1. Who is responsible for your data
Monxvi, based in Ohio, United States, provides MONXVI and is the data controller for personal information used to run our business, manage accounts, secure the platform, and respond to support requests. Contact us at monxvi.app@gmail.com.
Event organizers decide which guests to record and how to use their event media and contact information. For content processed on an organizer’s instructions, the organizer is the controller and Monxvi acts as a service provider or processor. Guests should contact their organizer first about event recordings; we can help route requests when needed.
2. What we collect and why
- Account information: email, display name, business name, operator type, authentication information, and account identifiers, used to create accounts, sign you in, and provide account settings. If you use Google sign-in, we receive the profile information authorized through that sign-in flow; we do not receive your Google password.
- Event information: event name, type, date, times, venue, client name and contact details, and selected settings, used to organize events and deliver your chosen experience.
- Media: photos, videos, recorded audio where enabled, uploaded graphics, and capture metadata, used to record, process, store, preview, download, and share content at your direction. Camera and microphone access require device or browser permission.
- AI requests: descriptions, prompts, and returned recommendations, used to provide AI-assisted looks and effects. Text requests are sent to AI service providers through Lovable AI Gateway. Avoid including sensitive personal information in prompts.
- Subscription records: customer, product, subscription, and transaction-related identifiers and subscription status, used to recognize purchases and administer paid access. Paddle handles checkout payment information under its own privacy notice; do not send card details to Monxvi.
- Support and technical information: messages you send us, IP addresses, browser and device information, access logs, error reports, and usage information generated when you access the service, used for support, troubleshooting, security, fraud prevention, and service improvement.
We do not use recorded faces for biometric identification. Any statistics labeled demo are sample information, not actual guest tracking. Providing information needed for an account or requested feature is necessary to use that feature.
3. Legal bases
Where data protection law requires a legal basis, we rely on contract performance for account administration, event tools, storage, and requested AI features; legitimate interests for proportionate security, fraud prevention, support, and service improvement; legal obligations for required records and lawful requests; and consent where required for optional communications or non-essential tracking. You may withdraw consent without affecting earlier lawful processing. Organizers must establish their own lawful basis for guest recordings and contact details.
4. Who receives information
- Service providers supporting hosting, authentication, database storage, media storage, AI processing, diagnostics, and support, including Lovable Cloud and AI providers accessed through Lovable AI Gateway, as needed to operate the service.
- Paddle, our Merchant of Record, for product sales, subscription management, payment processing, invoicing, fraud prevention, and tax compliance. See Paddle’s Privacy Policy.
- Recipients you or your organizer choose when downloading or sharing recordings. Anyone who receives a working sharing link may access its content while it remains valid; recipients may retain copies.
- Professional advisers, including legal and accounting advisers, where needed under confidentiality obligations.
- Authorities where disclosure is required by law or necessary to protect lawful rights and safety, and a successor if our business is reorganized or transferred, subject to applicable protections.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use your event media for advertising without your permission.
5. How long we keep information
We keep account and event information while your account is active and as reasonably needed to provide the service. Media availability is subject to the storage period shown for your plan, including 14 days for Starter and 90 days for Pro. Download important media before that period ends. These availability periods are not a guarantee that every copy is automatically erased on that exact day.
You can delete individual captures in Gallery and request account or other data deletion by email. We delete or anonymize data when it is no longer needed, subject to legal recordkeeping, dispute resolution, fraud prevention, and reasonable backup recovery periods. Support records and technical logs are retained only as reasonably needed for their stated purposes. Limited records may be kept longer where law requires; backup copies may remain until their normal replacement cycle.
6. Cookies and local storage
MONXVI uses essential browser storage, including local storage for your sign-in session. Our authentication and payment providers may use essential cookies or similar technologies to provide login, checkout, security, and fraud prevention. These are not used by Monxvi for advertising.
Monxvi does not currently enable optional analytics or marketing cookies in the app. If introduced, we will update this notice and obtain consent where required before using them. You can clear cookies and site storage or block them through your browser settings; doing so may sign you out or prevent login or checkout from working. Camera and microphone permissions can also be managed in browser or device settings.
7. Security and international processing
We use appropriate technical and organizational safeguards, including encrypted connections, authentication, access controls, and restricted media storage, designed to protect information. No system is completely secure; keep credentials private and share recordings carefully.
We are based in the United States, and service providers may process information in the United States or other countries with different privacy laws. Where UK or EEA transfer rules apply, we use legally required safeguards, such as adequacy decisions or standard contractual clauses, as applicable. Contact us for information about relevant transfer safeguards.
8. Your privacy rights
Depending on where you live and applicable law, you may request access to or a copy of your personal information, correction, deletion, restriction of processing, portability, or objection to certain processing. You may withdraw consent and complain to your competent privacy regulator. UK and EEA users may complain to their data protection supervisory authority. We respond to GDPR requests within one month, subject to lawful extensions communicated to you.
Email monxvi.app@gmail.com with your request. We may verify your identity proportionately before providing or changing personal information. Authorized agents may submit requests where local law permits. We will not discriminate against you for exercising privacy rights. Rights may be limited by legal obligations, other people’s rights, or information we must keep. Guests requesting changes to organizer-controlled media should identify the event and contact the organizer.
9. Children and updates
Operator accounts are intended for adults, not children under 18. Organizers must obtain any consent required from parents or guardians before recording children. If you believe a child’s information was collected unlawfully, contact us so we can investigate and take appropriate action.
We may update this notice as our practices change. The date above identifies the latest version; material changes will be communicated through the service or email where required. For questions about this notice, email monxvi.app@gmail.com.