Privacy policy.

Who we are

monoboard.ai is operated by MONOBOARD Construction LLC, a Georgia limited liability company based in metro Atlanta. References to "monoboard," "we," "us," or "our" mean MONOBOARD Construction LLC and its monoboard.ai division.

This policy covers the marketing website at monoboard.ai and the product application offered to early-access participants. If we ever change which entity controls the data, we'll say so here — not in a footer disclosure.

What we collect

From the marketing site

• Waitlist submissions. When you fill out the early-access form we collect: your name, email address, the role you selected (homeowner / contractor / designer / other), and the optional project description you provided.
• A hashed IP address. Your IP is salted and SHA-256 hashed before storage, truncated to 16 characters. We never store raw IPs.
• Your browser's user agent string (e.g. "Mozilla/5.0…"). Used for spam detection and to keep the site working across browsers.
• Privacy-friendly analytics via Plausible. Plausible does not use cookies and does not collect personal data. We see aggregate page views, referrers, and country-level location — not individual visitors.

From the product (early access)

• Account information. Name, email, role on the project, phone number if you provide one.
• Project data. Budgets, scope documents, change orders, photos, spec sheets, schedules, messages, and decisions you and your project team enter or upload.
• Integration data. If you connect QuickBooks or other tools, we read the budget and accounting data needed to keep the project workspace in sync. We never read anything outside the project you've authorized.
• Operational logs. Authentication events, error reports, and audit-trail records of who did what when. These exist so disputes can be resolved with facts.

What we don't collect

• Social media profiles or activity outside our site.
• Location data beyond country-level analytics.
• Biometric data.
• Data from anyone who isn't a participant on a project that uses monoboard.

How we use it

• To respond to your early-access request and run the project workspace you signed up for.
• To run AI features that draft change orders, flag budget drift, and watch schedule risk. See AI handling for the rules these systems run under.
• To send transactional emails (confirmations, approval requests, weekly summaries).
• To improve the product based on aggregate usage patterns and direct cohort feedback.
• To meet our legal, accounting, and contractual obligations.

We do not sell your data. We do not rent your data. We do not share your data with advertisers. We do not let third parties train AI models on your data.

Where it lives

Your data is stored in Microsoft Azure, US East region. Encrypted at rest with Azure-managed keys (AES-256). Encrypted in transit with TLS 1.2 or higher. Database is Azure Cosmos DB with row-level partitioning by project.

Backups are encrypted, retained for thirty days, and stored in the same region. We do not replicate data outside the United States.

Third parties we use

We name every external service that touches your data.

• Microsoft Azure — hosting, database, file storage, application insights. Data processor under Microsoft's standard data protection terms.
• Resend — transactional email delivery. Receives your email address and the body of any email we send you. Does not have access to other project data.
• Plausible Analytics — aggregate, cookie-free site analytics. Does not see personal data.
• QuickBooks (optional) — only if you connect it. Read access to the accounts you authorize. We don't write to QuickBooks without your explicit per-action approval.
• OpenAI and/or Anthropic — large-language-model providers used by our AI features (change-order drafting, risk flagging, summarization). Subject to the contractual no-training terms documented in our AI handling section.

AI handling

AI features on monoboard run under a published Agent Governance Constitution. The Constitution is the binding rulebook for what the AI can do, what it must not do, and how every automated decision is logged for audit.

• Drafts, not actions. AI proposes change orders, flags, and summaries. It does not send emails, sign contracts, release payments, or modify your budget without an explicit human approval recorded in the audit log.
• No training on your data. We contract with our LLM providers under zero-data-retention terms. Your project data is not used to train models — ours or theirs.
• Every flag is auditable. When the AI raises a drift alert or drafts a change order, you can see exactly which inputs it used and which rule it ran under.
• You can turn it off. Workspace owners can disable individual AI watchers at any time without affecting the rest of the product.

The Agent Governance Constitution will be published at monoboard.ai/governance ahead of general availability. Early-access participants can request a copy now by emailing hello@monoboard.ai.

How long we keep it

• Waitlist submissions: two years, or until you ask us to delete them.
• Active project data: for as long as the project workspace is active, plus seven years of read-only archive after closeout — to meet construction-record retention norms. You can shorten this on request.
• Operational logs: ninety days, then aggregated and the raw rows are deleted.
• Backups: rolling thirty-day window.

Your rights

You can, at any time:

• Access a copy of the data we hold about you.
• Correct anything that's wrong.
• Export your project data in a portable format (CSV, JSON, PDF).
• Delete your account and your data, subject to legal retention obligations.
• Object to specific uses of your data.
• Withdraw consent for any optional processing.

To exercise any of these rights, email privacy@monoboard.ai. We respond within seven days. California residents have additional rights under the CCPA; EU/UK residents under the GDPR. Email the same address to invoke those.

Cookies & tracking

The marketing site does not use cookies, fingerprinting, or third-party trackers. Plausible analytics is cookie-free by design.

The product application uses a single first-party session cookie to keep you logged in. It is HttpOnly, Secure, and SameSite=Strict. No advertising cookies. No cross-site tracking.

Children's data

monoboard.ai is not directed at anyone under 18 and we do not knowingly collect data from minors. If you believe we have, email privacy@monoboard.ai and we'll delete it.

Changes to this policy

If we change this policy materially, we update the "Last updated" date at the top and email active users. Past versions are kept in our public archive at monoboard.ai/privacy/archive so you can see what changed and when.

Contact

Privacy questions: privacy@monoboard.ai
General contact: hello@monoboard.ai
Mail: MONOBOARD Construction LLC, Atlanta, GA (street address provided on request)