MONARCH
Start beta

Privacy

Privacy Policy

Last updated: September 20, 2026

Operator: Monarch LLC, a New York limited liability company ("Monarch," "we," "our," "us").

This Privacy Policy describes how Monarch handles personal data when you use our service at flymonarch.ai (the "Service"). It covers four audiences: Customers (organizations and individuals paying for a Monarch tenant), End Users (people invited to a Monarch tenant by a Customer), Recipients (people who receive an email or one-pager sent through Monarch), and Visitors (people who browse flymonarch.ai without an account). The Service is offered to US-based customers during the public beta.

1. Quick summary

  • What we collect: account info, voice captures and transcripts you record, contact information about people you reach out to, your messages to those people, and basic usage data.
  • Why we collect it: to deliver the product you're paying for — capturing a voice note, enriching contacts, drafting a follow-up, sending it, and logging it to your CRM.
  • Who we share it with: subprocessors that help us run the Service (Stripe for billing, OpenRouter for text generation, ElevenLabs for voice sessions and speech, OpenAI for transcription, Apollo and Hunter for enrichment, Granola for meeting notes when you connect it, Gmail for sending, HubSpot and Salesforce for CRM sync, and Google Cloud for hosting).
  • What we don't do: we don't sell your data, and we don't use Customer Data to train foundation models offered to other customers.
  • Your rights: access, deletion, correction, export, and "do not sell."

If you have questions, email privacy@flymonarch.ai.

2. Data we process

Account and Tenant Data. Name, work email, and the organization name provided at signup; authentication credentials (password hash, OAuth tokens, MFA setup if used); tenant configuration including brand profile, voice profile, settings, and sender physical address; and billing data including name, billing email, and a payment method handle from Stripe. Monarch does not store full card details; Stripe handles all card data.

End User Data. Name, work email, role, and join date; authentication credentials including OAuth tokens for Gmail, HubSpot, Salesforce, and any other authorized provider; activity logs (captures created, drafts generated, emails sent, settings changed); and voice profile audio samples if the End User opts in.

Capture, transcript, draft, and send data. Audio recording or text note, the transcript generated by our transcription subprocessor, the draft email generated by our drafting subprocessor, one-pager content and rendered PDF if used, the sent email content, send time, message ID, and delivery status, and replies, bounces, opens, clicks, and complaints associated with the send.

Recipient Data. Name, work email, phone, title, company, LinkedIn URL, and other professional context the End User provides or that the enrichment cascade returns; enrichment data from Apollo, Hunter, Clay, or other configured enrichment providers; the conversation history Monarch has tracked between the Tenant and the Recipient; and engagement data such as whether the Recipient opened or clicked Monarch-sent email (if tracking is enabled). We treat enrichment data about Recipients as personal data subject to the same protections as account data.

Visitor Data. IP address (briefly retained for security and analytics), user agent and basic device info, pages visited and timestamps, referral source (UTM parameters, referrer header), and cookie consent state.

3. How we process personal data

We process personal data to deliver the Service (capture, transcribe, enrich, draft, send, and log), to operate billing through Stripe, to maintain security (detect abuse, prevent fraud, investigate incidents), to communicate (product updates, transactional email, support, and legal notices), and to improve the Service through aggregate usage analytics. We do not use Customer Data to train foundation models offered to other customers. Where GDPR applies, our legal bases are contract (to deliver the Service), legitimate interests (security, fraud prevention, abuse investigation, aggregate analytics), consent (non-essential cookies and marketing email where required), and legal obligation (tax records, court orders, lawful requests).

Cookies. We use strictly necessary cookies (authentication, security, basic site function), functional cookies (remembering preferences), and analytics cookies (aggregate site usage). Affiliate attribution may be captured from referral links and retained in first-party browser storage for up to 30 days so a signup can be credited after the visitor returns. The public site presents a consent banner. Optional product analytics use PostHog only after you allow optional tracking. Session replay records 5% of browsers that allow optional tracking, chosen once per browser, and runs only on sign-in, sign-up, workspace home, billing, integrations, onboarding, user management, profile, settings and audit log screens. Capture, conversation, contact, relationship, activity, brand studio, brand asset, one-pager, voice and workspace export screens are never recorded. You can turn off optional tracking or reset your choice on the cookies page of the site you are using. Choices apply to that site in that browser; the public website and app have separate controls.

Email tracking. Monarch-sent emails may include open-tracking pixels and click-tracking link rewrites, and one-pagers may collect view analytics; tracking is configured by the Customer. When tracking is on, every Monarch-sent email includes a footer disclosure, and a Recipient who replies "no-track" is recorded in a no-tracking flag so future sends skip the tracking pixel and use plain links.

