Privacy Policy

1. Data We Collect

Depending on how you use the Service, we may collect:

• Account information such as your name, email address, and profile details when you sign in or create an account.
• Usage data such as interactions with features, basic device information, and performance metrics used to improve the Service.
• Content and configuration you provide such as calendar availability, booking links, invoice and billing records, client contact information, and other data you create, import, or manage within the Service.
• Billing and transaction information such as your billing details, tax information, and payment status in connection with license purchases or other paid features. Payment card details are processed directly by our payment processor and are not stored in Monolith OS.
• Cookies and local storage used to remember your preferences, keep you signed in, and keep Monolith OS running smoothly.

2. How We Use Data

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Personalize your experience and remember your settings and preferences.
• Process payments, manage licenses, and handle billing-related communications.
• Connect and sync integrations you choose to enable (such as calendar, email, or invoicing tools) and show relevant data inside the Service.
• Communicate with you about updates, security alerts, and support.
• Protect the integrity and security of the Service, including detecting and preventing fraud or abuse.

3. Legal Bases for Processing (where applicable)

Where required by law (for example, in the EU/EEA or UK), we rely on the following legal bases to process your personal data:

• Contract — when processing is necessary to provide the Service you requested.
• Legitimate interests — for operating, securing, and improving the Service in a way that does not override your rights and freedoms.
• Consent — where we rely on your consent for specific uses like optional cookies or communications.

4. Cookies & Local Storage

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, but disabling them may affect how the Service functions.

5. Data Retention

We retain personal data for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods may vary depending on the type of data and how it is used.

6. Data Sharing & Transfers

We may share data with trusted service providers who help us operate and support the Service, such as cloud hosting and database providers, authentication and identity providers, payment processors, analytics and performance providers, and email or calendar service providers. These providers are bound by contractual obligations to protect your data and use it only as instructed.

Where data is transferred across borders, we take appropriate measures to ensure a level of protection consistent with applicable laws.

7. AI Services & Processing

Certain features of Monolith OS use third-party AI services, including Cursor and Google Gemini 3 (Flash and Pro), to help with tasks such as understanding input, generating suggestions, and automating parts of your workflow.

When you use these AI-powered features, the content you choose to provide (for example, text you enter, configuration details, or relevant context such as calendar and booking information) may be sent to these providers so they can generate a response. We do not sell this data. These providers act as our processors and are contractually required to use the data only to provide their services to us, and to handle it in line with applicable data protection laws.

If you prefer that specific information is not processed by AI systems, you should avoid entering that information into AI-related input fields or features. Where required by law, we will rely on your consent for the use of optional AI features and you can choose not to use them.

8. Your Rights

Depending on your location and applicable law, you may have rights such as:

• Accessing the personal data we hold about you.
• Requesting corrections or updates to your data.
• Requesting deletion of your data, subject to legal or contractual obligations.
• Objecting to or restricting certain types of processing, or withdrawing consent where processing is based on consent.

To exercise these rights, contact us using the details below.

9. Security

We use technical and organizational measures designed to protect your data against accidental or unlawful destruction, loss, change, or unauthorized access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after the effective date of the revised Policy constitutes your acceptance of the changes.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@leonardo.tech or via the contact details provided on our website. ROMANELLO OÜ is the entity responsible for processing personal data in connection with Monolith OS.