Privacy Policy

1. Introduction

Welcome to Monstera Cloud ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us.

When you visit our website and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it.

2. Information We Collect

We collect personal information that you voluntarily provide to us when registering at the Services, expressing an interest in obtaining information about us or our products and services, when participating in activities on the Services or otherwise contacting us.

• Personal Information: Includes your name, email address, passwords, and similar contact data.
• Payment Data: We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by our payment processor, Paddle (Paddle.com Market Limited), who acts as Merchant of Record. We do not store card details on our servers.
• Social Media Login Data: We may provide you with the option to register or sign in using your Google account.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• To facilitate account creation and logon process.
• To manage user accounts.
• To fulfill and manage your orders, payments, returns, and exchanges made through the Services.
• To send administrative information to you.
• To protect our Services (e.g., fraud monitoring and prevention).

4. Google Sheets™ Add-on & Google User Data

The Monstera Cloud Google Sheets™ Add-on requests limited access to your Google account. This section describes exactly what data we access, why, and how it is handled.

4.1 What Google data we access

• Google Account Email: Used solely to identify your Monstera Cloud account and verify your subscription plan. We do not store your Google OAuth token.
• Current Spreadsheet: The Add-on writes advertising data to cells in the active spreadsheet that you specify. It does not read, scan, or access any other data in your spreadsheet or any other spreadsheets in your Google Drive.

4.2 How we use Google user data

• Your email address is sent to our server to look up your account and check your subscription status. This is a transient lookup — we do not create a copy or log of your Google identity token.
• Advertising data (e.g., from TikTok Ads) that you request is passed through our server and written directly to your spreadsheet. We do not permanently store this advertising data.
• Query configurations (which dimensions, metrics, and date range you selected) are saved locally within your Google Sheets™ spreadsheet properties so that you can refresh the query later. This data never leaves your spreadsheet.

4.3 What we do NOT do

• We do not sell, share, or transfer your Google user data to any third parties.
• We do not use your Google user data for advertising, profiling, or analytics purposes.
• We do not store your Google OAuth credentials on our servers.
• We do not access or read any existing content in your spreadsheets.

4.4 Google API Services Limited Use Disclosure

Monstera Cloud's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations. We may process or share your data that we hold based on the following legal basis:

• Consent: We may process your data if you have given us specific consent to use your personal information.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
• Legal Obligations: We may disclose your information where we are legally required to do so.

6. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

• Account data (name, email, subscription status) is retained for the lifetime of your account. You may request deletion at any time by contacting us.
• Third-party connection tokens (e.g., TikTok access tokens) are stored encrypted and are deleted when you disconnect the integration or delete your account.
• Google user data is not permanently stored. Google OAuth tokens are used transiently for request verification only.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data and account.
• Withdraw consent for data processing at any time.
• Revoke the Google Sheets™ Add-on permissions at any time via your Google Account permissions page.

8. Contact Us

If you have questions or comments about this policy, you may email us at privacy@monsteracloud.com.