1. Scope and role
This policy applies to personal data we process in connection with Mont. In most cases, Nauchu AB is the controller of that data. Some connected services you choose to use with Mont may also process data under their own terms and privacy notices.
If you do not agree with this policy, do not use Mont. If you use Mont on behalf of an organization, you are responsible for ensuring your use complies with your own internal policies and applicable law.
2. Data we collect
We may collect the following categories of data:
- Account and identity data: name, email address, login method, account identifiers, profile details, subscription status, and related account settings.
- Connected service data: if you sign in with Google or connect third-party services, we may receive account identifiers, authorization codes, access or refresh tokens, and file or integration metadata needed to provide the requested feature.
- Content and project data: recordings, audio, video, images, slides, transcripts, prompts, project files, exports, thumbnails, captions, and other content you upload, create, or store in Mont.
- Billing and transaction data: selected plan, billing interval, subscription events, invoices, payment status, and limited billing metadata. Full payment card details are handled by our payment processor rather than stored in full by Mont.
- Usage and diagnostic data: page visits, feature usage, event data, timestamps, referrers, browser or device details, request metadata, service logs, and identifiers such as anonymous IDs or user IDs used for analytics and support.
- Support and communications: emails, attachments, issue history, replies, and any information you send when you contact support or report a problem.
- Browser storage and device data: cookies, localStorage, sessionStorage, IndexedDB data, cached media, editor state, theme preferences, analytics preference flags, and selected microphone or camera device information stored through your browser.
3. How we collect data
We collect data directly from you, automatically from your use of Mont, and from the services you connect to Mont.
For example, we collect data when you create an account, log in, upload files, record content, request exports, use AI features, start a subscription, contact support, or interact with the website and app.
4. How we use data
We use personal data to:
- provide, operate, secure, and maintain Mont;
- authenticate users and manage accounts, subscriptions, and billing;
- host, process, render, transcode, store, and deliver your projects and exports;
- power requested features such as transcription, voice, image, and AI workflows;
- respond to support requests and communicate with you about your account or service changes;
- measure usage, troubleshoot failures, prevent abuse, and improve performance and reliability;
- develop new features and analyze product quality using aggregated or de-identified data where appropriate; and
- comply with legal, tax, accounting, security, and regulatory obligations.
5. Legal bases
Where the GDPR or similar laws apply, we process personal data on one or more of the following bases:
- Contract: to provide Mont, process subscriptions, deliver support, and carry out the services you request.
- Legitimate interests: to secure Mont, prevent abuse, analyze product usage, improve our services, and manage our business operations.
- Consent: where consent is required, including certain connected integrations or optional processing flows.
- Legal obligation: to meet tax, accounting, consumer protection, law-enforcement, and other mandatory legal requirements.
6. How we share data
We do not disclose your personal data except as described in this policy, as needed to provide Mont, or as required by law.
We may share data with:
- Infrastructure and hosting providers that help us run Mont, store content, and deliver assets. Depending on the feature, this may include Supabase, Google Cloud services such as Firestore and Cloud Storage, and BunnyCDN.
- Billing providers such as Stripe, which process payments, subscriptions, invoicing, and billing portal activity.
- Analytics providers such as PostHog, which we may use to understand product usage and diagnose service issues.
- AI and media processing providers used only when you request the relevant feature. Depending on the workflow, these may include AssemblyAI, SaladCloud, Cartesia, XTTS providers configured by us, and fal.ai.
- Support and communications tools used to handle email support and internal issue tracking, including Gmail and GitHub-based tooling where applicable.
- Recipients you choose when you publish, export, or share content using Mont according to your settings and instructions.
- Professional advisers, authorities, or transaction counterparties if needed for legal compliance, enforcement, fraud prevention, or a merger, acquisition, financing, or asset sale.
7. International transfers
Mont and our service providers may process data in countries outside Sweden or the European Economic Area. When we transfer personal data internationally, we rely on appropriate safeguards required by law, such as adequacy decisions, contractual commitments, or similar transfer mechanisms.
8. Retention
We keep personal data for as long as reasonably necessary to provide Mont, maintain your account, operate requested features, resolve disputes, enforce our agreements, and comply with legal obligations.
Retention periods vary by data type. For example, we may keep subscription and invoice records for tax and accounting purposes, service logs for security and diagnostics, support correspondence for case history, and project or content data until you delete it, your account is deleted, or the data is otherwise removed under our retention processes. Backups may persist for a limited period after deletion.
Some data may also remain in your browser storage until you clear it through your browser or device settings.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal data, or to withdraw consent where processing is based on consent.
To exercise a privacy right, contact us at support@usemont.com. We may need to verify your identity before completing a request.
If you are in Sweden or the EEA and believe our processing violates applicable law, you also have the right to complain to your local supervisory authority, including the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
10. Security
We use technical and organizational measures designed to protect personal data against accidental or unlawful loss, misuse, unauthorized access, disclosure, alteration, or destruction. No system is perfectly secure, and we cannot guarantee absolute security.
11. Children
Mont is not intended for children under the age of 16. If you believe a child has provided personal data to Mont without appropriate authorization, contact us so we can take appropriate action.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will publish the updated version here and revise the "Last updated" date above. If a change materially affects you, we will provide additional notice where required by law.
13. Contact
If you have questions about this Privacy Policy or our handling of personal data, contact us at support@usemont.com.
Mailing address: Nauchu AB, Box 359, 116 74 Stockholm, Sweden.