How moneta handles your data.

This Privacy Policy applies to moneta, Inc. ("moneta," "we," "our") and the services we provide through our website, application, and APIs (collectively, the "Service"). It applies to personal data we collect about visitors, prospects, and authorized users of customer accounts.

It does not apply to the cloud billing data and customer cost data that you submit to the Service for processing. That data is governed by our Data Processing Addendum, where moneta acts as a processor on your behalf.

If you have questions, email us at privacy@monetacloud.com.

We collect data in three buckets:

• Account data you give us directly: name, work email, company, role, password hashes, billing contact, support communications.
• Usage data our systems generate when you use the Service: pages visited, features used, request timestamps, IP address, browser and OS metadata, error logs.
• Cloud billing data you connect to moneta: AWS CUR exports, Azure Cost Management exports, account hierarchies, usage records, discount allocations. This is processed under the DPA, not this policy.

We do not knowingly collect sensitive categories of personal data (health, biometric, religious, political). If you submit such data through support channels, we delete it.

We use personal data only for the purposes you'd expect from a B2B SaaS provider:

• To provide, maintain, and improve the Service.
• To authenticate users, secure accounts, and detect abuse.
• To support you when you contact us.
• To send service-related notices (billing, security, breaking changes).
• To send marketing communications you opted into. You can unsubscribe from any marketing email at any time.
• To comply with legal obligations and protect our rights.

We do not sell personal data. We do not use customer data to train third-party AI models.

We share personal data with a limited set of trusted parties:

• Subprocessors who help us run the Service (cloud infrastructure, error monitoring, analytics, customer support tooling, email delivery). The current list is maintained on the Trust Center page and in our DPA.
• Authorized users in your account. Workspace admins can see usage metadata for users in their workspace.
• Legal authorities when required by valid legal process. We commit to challenge overbroad or unlawful requests and to notify you unless legally prohibited.
• Successors in connection with a merger, acquisition, or asset sale. Your data remains protected by an equivalent policy.

moneta is incorporated in the United States and processes data on cloud infrastructure in the United States and the European Union. When personal data moves across borders, we rely on Standard Contractual Clauses (SCCs), supplementary measures, and our DPA to maintain GDPR-equivalent protection. EU/UK customers can request a copy of the SCCs by contacting privacy@monetacloud.com.

We keep personal data for as long as your account is active, plus a reasonable period to handle billing reconciliation, legal obligations, and disputes — typically up to 24 months after account closure. Cloud billing data submitted to the Service is retained under the terms of the DPA; in most cases, we delete it within 90 days of contract termination unless you ask us to retain it longer.

Backup snapshots may persist for up to 35 days after deletion before they are rotated out.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete data (subject to legal retention requirements).
• Object to processing or restrict it.
• Export your data in a portable format.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, email privacy@monetacloud.com from the email address associated with your account. We respond within 30 days.

See our Cookies Policy for a full breakdown of what cookies we set, why, and how to control them.

The Service is for business use only. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, contact us at privacy@monetacloud.com and we will delete it.

We may update this policy as the Service evolves. If we make material changes, we will notify account admins by email and post a notice in the application at least 30 days before changes take effect. The "last updated" date at the top reflects the most recent revision.

Email privacy@monetacloud.com or write to:

Moneta Technology Inc.
Attn: Privacy
350 E 400 S, Suite 316
Salt Lake City, UT 84111
United States

EU representative: available on request to privacy@monetacloud.com.