monty

PRE-RELEASE · OWNER REVIEW REQUIRED

How Monty handles workspace data

A pre-release data-handling notice. Final operator identity, privacy contact, retention commitments and processor terms must be approved before commercial customer onboarding.

Data used to do the work

Monty processes account and workspace membership information, instructions from authorized members, permitted integration data, conversation context, knowledge and generated artifacts. Connected systems determine which source information is available. Customer emails, texts, documents and webpages are reference material, not new operating authority.

Purpose and permission

Information is processed to execute authorized workspace requests, create deliverables, operate schedules and integrations, provide usage and billing records, and investigate operational issues. Workspace administrators control connection grants, policies and available agents. Access is evaluated against the current workspace and task.

Hosting and model providers

This deployment uses Vercel and Supabase. Activated AI, storage, browser-worker and integration providers process the information needed for the selected feature. The final processor list and provider retention terms must be disclosed before launch. Monty does not train its own model on customer Slack content; a provider’s independent terms and settings still need review.

Private work and support

Durable private work and credential envelopes use authenticated encryption. Database and application permissions are independent controls. Platform troubleshooting is limited to operational metadata; the support console does not disclose messages, contacts, memory, documents, browser sessions or provider credentials. Encryption does not prevent authorized execution services from processing permitted content.

Retention and customer controls

Workspace controls support credential revocation, policy changes, pausing work and archiving knowledge. Retention and deletion requests must follow the final operator policy and the configured worker lifecycle. No universal deletion deadline or indefinite retention promise is stated in this pre-release notice. Export and deletion coverage must be verified against activated providers.

Questions and privacy requests

The commercial operator’s identity, privacy contact and applicable jurisdiction will be published here before public distribution. During private evaluation, ask your workspace owner to coordinate a request. This notice is not a substitute for an approved privacy policy or data-processing agreement.