Privacy Policy

Website visitors. When you visit Mona’s website, Vercel Web Analytics records the page you viewed, the page that referred you, and your browser, operating system, device type, and country. It uses no cookies and does not keep your IP address. If you write to us, we keep your message and email address.

Account holders. Accounts are opened by Mona’s team or by invitation from a firm already using Mona. For each account we keep the person’s name, email address, firm, and role, a password that our sign-in provider stores only in hashed form, and sign-in activity.

Case data. Firms upload and create the material Mona analyzes: financial documents, questionnaires, notes, and interview recordings with their transcripts, together with everything Mona produces from them, such as extracted figures, analyses, chats, and drafts. Case data can include information about a firm’s clients, opposing parties, children, and other people who appear in financial or legal records.

Usage records. Mona records how much AI model and transcription work each case uses, for billing and capacity, and keeps service logs to run, secure, and fix the service.

We use information to:

• provide the service, including analyzing case data at the firm’s direction;
• secure the service, investigate problems, and respond to support requests;
• communicate with account holders about their accounts and the service;
• measure use for billing and capacity; and
• comply with the law and enforce our agreements.

We do not sell personal information, use it for advertising, or share it for cross-context behavioral advertising. We do not use case data to train any AI model.

Mona handles case data on behalf of the firm that uploaded it and only as the firm directs, under the firm’s Data Processing Agreement. The firm decides what to upload, who on its team can see it, and when to delete it. Each firm’s data is walled off from every other firm’s.

Before an interview is recorded, Mona asks the attorney to log the consent of everyone present.

If information about you appears in a firm’s case and you want to see, correct, or delete it, contact that firm. We will help the firm respond.

We share information only with the providers that run parts of the service for us, each bound in writing to protect it:

• Vercel hosts the website and the application, in the United States.
• Supabase stores the database and files, handles sign-in, and sends account emails, in the United States.
• Anthropic runs the AI models that read and analyze case data, and their web searches. It stores data in the United States and may process requests elsewhere. It may not train models on this data, and it deletes the data within 30 days unless it must keep it longer for safety review or by law.
• AssemblyAI transcribes interview recordings in the United States, and deletes each recording’s audio and transcript once transcription finishes.

Public sources. Some work reaches public sources. Legal research questions go to Firecrawl’s index of US law, written as questions of law, never with names, amounts, or other facts of a case. To estimate a home’s value when a case holds no appraisal, Mona may search the web for the property’s address and read its public Redfin page; only the address and that page’s web address leave Mona.

Legal requirements. We disclose information when the law requires it. Before disclosing case data, we notify the firm unless the law forbids it, so the firm can seek protection.

Business transfers. If Mona is merged or acquired, information may pass to the successor, which must keep the commitments in this policy and in each firm’s agreement.

Mona uses only the cookies the service needs: sign-in cookies that keep you signed in, and one that remembers whether the application’s sidebar is open. Mona uses no advertising or tracking cookies.

Information is encrypted in transit and at rest. Access by Mona’s team is limited to what running, securing, and supporting the service requires.

Account information is kept while the account is open. Case data is kept until the firm deletes it. Deleting a case removes its documents, recordings, and analyses from the service; copies in backups expire within 30 days, and records of work in progress within 7 days.

To close an account, write to us. We delete the account’s data within 30 days of closing it.

Account holders can ask to see, correct, or delete their account information, or ask how it is used, by writing to us. Depending on where you live, the law may give you further rights; we honor them and will not treat you differently for using them.

Mona is for attorneys and their staff and is not directed to children. Information about children can appear in a family-law case; Mona handles it as case data, under the firm’s direction.

When this policy changes, we update the date above, and we tell account holders before a material change takes effect.

Write to gordonliu1106@gmail.com with any question or request about privacy.