Data map

Every place Monarch-X Ai runs: what it reads and when, where that is processed, who processes it, how long it is kept, and why each permission is needed. This page and our store listings are generated from the same table in our code. Read it with the privacy policy.

Where it runs and what it reads

Surface	What is read, and when	Where it is processed	Who processes it	How long it is kept
Web app (monarchxai.com) Available · Every plan Asking questions, chats, saved answers, documents, Settings and billing in your browser.	Your account: name, email address, a password hash or the account identifier your sign-in provider confirms, plan and billing status, and your Settings. When you sign up and when you change them. Your questions, the answers, and chats you keep. When you ask. Documents and files you upload. When you upload them. Answer records: a reference, the time and a fingerprint of the question and answer, never the text. For every answer.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region) Web-search service for live sources (personal details replaced before any query is sent) Payment provider (card details never reach our servers) Email delivery for sign-in links, invitations and reminders	While the account is open, unless the workspace sets automatic deletion (Pro and Enterprise: 30 days to 2 years). Erased within 7 days of an erasure request. Automated database backups are kept for 14 days and application logs for 90 days.
Installed web app (computer or phone) Available · Every plan The same web app added to a home screen or desktop. It is the phone surface: there are no store apps yet. Privacy policy section	Everything the web app reads, in the same way. When you use it. Text, a title or a link you share to it from another app, which opens Check the news. Only when you choose Share and pick Monarch-X Ai.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware. The app keeps only its own design files (styles, icons) on the device; pages, answers and anything signed in are never stored by it.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region) Web-search service for live sources (personal details replaced before any query is sent) Email delivery for sign-in links, invitations and reminders	While the account is open, unless the workspace sets automatic deletion (Pro and Enterprise: 30 days to 2 years). Erased within 7 days of an erasure request. Shared text is handled like Check the news and is not kept.
Voice and speech (microphone and Read aloud) Available · Every plan (the Voice page with a Task Butler on Pro and Enterprise) Speaking a question and hearing answers read aloud, in chat, on the Voice page and the helpdesk. Privacy policy section	Your voice, turned into text by your browser. We receive the text only, never audio. Only while the microphone is on, after you press it. The answer text, turned into speech by your browser. When you ask by voice with spoken replies on, or press Read aloud. Your choices: spoken replies on or off, answer language, and whether you accepted the speech notice. When you set them in Settings.	On this device where your browser can recognise speech on the device. Where it cannot, you are told before the first listen that your browser may send the audio to its maker's speech service, and the microphone stays off unless you agree; Type instead is always offered. Confidential workspaces and Live Assist never use that service. Read aloud uses voices on your device; any other voice is used only after you accept the same notice.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region)	The question text is kept like any typed question (see the web app). No audio is kept or received.
Live Assist (meetings and calls) Enterprise only - off until switched on · Enterprise, with a Live Assist seat A live transcript of a meeting or call you are in, with questions answered from what was said. Off until the workspace admin switches it on, permits you and you switch it on yourself; every session starts with a notice you agree to. Privacy policy section	Meeting speech as text: recognised on your device, or the meeting platform's own transcript that you paste or upload. Audio never leaves your device. Only while a session is live, never while paused or stopped. Questions you ask during the session and the answers, each citing transcript lines. When you ask. A consent record: a fingerprint of the notice you agreed to and when. At the start of every session. Session details: start, pause and stop times, minutes used, and an activity log with no content. Throughout the session.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware. No other processor handles your audio or screen: audio stays on your device, and card numbers, bank account numbers and the terms your workspace chooses are removed before anything is stored. A transcript is not a verbatim record.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region)	Transcripts 30 days by default; the workspace chooses 7, 30, 90, 180 or 365 days. A legal hold placed by the workspace pauses deletion until it is released. Only the person who ran a session sees its content; managers see settings and activity, never transcripts. On a phone or tablet the same rules apply: the microphone is offered only where the browser can recognise speech on the device; otherwise you paste or upload the meeting's own transcript.
Browser extension Available · Every plan (browser tasks with a Task Butler on Pro and Enterprise) A side panel next to the page you are reading: ask about it, check what it claims, and web tasks you approve step by step. It does nothing while its panel is closed. Privacy policy section	The page's address without anything after the question mark, its title and up to 6,000 characters of its readable text. Never what you typed into forms. Only when you press Ask. Only the text you selected, or the page text if you choose to check the whole page. Only when you press Check. The labels of the page's fields, buttons and links. Password, card, security-code, bank and identity-number fields are never read. Only when you plan or run a task you approve. A connection record: a device label, the network's first three address parts, when it was connected and last used, and key fingerprints. The one-time code's fingerprint lasts 10 minutes. When you connect it.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware. The extension keeps a 15-minute access key in the browser's memory and a renewal key (up to 30 days) in its storage on your computer.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region) Web-search service for live sources (personal details replaced before any query is sent)	Not kept: used to produce the answer, then discarded. The answer record keeps a fingerprint, not the words. Connection records until you end the connection; confirmed task steps with your other approvals; saved routines and shortlists until you delete them. All erased with the account.
Word and LibreOffice add-in Available · Every plan (uses your API key) Ask about selected text in a document and insert the answer. Installed by you, not from a store.	The text you selected and your instruction. Only when you press Ask. Your API key, kept by the add-in on your computer; we keep only its fingerprint. When you paste it in.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region)	The question and answer are kept like a question asked through the API.
API and MCP connections Available · Every plan Your own programs and AI tools asking through your account with a key or a connection you approved.	The requests your program or tool sends and the answers. When it sends them. Keys and connection tokens: fingerprints only, never the key itself; shown once when created. When you create or approve them.	Our cloud hosting in the United Kingdom (London region). Each workspace's data is kept apart from every other workspace's by the software; it is not on separate hardware.	Cloud hosting and managed database (United Kingdom, London) AI model services that produce answers (same London region) Web-search service for live sources (personal details replaced before any query is sent)	While the account is open, unless the workspace sets automatic deletion (Pro and Enterprise: 30 days to 2 years). Erased within 7 days of an erasure request. Keys and connections until you revoke them or they expire.

