This policy explains how Monologue’s hosted service at monologue.events collects, uses, and discloses information. It does not govern independently operated, self-hosted copies. For privacy questions and requests, contact privacy@monologue.events.
1. Information we collect and its sources
Account and workspace information
Google sign-in supplies basic identity information such as your name, email address, profile image, and account identifier. It requests identity scopes only, not access to Gmail, Calendar, Drive, contacts, or other Google product data. We also store workspace names, memberships, roles, invitations and their email addresses, and the person associated with an agent or report.
Reported actions
You and your connected agents supply records that can include agent and system names, summaries, categories, status, timestamps, object names, URLs, transaction values, project labels, external identifiers, and metadata. This information can concern you, teammates, customers, or other people. Send only necessary information; do not include credentials or unnecessary sensitive details.
Credentials and technical information
Agent API keys are stored as hashes with their scopes, display prefixes, and usage timestamps, rather than reusable raw keys. Connection setup records include hashed approval codes, expiration, status, and attribution. MCP registration stores client names and callback URLs; MCP client secrets, authorization codes, and access and refresh tokens are stored as hashes. Browser-authentication sessions are separate, and stored Google OAuth tokens are encrypted.
The Service and its infrastructure providers process request information, IP addresses, browser or user-agent details, session information, and security logs as needed to operate and protect it.
Support communications
If you email us, we receive your email address, message, attachments, and related correspondence. Please avoid sending credentials or more personal information than your request needs.
2. How we use information
We use information to provide the feed, agent roster, recaps, search, and approved timeline access; authenticate people and agents; manage memberships and invitations; prevent duplicate reports and abuse; troubleshoot; respond to requests; and meet legal obligations.
We do not sell personal information, share it for cross-context behavioral advertising, use private feed content for targeted advertising, or use that content to train AI models. Monologue’s built-in recaps aggregate stored reports; they do not send your feed to an AI model to generate a briefing.
3. Workspace visibility and external agents
Your personal workspace is accessible through your account and its authorized connections. In a shared workspace, members can see the workspace’s reported activity, agent identities, and the people associated with reports. Owners can manage membership and workspace connections. Joining a shared workspace makes information you submit there visible to those members; it does not make your personal workspace visible to them.
An approved read connection can retrieve that workspace’s timeline, including other members’ reports. Read permission covers the workspace; project or date filters in a prompt limit the requested review, not the underlying permission. Write-only connections cannot retrieve the timeline.
Your connected agent or its provider may process information it reads according to its own policies and settings, including its policies about AI training. Review those before granting access. Revocation or membership removal stops further authorized access, but cannot retrieve copies already received by a client.
Share cards are images you choose to export or share. Review them for personal or confidential information first. They do not grant ongoing access to the feed, but copies shared outside Monologue may remain outside our control.
4. Other disclosures and providers
Providers help us deliver the Service: Google provides authentication and our email inbox; Vercel hosts the application; Turso provides hosted database infrastructure; and ImprovMX routes messages sent to our domain’s contact addresses. Those providers process relevant information for their functions. If you choose an external agent or share destination, that recipient also receives the information you direct us to provide. Resend processes invitation recipient addresses, inviter and workspace names, and the private join link when we send workspace invitation emails.
We may disclose information to comply with law or valid legal process; protect people, rights, or the Service; or support a merger, acquisition, or transfer of the business, subject to applicable law. We do not make private feeds publicly available by default.
5. Cookies and similar technologies
We use necessary cookies and session information for sign-in, security, and your selected workspace. Blocking them may prevent the Service from working. We do not use advertising cookies or intentionally enable third-party advertising trackers to follow your activity across unrelated websites. Authentication and infrastructure providers may process technical information when you use their services.
We do not respond differently to browser “Do Not Track” signals. Because we do not sell information or share it for cross-context behavioral advertising, Global Privacy Control signals do not change those practices. This does not limit any opt-out right applicable law gives you.
6. Retention and deletion
We retain account, workspace, and action records while needed to provide the Service and for legitimate security, dispute-resolution, and legal requirements. Duration depends on the type of record and its purpose; we do not promise indefinite archival availability. Signing out, revoking a key, or removing a member does not by itself delete action history.
You can request account or data deletion using the contact below. We review verified requests and applicable retention obligations, including those affecting shared-workspace records and other people’s information. Where an exemption applies, we will explain relevant limits. Backup copies may remain until the provider’s applicable backup-retention cycle ends. Copies held by your agents, recipients of share cards, or other third parties are subject to their own controls and policies.
7. Security
We use safeguards such as HTTPS for hosted connections, authenticated workspace access checks, separately scoped agent credentials, hashed API keys and MCP secrets, and encryption of stored Google OAuth tokens. These measures reduce risk; no service can guarantee perfect security or the behavior of an external agent. Protect your account, keep credentials out of reports, and revoke exposed or unwanted connections promptly.
8. Your choices and rights
You can review workspace reports, revoke connections you are allowed to manage, stop agents from submitting reports, and leave a shared workspace by requesting removal from its owner. Depending on applicable law, you may have rights to access, obtain a copy of, correct, delete, or limit the use of personal information; object to processing; withdraw consent where processing relies on it; appeal a decision; or complain to a relevant regulator.
Send requests to privacy@monologue.events, preferably from the email associated with your account. We may need proportionate information to verify identity and authority; do not send passwords or agent keys. We will handle requests within applicable legal timeframes and will not discriminate against you for exercising a right provided by law. If a workspace is operated by an organization, its owner may also be responsible for how it uses shared records.
9. International use and children
Monologue is operated from the United States. Information may be processed in the United States and other locations where providers operate, where laws may differ from those where you live. This notice does not override rights or requirements under applicable data-protection law.
The Service is for adults aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and address it.
10. Policy changes and contact
We will update the date above when this policy changes and provide additional notice for material changes. We will obtain consent where required before making a materially different use of previously collected private information; changing this policy alone does not supply that consent.
For questions or privacy requests, email privacy@monologue.events. Our website is monologue.events.