Privacy Policy

Mondegar AI, a product of MSN Partners LLC, operates the website at https://www.mondegar.ai and provides editorial analysis and conversational intelligence for public SEC 13F filings. We are committed to maintaining the absolute security, confidentiality, and integrity of your data. We do not sell personal data, and we do not share your name, email, or Stripe billing profile with advertisers or data brokers. We do run our own Google Ads marketing campaigns to reach new users, and on ordinary website visits Google's ad-measurement systems receive the page you're viewing on every page load — including the URL's query string (so if you search for something, e.g. /search?q=nvidia+earnings, the search term is included) and the page title — tied to a persistent Google-assigned identifier. Ad personalization and remarketing use of that browsing data are turned off. Opening the subscription confirmation page is not reported as a paid purchase. See Section 4 for the full detail on that and on the infrastructure processors (including the LLM provider that powers AI chat) who handle your data to deliver the Service.

• Consent Framework: We process account and subscription data to provide the Service as described below. Sharing personal context with third-party AI is a separate, optional choice: creating an account, subscribing, or enabling email delivery does not grant AI sharing permission.
• AI Sharing Choice: Before personal questions, conversation history, page context, or watchlist information are sent to our AI services, we name the services and ask you to allow or decline this sharing. Personal AI currently uses OpenRouter and DeepInfra. Your choice applies to your Mondegar account across the web, iOS app, and personalized email briefs. You can turn it off in Account → AI privacy without deleting your account or losing ordinary research and non-AI briefs. A change to the disclosed personal AI route requires fresh consent. Revocation stops further personal AI sharing and cancels ongoing processing where possible; it cannot recall information already transmitted to a provider. General summaries based only on public market information may still use AI.
• Withdrawal of Consent: You have the right to withdraw your consent to our data processing at any time. You can do this by deleting your account via your settings dashboard or by submitting a request to info@mondegar.ai. Upon receiving your withdrawal request, we will deactivate your account and initiate the deletion of your personal data within 30 days, subject to billing/tax retention requirements and the limited trial-eligibility record described below.

We collect and process the data needed to provide our services, plus the marketing-measurement data described in Section 4:

• Account Registration Data: When you sign in with Google (via Firebase Authentication), we receive your secure display name, email address, profile image URL, and a secure unique user identifier. We never receive or store your Google password.
• Subscription & Billing Data: Stripe processes website subscription payments; Apple processes App Store payments. Mondegar receives and stores provider customer or transaction identifiers, subscription product and status information, and access or billing dates to verify purchases and provide access across devices. We do not receive your full payment card number from either provider.
• Usage Data & Interaction Logs: We log request metadata (timestamps, requested routes, IP-derived general geographic region, and anonymised user-agent strings) and aggregate counters (such as how many chat questions you asked). Used strictly to enforce rate limits, detect infrastructure abuse, and diagnose errors.
• User Prompt Submissions: Standard and conversational queries entered in our AI chat are processed in real-time. Do not submit corporate secrets or highly confidential proprietary data.
• Cookies: One session cookie (insights_session) keeps you signed in. Pages opened from the iOS app use a separate first-party preference, mondegar_app, saved in a cookie and browser tab storage, to disable Google Analytics and Ads measurement across subsequent pages in that browser. On ordinary website visits, we run Google Analytics 4 (_ga, _ga_*) to understand site traffic, and a Google Ads conversion tag. On ordinary website visits, both assign a persistent Google identifier and send it, together with the page you're viewing (including its query string — e.g. a search term — and its title), on every page load — this happens whether or not you ever clicked one of our ads, not only for ad-clickers. Google's ad-measurement domains, including doubleclick.net, are contacted as part of this. We have turned off ad personalization and cross-device linking on both tags, so this browsing data is not used to build ad audiences and is not used to show you ads elsewhere; no remarketing/audience-building beacon fires. See Section 4 for exactly what's sent. We do not display third-party ads on the site itself (no ad network runs on mondegar.ai), and we do not use any other advertiser's tracking pixels or cross-site trackers.