Permissions and why each is needed

Surface	Permission	When it is asked	Why
Web app (monarchxai.com)	Microphone	Browser prompt, only after you press a button	Only if you press a microphone button, to turn your speech into text. See Voice and speech.
Web app (monarchxai.com)	Notifications	Browser prompt, only after you press a button	Only if you switch reminders on; a reminder carries a count, not your content.
Installed web app (computer or phone)	Notifications	Browser prompt, only after you press a button	Only if you switch reminders on; a reminder carries a count, not your content.
Voice and speech (microphone and Read aloud)	Microphone	Browser prompt, only after you press a button	Asked by your browser only after you press a microphone button.
Live Assist (meetings and calls)	Microphone	Browser prompt, only after you press a button	Asked by your browser only when you start a session and press the microphone, after the session notice.
Browser extension	sidePanel Chrome Web Store, Edge Add-ons	Asked at install	The whole extension is a side panel next to the page: questions, answers, plans and the Stop button live there.
Browser extension	activeTab Chrome Web Store, Edge Add-ons, Firefox Add-ons	Asked at install	Access to the page you are on only when you open the extension on it, so it can read that page when you press Ask or Check. No page is read otherwise.
Browser extension	scripting Chrome Web Store, Edge Add-ons, Firefox Add-ons	Asked at install	Adds the extension's own page script to that tab at the moment you press a button (read the text, list form labels, fill a field you approved). Nothing runs on pages by itself.
Browser extension	storage Chrome Web Store, Edge Add-ons, Firefox Add-ons	Asked at install	Keeps the connection to your account (a short-lived access key and a renewal key) and passes a right-click request to the panel.
Browser extension	contextMenus Chrome Web Store, Edge Add-ons, Firefox Add-ons	Asked at install	Adds 'Check this' and 'Ask about this page' to the right-click menu.
Browser extension	https://monarchxai.com/* Chrome Web Store, Edge Add-ons, Firefox Add-ons	Site access at install	The only server the extension talks to: your account's own service.
Browser extension	https://*/* Chrome Web Store, Edge Add-ons, Firefox Add-ons	Site access asked per site, never at install	Never granted at install. Asked per site only when a task you approve opens another site, so the approved steps can continue there.
Browser extension	http://*/* Chrome Web Store, Edge Add-ons, Firefox Add-ons	Site access asked per site, never at install	As above, for the few sites without a secure address.
Word and LibreOffice add-in	ReadWriteDocument	Asked when the add-in is added	Reads the selection you ask about and inserts or replaces text only when you press Insert or Replace.

Named processors are listed in our data processing agreement, released to organisations that sign it.