Skip to main content
Start
Back to Home

Privacy Policy

Effective date: 29 April 2026
Last updated: 5 October 2026

This policy is written in plain language to be readable. It is a binding legal document — please read it before using Monitor Agent. If anything is unclear, email us at support@monitoragent.app.

This Privacy Policy explains what personal data Monitor Agent collects when you use our service, why we collect it, who we share it with, how long we keep it, and the rights you have over it. “Monitor Agent,” “we,” “our,” and “us” refer to the controller named below. “You” means anyone who visits monitoragent.app or uses the Monitor Agent app at my.monitoragent.app or on iOS/Android.

Who we are (data controller)

Monitor Agent is operated as a sole proprietorship registered in Ukraine. As the data controller, we decide why and how your personal data is processed. For the operator’s registered details, contact us at support@monitoragent.app.

This policy explains what we do with your data in plain terms. Wherever you live, you can email us to access, correct, export or delete it.

What data we collect

We collect only what we need to run Monitor Agent. Specifically:

  • Account information — your email address, display name, and (optionally) profile photo URL provided through your chosen sign-in method, plus an internal user identifier.
  • Monitor content — the research prompts you write, the schedules you configure, the AI-generated execution results, and the change-detection history for each monitor.
  • Voice recordings — if you dictate a prompt, the recording is sent to Google Gemini for transcription and then discarded. It is never stored.
  • Notification settings — your chosen channels (email, push, Telegram) and, if you connect Telegram, your Telegram chat identifier so the bot can deliver messages to you.
  • Device data — per-device push notification tokens, a randomly generated device identifier, your device platform (web, iOS, Android), and the app version. We use these to deliver notifications and to investigate problems.
  • In-app analytics and crash reports — which screens you open and which features you use (Firebase Analytics), plus crash and performance diagnostics (Firebase Crashlytics). Analytics is on by default and you can switch it off at any time in Profile › More › Usage analytics.
  • Billing data — your subscription tier, status, and renewal dates, the billing provider used (Paddle for web, Apple In-App Purchases for iOS, Google Play Billing for Android), and the customer or transaction identifier issued by that provider. We do not see or store payment card details — only the billing provider does.
  • Operational logs — sign-in events, API request metadata (method, path, status, duration), error traces, and security events (such as detected prompt-injection attempts). We use these to keep the service reliable and secure.
  • Landing-page usage — anonymous, aggregated visit and interaction data on monitoragent.app. Aggregated, cookieless measurement runs by default; cookie-based analytics only after you accept, and nothing at all if you reject. See our Cookies Policy for details.

Why we are allowed to process your data

Under the EU General Data Protection Regulation (GDPR) and equivalent laws, we must rely on a specific legal basis for each processing activity. Ours are:

  • Performance of a contract — to deliver the service you signed up for: running your monitors, sending notifications, billing your subscription, and providing support.
  • Sending your prompt to our AI providers is part of delivering the service, so we rely on performance of a contract for it — not on consent. Where the mobile apps ask you to allow AI processing, that step exists to satisfy Apple’s and Google’s app-store rules. It is not the legal basis for the processing.
  • Legitimate interests — to keep the service secure, prevent abuse, debug errors, retain short-term operational logs, and improve product quality. We balance these interests against your rights and privacy.
  • Consent — for non-essential cookies and analytics on the landing page, and for connecting optional third-party channels such as Telegram. You can withdraw consent at any time.
  • Legal obligation — to comply with applicable laws, respond to lawful government requests, and meet tax and accounting requirements.

About the content you put into prompts

Anything you type into a research prompt is sent to our AI providers — Google Cloud Vertex AI (the Gemini models) for analysis, and the Brave Search API for web queries — so the agent can do its job. To keep both you and third parties safe, please do not include in your prompts:

personal data of other identifiable people without their permission; regulated information such as health, financial, biometric, or government identifiers; trade secrets, source code, or confidential information you are not authorized to disclose; content that is unlawful, infringing, or designed to attack the AI system. You are responsible for the content you submit — see the corresponding clauses in our Terms of Service.

Transparency about AI

Monitor Agent uses third-party large language models (the Gemini models on Google Cloud Vertex AI) and the Brave Search API to research and summarize information for you. Vertex AI is Google’s enterprise platform: under its terms your prompts are not used to train Google’s public models. AI outputs are generated automatically and may be inaccurate, incomplete, hallucinated, or out of date. We do not edit or guarantee them. You should independently verify anything important before acting on it. AI outputs are not a substitute for professional, legal, financial, medical, or regulatory advice.

