01. Controller

The Monthly team is responsible for personal data processed through https://app.monthly.com.ar and https://monthly.com.ar. Contact: hola@monthly.com.ar.

Argentina's Personal Data Protection Law No. 25,326 applies. The GDPR, UK GDPR and US state privacy laws apply only where their territorial requirements are met.

02. Data we collect

Information you provide

Financial planning data, including income, expenses, investments, assets and debt.
Email, profile name and authentication identifiers. Clerk manages credentials; Monthly does not receive your password in plain text.
Support communications and optional notification preferences.

Technical and usage data

This may include IP address, browser, operating system, language, screen size, visited pages, feature events and session duration.

Optional WhatsApp data

If you link WhatsApp, we process the WhatsApp identifier and masked phone digits, display name, saved language, messages, menu replies and delivery identifiers. A receipt image is processed only when you send one and the function is available.

The original webhook body is signature-checked and not stored. A bounded normalised event is retained. The WhatsApp identifier is encrypted with AES-256-GCM and separately HMAC-hashed for lookup. One-time codes are HMAC-hashed and expire after 15 minutes.

03. Purposes and legal bases

We process data to provide the monthly plan, authenticate and protect accounts, operate optional notifications and WhatsApp, respond to support, maintain and improve the service, and comply with law. Depending on the jurisdiction and function, the legal basis is contract performance, consent, legitimate interests or legal obligation.

Local receipt reading on WhatsApp requires explicit permission. You can withdraw it in Settings without losing deterministic text commands and menus.

04. How we use data

Monthly calculates your plan, presents relevant history, performs the action you request and protects the account against abuse or duplicate updates.

On WhatsApp, deterministic rules interpret text and local OCR can propose structured receipt data. Monthly validates every proposed write, applies revision checks and records before/after checksums. Receipts always require confirmation; only high-confidence text rules you explicitly enable in Smart mode may apply automatically. Interaction telemetry excludes free text, amounts, merchant names, phone identifiers and images.

We do not sell personal or financial data, use financial data for advertising or build commercial profiles from it.

05. Service providers

Vercel: hosting, server execution and the environment where local receipt OCR runs. Privacy policy.
Supabase: database, backups and operational records.
Clerk: authentication, identity linking and account recovery. Privacy policy.
Google: Google sign-in, Analytics, Tag Manager and the general in-app Gemini assistant where enabled; Gemini does not receive WhatsApp content.
Microsoft: optional Clarity usage analytics.
WhatsApp / Meta: delivery of optional WhatsApp messages and media. Privacy policies.

AI and the local WhatsApp boundary

The general in-app assistant uses Google Gemini when you choose that feature. Google states that unpaid Gemini services may use inputs and outputs to improve products and may involve human review. Do not submit passwords, card numbers, bank credentials, identity documents or unnecessary personal information. Read the Gemini API terms.

WhatsApp remains isolated from Gemini. Text is interpreted with deterministic rules inside Monthly. With permission, receipts are downloaded from Meta and read by an open-source OCR engine inside Monthly's server process. WhatsApp text and images are not sent to an AI provider, used to train models or added to a dataset. Extraction only produces a proposal; Monthly validates it and always requires confirmation for receipt-derived changes. Only high-confidence text rules you explicitly enable in Smart mode may apply automatically.

AI connectors (MCP)

AI connectors are optional and only work when you enable them in the app (Settings → Connect with AI). If you connect a third-party assistant such as Claude, ChatGPT, Gemini, Cursor, VS Code, GitHub Copilot or Windsurf, that assistant can read your budget data and, when you ask it to, change it. This data is shared with the AI provider you choose and is governed by that provider’s own terms and privacy policy, which Monthly does not control.

Monthly stores only a hash of the connection token, never the token itself, and you can revoke it at any time from the app. Every change an assistant makes is audited and can be undone. If you connect no assistant, nothing is shared.

06. Cookies and local storage

Essential authentication cookies keep you signed in. Local storage remembers choices such as light/dark theme and language. Google Analytics cookies measure aggregate traffic; Microsoft Clarity may set optional analytics cookies when allowed through the consent configuration. You can restrict non-essential cookies in your browser or the available consent controls.

07. Security and retention

Monthly uses HTTPS/TLS, restricted service-role access, encrypted WhatsApp identifiers, hashed one-time codes, payload limits, idempotency controls and revision-based writes. No system can guarantee absolute security.

Core account and wallet data: while the account is active or needed to provide the service, subject to deletion rights and legal obligations.
Normalised WhatsApp inbound events: 7 days.
WhatsApp outbound identifiers: 40 days.
WhatsApp command audit and privacy-minimised interaction records: 90 days.
Receipt files: JPEG/PNG only, up to 5 MB and safe dimensions, downloaded only with permission, held in memory during local OCR and not persisted as a file.

08. Your rights

Depending on your location, you may request access, correction, updating, deletion, restriction, objection or a portable copy, and may withdraw consent for optional processing. Email hola@monthly.com.ar with “Privacy rights” in the subject line.

In Argentina, access requests are answered within 10 calendar days and rectification, updating or deletion requests within 5 business days where Law No. 25,326 applies. You may complain to the Agency for Access to Public Information (AAIP). EEA, UK and eligible US residents may also contact their competent supervisory authority.

09. Children

Monthly is not directed to children under 13. Where local law requires a higher age for independent consent, a parent or guardian must provide valid authorisation. Contact us if you believe a child submitted data without the required permission.

10. International transfers

Vercel, Supabase, Clerk, Google and Meta may process data outside Argentina. We use the contractual transfer mechanisms and safeguards available for the relevant provider and jurisdiction. If an optional function cannot operate under compatible conditions, Monthly blocks or pauses it instead of sending the data.

11. Changes

We may update this Policy as Monthly, its providers or applicable rules change. Material changes will be communicated in the app, on this page or by email when appropriate. The date above identifies the current version.

12. Contact

Privacy questions or requests: hola@monthly.com.ar.