Google account data. When you connect Google, Monarch uses your email identity to identify the sender, sends messages you request or authorize through your sending settings, and reads Gmail data for reply, bounce and unsubscribe handling. Relationship features also read mailbox message content and metadata and retain interaction summaries for matches to existing contacts. Enabled calendar features read availability and events and can create authorized bookings. Disconnect the integration to stop future connected-account access.

Monarch's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is not used for advertising or to train foundation models offered to other customers.

4. How we share personal data

We share personal data only in these ways. We use a small set of subprocessors to deliver the Service, listed at flymonarch.ai/dpa, each bound by data-protection terms equivalent to ours. When a Customer authorizes an integration (Gmail, HubSpot, Salesforce, Apollo, etc.), Monarch exchanges data with that provider as needed to deliver the Service, and the provider's own privacy policy governs that provider's handling. Monarch-sent emails contain data the End User authored and optionally a one-pager; Recipients see only what the End User chose to send. We may disclose personal data to comply with applicable law, court orders, subpoenas, or lawful requests, or to protect rights, property, or safety, and where permitted we will notify affected Customers before disclosure. In a merger, acquisition, or asset sale, personal data may transfer to the acquiring entity subject to the protections of this Privacy Policy or a successor policy with equivalent protections.

We do not sell personal data as that term is defined under the CCPA or similar state laws, and Monarch does not "share" personal data for cross-context behavioral advertising.

Subprocessors. The providers below support Monarch. A connected service is used when the corresponding feature or integration is enabled for your workspace. The same list appears in our Data Processing Agreement.

  • Google Cloud Platform (Alphabet Inc.): hosting, Cloud SQL, Cloud Run, Cloud Storage, Pub/Sub, Secret Manager — United States (us-central1). Gotenberg PDF rendering is self-hosted by Monarch on Google Cloud.
  • Stripe, Inc.: billing and payment processing — US and EU.
  • OpenRouter, Inc.: routing text-generation requests to Fireworks AI (United States) for drafts, one-pagers, and related text processing, with zero-data-retention / no-training. Current model route: GLM-5.2.
  • Fireworks AI: Processes text-generation requests routed through OpenRouter.
  • OpenAI OpCo, LLC: voice transcription — processing regions described in OpenAI's current DPA and subprocessor list.
  • Eleven Labs Inc.: spoken onboarding sessions and speech generation — United States, the Netherlands, and Singapore; storage in the United States.
  • Postmark: Account, verification, support and other transactional email delivery.
  • PostHog: Product usage and error analytics, including session replay on selected product routes.
  • Plausible Analytics: Public-website usage analytics.
  • Apollo.io: contact enrichment — US.
  • Hunter: email finder (enrichment fallback) — EU.
  • BetterContact: Business contact enrichment through a provider waterfall, when configured.
  • Dropcontact: Business contact enrichment and email discovery, when configured.
  • Bouncer: Email address verification.
  • Clay (optional, if configured): async deep enrichment — US.
  • Brandfetch: Company brand and logo discovery.
  • Serper: Web search for business and contact identity discovery.
  • Granola: meeting notes and transcripts retrieved on an End User's behalf using that End User's own Granola credential — US. Monarch reads from Granola and does not send Customer Data to it.
  • Fireflies: Retrieves meeting notes and transcripts for connected users.
  • Google LLC (Gmail, Workspace): outbound email send via End User OAuth — per Google's regions.
  • Microsoft 365: Mailbox sending, replies and calendar access when a user connects Microsoft.
  • HubSpot, Inc.: CRM sync when the Customer connects HubSpot — US and EU.
  • Salesforce, Inc.: CRM sync when the Customer connects Salesforce — US, EU, and others.
  • GoHighLevel: CRM access when connected and available for the workspace.
  • PandaDoc: Document preparation and signing for enabled investor workflows.
  • Cloudflare, Inc.: signup bot protection through Turnstile — US and global edge locations.
  • Google LLC (Vertex AI, Gemini 2.5 Flash): reconstructing customer-uploaded document images/PDFs into editable one-pagers — data category: uploaded document images; processing region: United States multi-region. This service is currently disabled.

5. Where we process personal data

The Service runs on Google Cloud Platform in the United States (region us-central1). Other regions are not offered today. The Service is offered to US-based customers during the beta. For any Customer or Recipient outside the United States, transfers to the U.S. are made under appropriate safeguards, including Standard Contractual Clauses where required, per our Data Processing Agreement.