We disclose data to a limited set of infrastructure processors necessary to deliver our services, plus one marketing-measurement service (Google Ads/Analytics, disclosed separately below) that is not necessary infrastructure:

• Google Firebase: Authentication and identity verification.
• Stripe and Apple: Website and App Store subscription billing, respectively. Apple also provides Sign in with Apple when you choose that sign-in method.
• Railway: Application hosting, Postgres database, and Redis cache instances inside secure US-based servers.
• OpenRouter / DeepInfra: With your explicit AI sharing permission, we send your questions, recent conversation history, relevant page context, and public research data through OpenRouter to DeepInfra to generate chat responses. DeepSeek develops the model; DeepInfra hosts the model used for these personal AI requests. Personalized brief generation may also send your watchlist symbols with related public prices, news, and earnings information. We restrict these requests to the disclosed DeepInfra endpoint and require OpenRouter's no-data-collection and zero-data-retention routing filters. If no permitted endpoint is available, we do not retry through another provider. These restrictions concern inference-provider processing, not every storage layer: OpenRouter retains request metadata, and its optional logging, input/output use, and other account-level services have separate policies. We do not make a blanket promise of zero retention across all services. We do not automatically include your account name, email, or billing profile; anything you type into a question can be included, so avoid sensitive personal information. Our general market summaries may use other AI routes with public market data, without your account context.
• Resend: Transactional service emails.
• Google (Analytics & Ads) — marketing measurement, not infrastructure: We use Google Analytics 4 to understand site traffic and Google Ads to run our own marketing campaigns and measure whether they work. This measurement is disabled for pages opened from the iOS app and for subsequent pages while that browser's app privacy preference remains set. On ordinary website page views, Google receives the page you're viewing — including its query string (for example, a search you ran, such as /search?q=nvidia+earnings) and its title — plus IP-derived general location, browser/device type, and a persistent Google-assigned identifier (the _ga/_ga_* identifiers for Analytics; a separate identifier for the Ads tag). This happens on ordinary website visits, not only for people who clicked one of our ads, and reaches Google's ad-measurement infrastructure, including doubleclick.net domains. We have turned off ad personalization and cross-device (Google Signals) linking on both tags, so this data is not used to build ad audiences and is not used to show you ads elsewhere. By direct inspection of live network traffic, we confirmed that two specific remarketing/audience-building calls are absent — Google's remarketing-list collection endpoint and its third-party cookie-partitioning endpoint do not fire. We do not send a paid-purchase conversion merely because you visit the subscription confirmation page. We do not send Google your name, email, or Stripe billing profile. This is separate from running ads on our own site: we do not sell ad space or display third-party ads on mondegar.ai.

We implement comprehensive technical safeguards to protect your personal data:

• Transit Encryption: All data transmitted between your browser and our servers is secured using industry-standard Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Core database instances, including user tables and metadata, are protected by AES-256 storage-level encryption.
• Infrastructure Isolation: Databases are locked behind firewall boundaries, with internal communication isolated to protected Virtual Private Clouds (VPC).
• Access Controls: Access to backend database consoles and server management panels is restricted to authorized operations engineers using multi-factor authentication (MFA) and audited credentials.
• Incident Response & Notification: In the highly unlikely event of a confirmed security breach impacting your personal data, we will notify affected users within 72 hours of verification.

We hold your personal data only as long as necessary to fulfill operational and regulatory purposes:

• Account Data: Stored while your account remains active. When you delete your account, your profile and saved research data are removed or anonymized, and access is disabled. We retain limited account and billing identifiers to prevent deleted accounts from being restored by delayed sign-in or payment events, plus the trial-eligibility and legally required transaction records described below.
• System Logs: Metadata logs and performance metrics are rotated out and permanently deleted every 90 days.
• Trial Eligibility: We may retain a limited trial-usage record after account deletion to enforce one-time trial eligibility and prevent repeated trial enrollment through recreated accounts. This record uses a keyed, pseudonymous hash of your normalized verified email address, rather than storing the email address itself in the trial ledger. It is not anonymous data and is not used for marketing. Access is restricted to the systems and personnel that administer subscription eligibility and prevent abuse.
• Stripe & Tax Records: Payment histories, subscription durations, and tax-relevant transaction records are retained for a minimum of 7 years following subscription cancellation to comply with standard state and federal tax guidelines.
• Backups: Encrypted system database backups are retained for a maximum of 30 days before automatic rotation and overwrite.

Mondegar AI aligns its practices with principles from international privacy frameworks, including the EU/UK GDPR, California's CCPA, and Canada's PIPEDA. We offer the following rights to all users, regardless of location:

• Right of Access & Portability: Request a structured copy of all personal data we process about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your profile and data (subject to billing/tax retention and the limited trial-eligibility record described above).
• Right to Restriction & Objection: Request that we limit processing of certain details or object to processing altogether.
• Right to Non-Discrimination: We do not penalize, limit, or vary terms of service based on the exercise of your privacy rights.

To exercise these rights, submit your request to our compliance team at: info@mondegar.ai.

The Service is intended for individuals who are at least 18 years old (or the age of majority in their jurisdiction), as required by our Terms of Service. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has registered an account, we will immediately delete all corresponding data.

We will update this policy from time to time to match advancements in our technology, security practices, or regulations. Material updates will be communicated through in-app dashboard notices or transactional email alerts at least 14 days before their effective date.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer at: info@mondegar.ai.