Introduction
This Privacy Policy governs your access to and use of the Monesize website at monesize.com and Monesize Gateway, operated by Monesize Limited. By accessing or using our services, you acknowledge that you have read, understood, and agree to the data practices described in this document.
This policy applies to personal and organisational information collected through the Monesize website and the Monesize Gateway service. It does not apply to other Monesize products such as Core, Desk, Engage, or Books, which are governed by their own privacy policies on their respective platforms.
Company Information
The data controller responsible for your information is:
Registration
Monesize Limited
128 City Road
London, EC1V 2NX
United Kingdom
Direct Inquiry
hello@monesize.comInformation We Collect
personAccount Data
Name, email address, and password when you register a Monesize Gateway account. If you sign in using Google or Microsoft, we receive your name and email address from those providers.
corporate_fareOrganisation Data
Organisation name, logo URL, and member relationships when you create or join a Gateway organisation. This includes roles and membership history within your organisation.
monitoringUsage Data
IP addresses, session identifiers, browser types, and interaction logs collected to maintain platform security and investigate suspicious activity.
receipt_longBilling Data
Payment and subscription information processed through Stripe when your organisation subscribes to Gateway Premium. Monesize Limited does not store full card details. Stripe acts as the payment processor.
How We Use Information
- 01
Providing the Service
To create and manage your Gateway account, authenticate your identity, and operate your organisation's membership and access relationships.
- 02
Security and Fraud Prevention
To detect and respond to suspicious activity, enforce session integrity, and protect accounts and organisations from unauthorised access.
- 03
Billing and Subscriptions
To manage your organisation's subscription, process payments through Stripe, and communicate billing-related information.
- 04
Communications
To send account-related emails such as email verification, password reset, organisation invitations, and membership removal notifications.
Legal Basis for Processing
We process personal data under the following legal bases:
Contractual Necessity
To provide and operate Monesize Gateway as agreed when you create an account or subscribe to the service.
Legitimate Interests
To maintain platform security, prevent fraud, and improve the reliability of our services.
Legal Obligations
To comply with applicable laws, including data protection and financial regulations where relevant.
Data Storage and Security
"Security is treated as a foundational requirement of our platform, not an optional feature."
Account passwords are stored using bcrypt with a work factor designed to resist brute-force attacks. Session tokens are signed using RS256 asymmetric cryptography. Sensitive values such as connected service tokens are encrypted at rest using AES-256-GCM.
Access to platform data is controlled through authenticated sessions with support for two-factor authentication. All data in transit is protected using TLS. Our infrastructure is hosted on Supabase and deployed via Vercel.
International Data Transfers
Your data may be stored and processed in locations outside the United Kingdom, including within the European Economic Area and the United States, through our infrastructure and service providers. Where such transfers occur, we rely on appropriate safeguards including contractual protections to maintain data security and compliance.
Data Sharing
Monesize Limited does not sell, rent, or trade your personal or organisational information to third parties.
Service Providers
We share data with a limited set of trusted service providers necessary to operate the platform, including Supabase for database hosting, Vercel for application hosting, Stripe for payment processing, and Amazon SES for transactional email. These providers process data only as necessary to deliver their services and are bound by appropriate data processing agreements.
Your Responsibilities
Account Accuracy
You are responsible for providing accurate information when registering and keeping your account details current. Inaccurate information may affect your ability to use the service.
Account Security
You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. You should enable two-factor authentication where possible.
Data Retention
We retain your account and organisational data for as long as your account remains active or as necessary to provide the service. Audit log records associated with your organisation are retained as part of the organisational record.
When you close your account or delete an organisation, we will remove or anonymise your personal data within a reasonable timeframe, unless retention is required by applicable law or for the resolution of disputes.
Your Rights
Cookies and Tracking
We use cookies and similar technologies to operate the Monesize website and Gateway. This includes essential session cookies required for authentication and security, as well as analytics cookies to help us understand how visitors use the site.
You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use Gateway. For full details, please refer to our Cookie Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When material changes are made, we will notify affected users by email or through a prominent notice on the platform.
Continued use of our services after updates constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please contact us.
Email Us
hello@monesize.com
Registered Address
128 City Road, London
Regulatory Contact
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
Information Commissioner's Office (ICO)
The ICO is the UK's independent authority responsible for upholding information rights in the public interest.
ico.org.uk