Privacy Policy

1. Who is responsible

Zakomo FZCO is the controller for data about our website visitors, account holders and customers. For the contacts, leads and other personal data that customers put into Monkeynme, the customer is the controller and we process that data on their behalf (a data processing agreement is available on request). Contact: [email protected].

2. What we collect

• Account data: name, e-mail address, organisation, role, sign-in times; passwords are stored only as a secure hash.
• Billing data: plan, billing period, invoice details and the country and VAT number you give at checkout. Card and bank details are entered directly with Paddle; we never see or store them.
• Content: the brand profile, posts, pictures, landing pages, campaigns, contacts, leads and e-mails you create or import.
• Connections: access tokens for the services you connect (for example Instagram, LinkedIn, Google), stored encrypted.
• Usage and technical data: server logs with IP address, browser and pages called, used for security and troubleshooting.
• Website: forms you send (demo request, contact) and anonymous page views; a cookie only stores your language and your cookie choice.

3. Why we use it

• to provide the Service you signed up for and the features you use (contract);
• to bill your subscription and meet tax and accounting duties (contract, legal obligation);
• to keep the Service secure and fix problems (legitimate interest);
• to answer your requests and, if you agreed, to send product news (contract, consent);
• we do not sell personal data and do not use your content to train AI models.

4. Who processes data for us

The core of Monkeynme, including the AI that writes texts, runs on servers we operate ourselves. We use these processors and services:

• Paddle.com Market Ltd (United Kingdom) — our reseller and Merchant of Record: checkout, payment, invoices, tax and refunds. Paddle processes your billing data under its own privacy notice (paddle.com/legal/privacy).
• Cloudflare, Inc. — network delivery and protection of our websites.
• ALL-INKL.COM (Germany) — e-mail sending and receiving for our own mailboxes.
• Services you connect or switch on — data goes to them only when you use the feature: Meta (Instagram, Facebook), LinkedIn, TikTok, Google (YouTube, Search Console), Canva, your own e-mail provider; fal.ai (optional AI pictures and videos), Google Gemini and Perplexity (optional AI-search check), Unsplash and Pexels (stock photo search terms only).

5. International transfers

Some processors are outside your country. Where the law requires it we rely on adequacy decisions, standard contractual clauses or equivalent safeguards.

6. How long we keep data

• account and content: for as long as your subscription runs, then 30 days for reactivation or export, then deleted;
• billing records: as long as tax and accounting law requires (usually up to 10 years);
• server logs: up to 90 days;
• website form messages: up to 2 years after the last contact, unless they become a customer relationship.

7. Your rights

You can ask for access, correction, deletion, restriction, data portability and object to processing based on legitimate interest; you can withdraw consent at any time. Write to [email protected]. You may also complain to a data-protection authority, such as the UAE Data Office or the authority in your EU/UK country of residence.

8. Security

We protect data with encryption in transit (TLS) and at rest for stored credentials, access limited to the people who need it, separate data per organisation, and regular security reviews.

9. Changes

We update this policy when our processing changes and show the date of the current version at the top.