Privacy Policy

Who we are

Monao ("Monao", "we", "us", "our") operates the public marketing website at monao.in(the "Site") and the Monao cloud application and APIs (for example at app.monao.in) (together with the Site, the "Services"). This Privacy Policy describes how we handle personal information in connection with the Services.

Information we collect

Marketing website

When you browse the Site, our hosting providers and analytics tools may automatically collect technical data such as IP address, approximate location, browser type, device type, referring URLs, and pages viewed. We use this to operate, secure, and improve the Site and to understand aggregate interest in Monao.

Monao account and product usage

When you register or use the Services, we may process:

• Account and profile details (for example name, email, workspace name, role).
• WhatsApp-related data needed to provide the product (for example messages, phone numbers, delivery and read receipts, template and broadcast metadata) as configured in your workspace.
• Shopify-related data you connect (for example store domain, orders, customers, cart events) solely to power features you enable.
• Billing and subscription records (for example plan tier, invoices, payment status) and prepaid messaging wallet balance and transaction records processed through our payment partners.
• Support communications and diagnostic logs needed to troubleshoot issues you report.

How we use information

• To provide, operate, secure, and improve the Services.
• To send and receive WhatsApp messages and automations on your instructions.
• To bill subscriptions, add-ons, and optional prepaid messaging wallet top-ups.
• To communicate service, security, and policy updates.
• To comply with law and enforce our agreements.

Cookies and similar technologies

We use cookies and similar technologies for essential operation of the Site and Services, session and security needs, preferences where applicable, and measurement. You can control many cookies through your browser settings; blocking strictly necessary cookies may affect functionality.

Sharing and subprocessors

We do not sell your personal information. We disclose information only as needed to operate the Services, including to trusted service providers who process data on our instructions and under appropriate safeguards. Categories of recipients may include:

• Meta — WhatsApp Business Platform / Cloud API as configured by your organization.
• Shopify — when you connect a store for commerce features.
• Stripe — subscription and customer portal flows where enabled.
• Razorpay — certain plan payments and prepaid messaging wallet top-ups where enabled.
• Cloud infrastructure and email — hosting, queues, logging, and transactional notifications.

Your use of Meta, Shopify, Stripe, or Razorpay is also subject to their respective privacy notices when you interact with those services directly.

Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and access controls appropriate to the nature of the Services. No method of transmission or storage is completely secure; we encourage strong passwords and careful handling of integration credentials.

Retention

We retain personal information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law (for example tax or accounting records for billing). Message and log retention may depend on your plan, configuration, and operational needs.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information, or to object to processing or port data. Workspace administrators often control end-user accounts for a tenant; individuals may also contact us as described below. We will respond in line with applicable law.

International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers consistent with applicable law.

Children

The Services are not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Material changes may be communicated through the Services or by email where appropriate.

Contact

For privacy questions or requests regarding this Policy or the Services, contact us at support@monao.app.