Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains how MonkNeo ("MonkNeo", "we", "us") collects, uses, and shares information when you use our website and the MonkNeo application for building and running AI co-workers (together, the "Service").

1. Information we collect

Information you provide

  • Account information — your name, email address, organisation name, and the passkeys you register to sign in.
  • Content — the instructions, files, skills, prompts, messages, and other data you create or upload to build and run co-workers.
  • Credentials you connect — API keys and integration authorisations you add so co-workers can use your chosen model providers and third-party tools. Provider API keys are encrypted at rest.
  • Communications — feedback, support requests, and anything else you send us.

Information we collect automatically

  • Usage data — actions taken in the Service, feature usage, page views, and diagnostic logs.
  • Device and connection data — IP address, browser type, and similar technical information.
  • Analytics — we use PostHog, a product analytics service, to understand how the Service is used (for example sign-ups, page views, and feature usage). PostHog processes this data on our behalf on servers in the European Union. Analytics data is tied to your account so we can improve the Service; we do not use it for advertising. See PostHog's privacy policy for details.
  • Cookies and similar technologies — a session cookie is required to keep you signed in, and our analytics provider stores a cookie and browser storage to recognise repeat visits. We do not use third-party advertising cookies.

2. How we use information

  • Provide, operate, secure, and improve the Service.
  • Run the co-workers, jobs, schedules, and integrations you configure.
  • Authenticate you and protect against fraud and abuse.
  • Respond to your requests and send service-related communications.
  • Comply with legal obligations and enforce our terms.

3. AI processing and model providers

Running a co-worker sends the relevant content (your instructions, messages, and attached files) to the AI model provider configured for your account or organisation — for example Anthropic, Google, or OpenAI — and to integrations you enable. If you bring your own API keys, that content is processed under your agreement with the relevant provider. We do not use your content to train our own foundation models.

4. How we share information

  • Service providers — infrastructure, hosting, email delivery, analytics (PostHog), and AI model providers that process data on our behalf to deliver the Service.
  • Within your organisation — if you join an organisation, its administrators can manage members and may access organisation-shared co-workers, skills, and settings.
  • Legal and safety — when required by law or to protect rights, safety, and the integrity of the Service.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

5. Data retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You can delete content, and deleting your account removes associated data, subject to limited retention where required.

6. Security

We use technical and organisational measures to protect your information, including encryption of stored provider keys and isolated sandboxes for code execution. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. If you are in an organisation account, some requests may be directed to your administrator.

8. International transfers

We and our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes may be communicated through the Service.

11. Contact us

Questions about this Policy or your data? Email us at privacy@monkneo.com.