Privacy Policy

1. Who we are

Mondovo, Inc. provides a platform for designing, publishing and managing websites. In this policy, "Mondovo", "we" and "us" mean Mondovo, Inc. "You" means the person or business with a Mondovo account.

Mondovo, Inc. is a Delaware corporation. Our mailing address is 10685-B Hazelhurst Dr #12282, Houston, Texas 77043, United States, and you can reach us about anything in this policy at the address in section 14.

2. Two kinds of data, two different roles

Most of our customers are agencies, studios and freelancers who build websites for their own clients. That means personal data reaches us by two separate routes, and our responsibility is different for each.

For your own data — your account, your billing details, the briefs and content you give us, your conversations with the assistant — we decide how it is used. In data protection terms we are the controller.

For data that visitors leave on a website you publish with us — an enquiry form, a quote request, a chat message, a page view — you decide what is collected and why. We only store and process it so that your site works and so that you can read it. In data protection terms you are the controller and we are your processor. If you are an agency, your client may in turn be the controller and you their processor; that arrangement is between you and them.

Practically: we do not decide what your published sites collect, we do not use what they collect for our own purposes, and we do not contact the people who fill in your forms.

3. What we collect from you

• Account details: your name, email address and an encrypted form of your password, plus the organisation and team members you set up.
• Billing details: the contact and subscription information needed to charge you. Card numbers are handled by our payment processor and never reach our systems.
• What you give us to build with: briefs, descriptions, uploaded documents and images, the address of a site you ask us to redesign, and the content of the sites you create.
• Your conversations with the product: messages to the AI assistant, refinement instructions and voice input, along with the results, so that the work is repeatable and you can undo it.
• Usage data: which features you use and how the product performs, including session recordings of your own use of the Mondovo application, used to reproduce faults.
• Support and error reports: messages you send us, and diagnostic information captured automatically when something breaks.

4. What sites you publish collect from their visitors

A site published with Mondovo can collect personal data from the people who visit it. What it collects depends entirely on what you put on it. Where a site does collect data, we store it for you:

• Form and quote submissions, and quiz answers.
• Chat conversations, including WhatsApp and Instagram messages where you have connected those channels.
• Contact records built from the above, with the activity timeline attached to them.
• Page analytics events, and records of consent where a visitor subscribes to email.

You are responsible for telling your visitors what your site collects and why — your own privacy notice, and cookie or consent banners where the law requires them. Mondovo does not write or publish that notice for you.

5. Why we use it

• To run the service: generating and refining designs, publishing sites, delivering enquiries to your inbox.
• To bill you and keep records of what you paid for.
• To support you when you ask, and to investigate faults you or our monitoring report.
• To keep the platform secure and to prevent abuse.
• To improve the product — understanding which features are used, and where people get stuck.

6. AI processing

Generating and refining a website means sending the material you give us — the brief, the content, reference images and the instructions you type or speak — to the AI providers we use. Those providers are named on our sub-processors page, which is linked from section 7.

We do not sell this material, and we do not use your content or your clients' content to train models of our own.

AI output is generated, not verified. It can be wrong, and it can resemble other work. Review what a design says before you publish it for a client — particularly prices, claims, and anything a customer might rely on.

7. Who else sees it

We share personal data with the service providers that make the platform work — hosting, storage, payments, email, analytics and the AI providers described above. Each of them is listed, with what they do and what they receive, at mondovo.com/sub-processors.

Beyond those providers we disclose personal data only where the law requires it, where it is necessary to protect our rights or someone's safety, or to a buyer or successor if the business is sold — in which case this policy continues to apply until it is replaced and you are told.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

8. Where data is held

Mondovo is based in the United States and our providers operate in the United States and other countries. If you or your visitors are in the United Kingdom, the European Economic Area or another region with transfer rules, your data may be transferred outside that region to be processed. Where that happens we rely on the transfer safeguards our providers offer, including standard contractual clauses.

9. How long we keep it

We keep your account and site data for as long as your account is open. When you delete a site it leaves your workspace immediately and is held in a recoverable state for a short period so it can be restored if the deletion was a mistake, after which it is removed.

Data collected by your published sites — contacts, submissions, conversations — is yours. You can delete it from your workspace at any time, and we delete it when you close your account.

We keep billing records for as long as tax and accounting law requires, and security and audit logs for a limited period.

10. Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive it in a portable form. You can exercise most of these directly in your workspace; for anything else, write to us at the address in section 14 and we will respond within the time the law allows.

If a visitor to a site you publish asks us to exercise their rights, we will pass the request to you, because that data is yours rather than ours.

If you are in the UK or EEA you also have the right to complain to your data protection authority.

11. Cookies

The Mondovo application uses cookies that are necessary for it to work — keeping you signed in, and remembering preferences you set. We also use analytics cookies to understand how the product is used.

Sites you publish set only what they need. A site with more than one language remembers the language a visitor chose. Anything further — advertising pixels, third-party trackers — is there because you added it, and is your responsibility to disclose.

12. Security

Data is encrypted in transit. Access to production data is restricted to the people who need it, credentials and connected-account tokens are stored encrypted, and administrative actions are logged.

No service can promise it will never be breached. If a breach affects your personal data we will tell you and, where required, the relevant authority.

13. Data processing agreement

Because we process personal data on your behalf when your sites collect it, agencies with clients in regulated markets usually need a data processing agreement. We will provide one on request — write to the address in section 14.

14. Children

Mondovo is a business tool and is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, tell us and we will delete it.

15. Changes to this policy

We update this policy when what we do with data changes. The date at the top is the version you are reading. If a change materially affects you we will tell you in the product or by email before it takes effect.

16. How to contact us

Write to us about anything in this policy — a request about your data, a data processing agreement, or a question about how something works.