How we store and secure your data

Your data is stored on Google Cloud infrastructure hosted in the European Union. It is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is restricted, secrets are held in a managed secrets vault, and per-user database rules prevent one user from reading another user’s data. No internet service can be made one hundred percent secure, and we therefore commit to reasonable, industry-standard protections rather than absolute guarantees.

International data transfers

Our database is hosted in the EU, but AI analysis runs on Google’s global Vertex AI endpoint, and several providers we rely on — Google Cloud, Brave Search, Telegram, Resend, Paddle, the Apple App Store, Google Play and Google Analytics — may process data outside the EEA, including in the United States. We are also established in Ukraine, which does not currently have an EU adequacy decision, so your data reaching us is itself a transfer outside the EEA. Where required, transfers are protected by an adequacy decision of the European Commission, by Standard Contractual Clauses, or by another lawful transfer mechanism. Email us for details of the safeguard that applies to you.

How long we keep your data

We keep personal data only as long as we need it for the purposes described above. Specifically:

  • Account, monitor, and notification data — retained while your account is active. Individual execution results are deleted automatically one year after they are produced. You can delete individual monitors at any time and your entire account at any time from your profile.
  • Operational logs (sign-ins, API metadata, errors, security events) — retained for up to 30 days, then automatically purged.
  • Billing records — retained for as long as required by applicable Ukrainian tax and accounting law, even after account deletion, in a minimized form (no monitor content).
  • Deleted accounts — monitor content, notification settings, and per-device tokens are removed immediately. Operational logs are purged within 30 days.

Cookies and analytics

monitoragent.app uses a small number of cookies and similar technologies. Strictly necessary cookies (for example, your language and theme preferences) are set automatically because the site cannot function without them. Analytics cookies (Google Analytics 4) are set only after you give consent through our cookie banner; until you choose, the analytics tag runs in a restricted cookieless mode that stores nothing on your device, and if you reject it we do not load it at all. You can change or withdraw your choice at any time using the “Cookie settings” link in the footer. Full details are in our Cookies Policy.

Your rights

If you are in the EU/EEA, UK, or another jurisdiction with comparable rights, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure (“right to be forgotten”) — request complete and permanent deletion of your account and associated data, including monitors, execution results, notification settings, and any Telegram connection data.
  • Data portability — request an export of your data in a machine-readable format.
  • Restriction of processing — request that we stop processing your data while a complaint is resolved.
  • Objection — object to processing that relies on our legitimate interests, including for direct marketing (we do not currently send marketing email).
  • Lodge a complaint — if you are unhappy with how we handle your data, you may complain to the Ukrainian Commissioner for Human Rights or, if you are in the EU/EEA, to your local data protection authority.

Deleting your account

You can permanently delete your account and all associated data at any time in the app, under Profile › Delete account. Deletion is immediate and removes:

  • Your account and sign-in credentials
  • All monitors, schedules, and execution results
  • All notification settings and any Telegram connection
  • All personal data we hold about you, except records we are legally required to keep (such as tax-relevant billing records, kept in minimized form)

Once deleted, your data cannot be recovered. You can also request deletion by emailing support@monitoragent.app. Operational logs are purged within 30 days.

Third-party services we rely on

We use a small number of vetted providers to run Monitor Agent — Google Cloud for infrastructure, authentication, AI analysis (Vertex AI) and app analytics, Brave Search for web queries, Telegram for optional Telegram delivery, Resend for email delivery, Paddle for web subscriptions, Apple and Google for in-app purchases, and Google Analytics 4 for landing-page usage. Most act as our processors, handling data only on our instructions. Paddle, the Apple App Store and Google Play are not: they decide how they use the data you give them, under their own privacy policies, and you should read those too.

Children

Monitor Agent is not directed at children. The service is intended for users aged 16 and over (or older where required by local law). We do not verify age — it is self-declared when you sign up. If you believe a child has provided us with personal data, email us at support@monitoragent.app and we will delete it.

Data breach notification

If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority without undue delay and in accordance with applicable law.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page shows when the latest version took effect. For material changes, we will notify you in advance through the app or by email so you have a chance to review the new version before it applies.

How to contact us

For any privacy question or to exercise your rights, email us at support@monitoragent.app. We respond from there.

support@monitoragent.app

We do not sell or share your personal data for advertising. We work hard to keep your data safe and to be straight with you about what we do with it.