Privacy Policy
Last updated: December 23, 2025
Introduction
MonKey ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance management platform.
By using MonKey, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Personal Information
- Contact information (name, email address, phone number)
- Account credentials and authentication information
- Profile information and preferences
- Communication history with our support team
Financial Information
- Bank account information and transaction data
- Credit card and payment information
- Investment account details and portfolio data
- Budget categories and financial goals
- Spending patterns and financial behavior analytics
Technical Information
- Device information (IP address, browser type, operating system)
- Usage data and application performance metrics
- Log files and error reports
- Cookies and similar tracking technologies
How We Use Your Information
We use your information for the following purposes:
- Provide and maintain our financial management services
- Process transactions and manage your account
- Analyze your financial data to provide insights and recommendations
- Send important account notifications and service updates
- Provide customer support and respond to your inquiries
- Improve our services and develop new features
- Ensure security and prevent fraud
- Comply with legal obligations and regulatory requirements
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
Service Providers
We work with trusted third-party service providers who assist us in operating our platform, including:
- Financial data aggregation services (Plaid, Yodlee)
- Cloud hosting and infrastructure providers
- Payment processing services
- Analytics and performance monitoring tools
- Customer support platforms
Legal Requirements
We may disclose your information when required by law, court order, or government regulation, or when necessary to protect our rights, property, or safety, or that of our users or the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.
Data Security
We implement industry-standard security measures to protect your information:
- 256-bit SSL/TLS encryption for data transmission
- AES-256 encryption for data storage
- Multi-factor authentication for account access
- Regular security audits and penetration testing
- SOC 2 Type II compliance
- PCI DSS compliance for payment processing
- Employee background checks and security training
- Access controls and monitoring systems
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security measures.
Your Rights and Choices
You have the following rights regarding your personal information:
Account Management
- Access and update your account information
- Download your financial data
- Delete connected accounts and data
- Manage communication preferences
Privacy Rights (GDPR, CCPA)
- Right to access your personal information
- Right to correct inaccurate information
- Right to delete your personal information
- Right to data portability
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising privacy rights
To exercise these rights, please contact us at privacy@monkey.finance.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential cookies for platform functionality
- Analytics cookies to understand usage patterns
- Preference cookies to remember your settings
- Security cookies to prevent fraud and unauthorized access
You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.
Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Account information: Duration of account plus 7 years
- Transaction data: 7 years for tax and compliance purposes
- Communication records: 3 years for customer service purposes
- Technical logs: 90 days for security and performance monitoring
When you delete your account, we will securely delete your personal information within 30 days, except where retention is required by law.
Children's Privacy
MonKey is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by email or through our platform. The "Last updated" date at the top of this policy indicates when it was last revised.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Privacy Office
Email: privacy@monkey.finance
Address: MonKey Inc., 123 Finance Street, Suite 100, San Francisco, CA 94105
Phone: +1 (555) 123-4567
Compliance and Certifications
MonKey maintains the following compliance standards and certifications:
- SOC 2 Type II - Security, Availability, and Confidentiality
- PCI DSS Level 1 - Payment Card Security
- GDPR Compliance - European Data Protection Regulation
- CCPA Compliance - California Consumer Privacy Act
- GLBA Compliance - Gramm-Leach-Bliley Act
- ISO 27001 Certified - Information Security Management