Starten

Privacy Policy

Last updated: September 2026

Last updated: September 2026

This Privacy Policy explains how personal data is processed on monudesk.com and in the MonuDesk software (“MonuDesk”, the “Service”). MonuDesk is sold to businesses only.

Who is responsible

IE Dennis Rodin
22 Bakhtrioni Street N75
0177 Tbilisi
Georgia
Email: info@monudesk.com

Registered with the National Agency of Public Registry (NAPR), Georgia. Identification number: 305850219.

We are the controller of your personal data within the meaning of Article 4(7) GDPR.

Representative in the EU (Article 27 GDPR)

Because we have no establishment in the European Union, we have appointed the following representative for data protection matters:
[NAME AND ADDRESS OF EU REPRESENTATIVE]

What we collect

Account and business information: company name, address, contact person, email address, and encrypted login credentials.

Usage data: IP address, browser type and version, pages visited, timestamps, and interaction data.

Communication data: the content of your messages, your name, and your contact details when you contact us.

Mailbox data (optional): if you connect an email mailbox, we process messages, attachments, and mailbox metadata as described in Section 7.

Your customers’ data: information you enter into MonuDesk about your own customers is processed on your behalf. Our Data Processing Agreement (DPA) applies to that data.

We do not intentionally collect special categories of personal data as defined in Article 9 GDPR.

Why we process it, and on what legal basis

Providing the Service and performing our contract with you: Article 6(1)(b) GDPR.

Support and communication: our legitimate interest in maintaining customer relationships, Article 6(1)(f) GDPR.

Security, diagnostics, and product improvement: our legitimate interest in a secure and reliable service, Article 6(1)(f) GDPR.

Analytics, heatmaps, and affiliate attribution: your consent, Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Accounting and legal obligations: Article 6(1)(c) GDPR.

Cookies and consent

Strictly necessary cookies are used without consent, for login, security, and storing your cookie choice. Every other service listed in Section 6 loads only after you accept it in our cookie banner. You can change or withdraw your choice at any time through the “Cookie settings” link in the footer.

Service providers we use

Framer (Framer B.V., Netherlands): website hosting and basic traffic measurement.
Google Analytics (Google Ireland Ltd., Ireland): web analytics. Consent only.
Microsoft Clarity (Microsoft Ireland Operations Ltd., Ireland): heatmaps and session recordings. Consent only.
Affonso: attribution of sign-ups to partner referrals. Consent only.
Featurebase: feedback board, help center, and support chat, including the MonuBrain AI assistant.
Creem: payment processing as Merchant of Record. Creem issues the invoices and is responsible for payment data.
Nylas, Inc. (USA): email infrastructure when you connect a mailbox.
Fathom: recording and transcription of sales and support calls, only after notice at the start of the call.
DigitalOcean, LLC (USA): hosting of the MonuDesk application and databases.
Anthropic, PBC (USA): the Claude AI model powering MonuBrain and AI features such as email drafts. Your content is not used to train the models.

Every provider that processes data on our behalf is bound by a data processing agreement under Article 28 GDPR.

AI features: MonuBrain is an AI system. Its answers and drafts are generated automatically and can be wrong. When you chat with MonuBrain, you are not talking to a human.

Google user data and email integration

MonuDesk lets you connect a Gmail or Google Workspace mailbox. If you do, we access your email messages, including content, headers, attachments, and mailbox state such as read/unread status and folder location, solely to provide the shared inbox features of the Service: displaying your conversations, linking them to orders, sending replies you compose, and keeping mailbox state in sync. This processing is based on Article 6(1)(b) GDPR.

MonuDesk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or use it to train generalized AI models. Human access is limited to what is necessary for security, legal compliance, or support with your explicit consent.

Mailbox data is retained while your mailbox remains connected. You can disconnect it at any time in the Service, or revoke access at https://myaccount.google.com/permissions.

International transfers

We are based in Georgia and some of our providers are in the United States. Where personal data is transferred outside the European Economic Area, we rely on European Commission adequacy decisions, including the EU-US Data Privacy Framework for certified providers, or on Standard Contractual Clauses under Article 46 GDPR. Write to info@monudesk.com for details.

How long we keep data

Account and business data: for the duration of your contract with us.
Log and usage data: up to 12 months.
Accounting records: for the retention periods required by law.
Communication data: until your inquiry is resolved, unless we must keep it longer.
Mailbox data: while the mailbox remains connected.

After your contract ends you can export your data for 30 days. After that we delete it, unless the law requires us to keep it.

Security

We use encrypted transmission (TLS), restricted access to production systems, secure password storage, and ongoing security monitoring. No system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential.

Your rights

You have the right to access, correct, delete, restrict the processing of, and port your personal data, and to object to processing based on legitimate interests (Articles 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. Send requests to info@monudesk.com. We may ask you to verify your identity first.

If you are in the EU or the UK, you may also lodge a complaint with the data protection authority where you live or work.

If you are a California resident, you may request access to or deletion of your personal information and may opt out of any sale or sharing of it. We do not sell or share personal information as those terms are defined under the CCPA. Send requests to info@monudesk.com. We will not discriminate against you for exercising these rights.

Communications

We may use your business contact details to send you product updates and service announcements. You can opt out at any time through the unsubscribe link or by contacting us. We do not send marketing communications to consumers.

Changes

We update this Privacy Policy when the legal or technical basis of our processing changes. The current version is always available at monudesk.com/privacy-policy.