6. Your rights

Recipient rights (applies to anyone who receives a Monarch-sent email). Regardless of where you live, you may request access to the data we hold about you, request deletion (we will remove your data from all tenants that have records about you and ask each tenant's CRM to do the same), request correction of inaccurate data, unsubscribe via any unsubscribe link or by replying "unsubscribe" or "stop," and reply "no-track" to opt out of email and one-pager tracking. Submit requests by email to privacy@flymonarch.ai.

EU / UK rights (GDPR). If you are in the EU or UK, you also have the right to object to processing based on legitimate interests, to restrict processing in certain circumstances, to portability of your data, to withdraw consent at any time where processing is based on consent, and to lodge a complaint with your data protection authority. Monarch operates US-only during the public beta and has not appointed an EU Article 27 or UK representative; this section applies if and when Monarch offers the Service in the EU/UK.

California rights (CCPA / CPRA). If you are a California resident, you have the right to know what personal information we collect, use, and disclose and to whom; to delete personal information; to correct inaccurate personal information; to opt out of "sale" or "sharing" of personal information (we do not sell or share); to limit use of sensitive personal information (we do not collect sensitive personal information beyond what is necessary for the Service); and to non-discrimination for exercising your rights. To exercise these rights, email privacy@flymonarch.ai.

Other state privacy laws. For residents of Colorado, Connecticut, Utah, Virginia, and other states with similar privacy laws, the same request flow applies. To protect your data, we verify your identity before fulfilling rights requests. For Customers and End Users with a Monarch account, most rights are exercised in-app from the account security and tenant data-and-privacy screens.

7. Retention

  • Capture audio: scheduled for deletion after 30 days, after which the storage service keeps the deleted file restorable for a further 7 days before removing it for good, so 37 days is the longest a recording can survive. Transcripts, drafts and sent-message records remain with the workspace until deletion is completed. The beta deletion status below explains the current process.
  • Draft and message history kept to improve suggestion quality — the text of drafts and sent messages, the actions taken on them, and the inputs used to produce them: a configured 365-day retention horizon. The automatic deletion sweep for these records is currently disabled, so that horizon is not a guaranteed maximum retention period during beta.
  • Uploaded source files whose contents could not be read: 7 days after the failed or abandoned upload, so that a person can retry before the file and its record are removed. A source file is deleted as soon as it has been read successfully. The sweep that removes the remainder is currently paused, so a file may be kept longer during beta.
  • Recipient enrichment data: until the Customer deletes the contact or the Tenant is deleted.
  • Unsubscribed contact records: indefinite (required for honoring opt-outs).
  • Audit logs: 90 days beyond tenant deletion.
  • Billing records: kept for at least 7 years for tax and accounting. Invoices, charges and receipts are held by our payment processor under its own retention policy; Monarch keeps no separate copy of them.
  • Voice profile audio samples: until the End User withdraws consent or the Tenant is deleted.
  • Visitor analytics (IP, UA, page views): 13 months.
  • Cookie consent state: until withdrawn.

Beta deletion status. Deleting a workspace deactivates it and starts a 30-day recovery period (a "soft delete"). Automatic permanent purging is not currently enabled, so Customer Data is not erased automatically when that window ends. Copies held in backups and operational logs are not guaranteed to be gone when it ends either. Contact privacy@flymonarch.ai to request permanent deletion and confirmation of its completion. Legal holds and applicable billing or unsubscribe-record retention may require some records to be kept; support will explain any applicable exception.

Model request records. Prompt and response records used to diagnose generation quality have a configured 365-day retention horizon. Their automatic deletion sweep is currently disabled, so that horizon is not a guaranteed maximum retention period during beta. These records may include customer content. They are covered by deletion requests and are not used to train foundation models offered to other customers.

8. Security

We protect personal data using TLS in transit and AES-256 at rest, GCP-managed Cloud SQL, provider credentials stored only in GCP Secret Manager, tenant isolation at the data layer, audit logs for all administrative actions, background checks on personnel with production data access, and a defined incident response process. In the event of a personal data breach affecting your data, we will notify affected Customers and, where required, regulators, without undue delay and consistent with applicable law.

9. Children's privacy

The Service is intended for business users and is not directed at children under 13 (under 16 in the EU). We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated by email to the Owner and by an in-product modal at next sign-in. The "Last updated" date at the top of this policy will be updated for any change.

11. Contact us

Email privacy@flymonarch.ai. Postal: Monarch LLC, 418 Broadway STE N, Albany, NY 12207. No Data Protection Officer, EU Representative, or UK Representative is appointed during the US-only beta. For data subject requests, email privacy@flymonarch.ai so we can verify your identity and route to the right tenant(s). You can also email legal@flymonarch.ai.