Privacy Policy for Montro

Scope of the Policy

This Privacy Policy applies to:

• Clients: Organizations that subscribe to Montro’s services to manage their SaaS applications.
• Users: Individual employees or representatives within those client organizations who interact with the platform.
• Website Visitors and Prospects: Individuals visiting our website, subscribing to updates, or engaging with our marketing communications.

This policy covers all data collection and processing activities related to Montro’s platform, website, and integrations.

Data Collection

We collect data to provide, enhance, and optimize Montro’s services. Below, we outline the types of data we collect and how it is categorized. Please note that this data set may not be comprehensive as it is indicative of the type of information we collect as we continuously evolve and add more features and it continuously evolves.

1. Account Data (Clients)

• Organization name, industry, and size.
• Billing and subscription details, including plan type, payment preferences, and renewal dates.
• Account owner’s name, email address, and contact details.

2. User Data (Employees/Representatives of Clients)

• Name, email address, and role (e.g., Admin, Application Owner).
• Usage data, including login timestamps, accessed features, and activity logs.
• Assigned applications, licenses, and permissions.

3. Website Visitor Data

• Contact details provided through forms (e.g., demo requests, newsletter sign-ups).
• Browsing data collected via cookies and similar technologies, such as IP addresses, device type, and browser information.

4. Application Data

• Data gathered from integrated SaaS applications, such as:
  • Application names, licenses, and contract details.
  • Usage metrics, spending data, and access levels.
  • Compliance-related information such as GDPR readiness or carbon footprint data.

How We Use Your Data

We use the data collected to deliver and improve our services, ensure secure operations, and support your organization’s SaaS management needs.

1. Delivering Services

• Authenticate users and provide secure access to the platform.
• Facilitate integration with SaaS applications for real-time insights into usage, spending, and compliance.

2. Enhancing User Experience

• Personalize dashboards, recommendations, and reports.
• Analyze aggregated data to improve platform performance and add new features.

3. Communication

• Send account updates, usage notifications, and renewal reminders.
• Share promotional content or service updates if you’ve opted in.

4. Ensuring Security

• Detects and prevents unauthorized access, data breaches, and fraudulent activities.
• Protect sensitive information through encryption and secure authentication mechanisms.

5. Compliance and Reporting

• Assist clients in meeting regulatory and contractual obligations.
• Provide detailed reports on SaaS spending, license utilization, and compliance metrics.

Data Sharing

We share your data only when necessary to deliver our services, comply with legal obligations, or support essential business operations.

1. Service Providers

We work with trusted third-party providers for:

• Hosting and infrastructure (e.g., cloud storage).
• Analytics and reporting and other essential saas services.
• Email distribution and customer support.

These providers process data on our behalf under strict confidentiality agreements.

2. Stripe for Payment Processing

We use Stripe for subscription and payment management. Data shared includes:

• Billing details, subscription plan, and payment history.

Stripe handles this data under its own privacy policies and security measures.

3. Internal Sharing within Client Organizations

• Account administrators may access data about their organization, such as spending, licenses, and compliance metrics.
• Authorized users can view data relevant to their assigned roles and permissions.

4. Legal Compliance

We may disclose data to:

• Fulfill legal or regulatory obligations.
• Respond to lawful requests from authorities or court orders.

5. Business Transfers

In the event of a merger, acquisition, or sale, data may be transferred to involved parties. We will notify affected users before any significant changes.

6. Aggregated or Anonymized Data

We may share anonymized data for research, analytics, or marketing purposes. This data does not identify individuals or organizations.

Data Retention

We retain data only as long as necessary for the purposes outlined in this policy or to meet legal obligations.

1. Account and User Data

• Active accounts: Data is retained while your account is active and you are using Montro.Fulfill legal or regulatory obligations.
• Inactive accounts: Data is retained for a reasonable period to allow reactivation or meet regulatory requirements.

2. Customer Data from Integrations

• Data is retained as per the client’s instructions or for the duration of the service agreement.
• Upon termination, data is securely deleted, anonymized, or returned to the client.

3. Website Visitor Data

• Retention depends on the type of data collected (e.g., cookies, analytics).

4. Secure Deletion

When data is no longer needed, we securely delete or anonymize it using industry-standard practices.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience, gather insights, and improve our services.

1. Types of Cookies

• Essential Cookies: Necessary for website functionality and platform access.
• Analytics Cookies: Help us understand user behavior and improve features.
• Marketing Cookies: Used for personalized ads and campaign tracking.

2. Managing Cookies

You can control cookies through browser settings or opt-out mechanisms provided on our website.

Data Security

We implement robust security measures to protect your data, including:

• Encryption: Data is encrypted during transit and at rest.
• Access Controls: Role-based access ensures only authorized personnel can access sensitive information.
• Monitoring: Systems are continuously monitored for potential threats.

While no system is entirely secure, we regularly review and update our security practices to minimize risks.

Your Data Rights

You have rights regarding your personal data, including:

• Access: Request a copy of the data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request the removal of your data under certain conditions.
• Withdraw Consent: Revoke consent for marketing communications.

To exercise your rights, contact us at hello@Montro.io

Policy Updates

We may update this policy periodically to reflect changes in our services or practices. Updates will be communicated via email or on our website.

Contact Information

If you have questions about this Privacy Policy, please contact us at:

• Montro.io (Outproduct Limited)
• Address: 51 Bracken Road, Sandyford, Dublin, Ireland
• Email: hello@Montro.io