are encrypted at rest, and connections are encrypted in transit. No system is perfectly secure, but we work to protect your data. More detail is on our Security page.

10. Your choices & rights

You can update your profile, manage notifications, export or delete content, and close your workspace from within the product. Depending on where you live, you may have additional rights described below. To make a request, email [email protected]. If your content lives in a workspace controlled by your organization, we may direct your request to that Customer.

11. California privacy (CCPA/CPRA)

If you are a California resident, you have the right to know, access, correct, and delete your personal information, to opt out of sale or sharing, and to limit use of sensitive personal information — and to not be discriminated against for exercising these rights.

• Categories we collect — identifiers (name, email, IP), account and commercial information (plan, billing), internet/network activity (usage and logs), device information, and the content you and your team create in the Service.
• Sources — you, your workspace and teammates, your device, and integrations you enable.
• Purposes — the uses in Section 4 above.
• Disclosure — we disclose personal information to the service providers listed in our Sub-processor list for business purposes.
• No sale or sharing — we do not sell personal information or share it for cross-context behavioral advertising, and we have not in the prior 12 months. We honor Global Privacy Control (GPC) signals.

To exercise these rights, email [email protected]. You may use an authorized agent; we will verify your request through your account or other reasonable means.

12. Children

Monad is a workplace product not directed to children. It is intended for users 18 and older, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact [email protected].

13. International users

Monad is operated from the United States and data is processed there. If you access the Service from outside the U.S., you understand your information is processed in the U.S. and other countries where our providers operate.

14. Changes

We’ll update this page as the product evolves and revise the date at the top. For material changes, we’ll provide additional notice (such as in-product or by email).

15. Contact

Questions or requests? Email [email protected], or write to Juno AI Labs, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713. For security issues, see our Security page.