Legal

Privacy Policy

Last updated: 1 October 2026. This policy explains what data Mondaily collects when you use the workspace graph and AI agents, why we collect it, and what control you have over it. For a detailed look at our infrastructure and the certifications our hosting providers hold, see our Security & Compliance page.

Information we collect

  • Account information you provide directly (name, email, workspace details)
  • Records you create in your workspace graph (people, companies, tasks, documents, invoices)
  • Content you connect: the inbox and calendar accounts you authorize
  • Usage data needed to operate and secure the product (logs, device/browser metadata)

How we use your data

We use your data to operate Mondaily for you and your workspace, nothing more:

  • Running the AI agents (sōtem, Operations, Relationship, Finance, Signal, Graph Enrichment, Prospecting, Workflow, Opportunity, People, Portfolio, Asset, Insights, Meeting, Goal Planner) inside your workspace graph
  • Storing and syncing the records, tasks, and decisions you create
  • Sending account, billing, and product notifications
  • Improving reliability and security of the platform

We do not sell your data, and AI agents only ever read data inside your own workspace graph.

Some third-party service providers (sub-processors) process data on our behalf to run the platform, for example hosting, database, payments and email delivery. The full list, with what each one receives, is on our DPA page.

Website and app analytics

On this website (www.mondaily.com) analytics is opt-in. Nothing is measured until you press Accept in the privacy banner. If you press Decline, close the banner, or have not chosen yet, nothing is sent. Your choice is kept in your own browser's local storage on this site (not a cookie, and never sent to us), and you can change it at any time with ; the same link is at the bottom of every page. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded even if you accepted.

If you accept, the site sends small first-party measurements to our own server. No third-party analytics or advertising service is involved, and no analytics cookie is used. We record the page path (never the query string; ids and links in paths are masked), the referring website's domain, the country, region and city that our hosting provider infers from the request (we never derive them from your IP address ourselves), the general type of device (phone, tablet or computer, worked out from your browser's description, which itself is not stored), a short heartbeat every 30 seconds while the tab is visible so we can see how many people are online, and how you move through a page: the text and link of what you click, how far you scroll, when you start or send one of our forms (the form's name only, never what you typed), and how long you stayed on a page.

Your IP address is kept for 30 days, for security (to recognise abuse and attacks), and then deleted automatically. It is visible only to Mondaily's own platform administrators. Visitors are otherwise counted with a one-way hash of the IP address and browser that is mixed with a random value which changes every day and is then deleted, so you cannot be recognised from one day to the next from that hash alone.

Visitor id. When you accept, your browser creates a random visitor id (it contains nothing about you) and keeps it in local storage on this site, so we can tell that a visit is a return visit. Declining removes it. Identity is linked only when you give it to us: if you submit one of our forms (for example a pilot request) the name and email you typed are attached to that visitor id, and in the app your page views are linked to your account once you sign in. We never buy or look up identity from anywhere else.

In the Mondaily app (app.mondaily.com), which you use with an account, the same measurement runs as part of operating the service you signed up for, and page views in the app are linked to your account. Do Not Track or Global Privacy Control switch it off there too. Individual page views and moves are deleted after 90 days; only daily totals are kept.

Your rights and controls

  • Export your records and data at any time from workspace settings
  • Request full account and data deletion
  • Disconnect any connected account (email, calendar) at any time
  • Request a Data Processing Agreement: see our DPA page

Questions

For privacy questions or data requests, contact privacy@mondaily.com.