Privacy Policy

1. Who we are

Moneo is provided by [Legal name], a sole proprietor, [Address], North Macedonia. Contact: info@moneo.mk.

For data about our customers (the businesses that use Moneo and their staff) we are the controller. For data that a business enters about its own clients, the business is the controller and we process the data on its behalf.

2. Data we handle

Account data: names, email addresses and roles of the people who use Moneo, the chosen language, and passwords, which we store only in hashed form.

Business data: business name, contact details, type of business, staff, services, working hours and SMS texts.

Client data entered by businesses: names, mobile numbers, SMS language, appointments, expiry dates and reference numbers such as a plate or policy number, and notes.

Messaging data: the text of each SMS, when it was sent, its delivery status and cost.

Billing data: Paddle handles payments. We receive the plan, subscription status, billing country and email, but never your card details.

Technical data: server logs with IP addresses and the cookies described below.

3. Why we use it

To provide the Service under our contract with you: run your account, send SMS and emails, and bill your plan.

For our legitimate interests: keep Moneo secure, prevent abuse, and fix problems.

To meet legal obligations, such as accounting and tax rules.

We do not sell personal data and do not use it for advertising.

4. Providers we use

Paddle (Paddle.com Market Ltd, United Kingdom): our reseller and merchant of record. Handles checkout, payments, invoices and taxes.

GatewayAPI (Denmark) and BulkGate (Czech Republic): send SMS to your clients' phones and report delivery. Mobile networks carry the messages to the recipient.

Resend (United States): sends our emails, such as password resets and usage alerts.

Microsoft Azure: hosts the application and the database in the West Europe region (Netherlands), in the European Union.

Each provider receives only the data it needs for its job and is bound by a data processing agreement.

5. Transfers outside the EU

Our data is stored in the EU. Some providers are based in the United Kingdom or the United States. Such transfers rely on an adequacy decision or on Standard Contractual Clauses approved by the European Commission.

6. How long we keep data

We keep account and business data while the account is open. A business can delete its clients' data at any time.

When an account is closed, we delete its data within 90 days, except billing records that the law requires us to keep for longer.

7. Cookies

Moneo uses only necessary cookies: one that keeps you signed in, and one that remembers your language. We use no advertising or tracking cookies. Paddle's checkout may set its own cookies when you pay.

8. Security

Data is encrypted in transit (HTTPS), passwords are hashed, each business can see only its own data, and access to the systems is limited to the people who run Moneo.

9. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, or to receive it in a portable format. Write to info@moneo.mk.

If you are a client of a business that uses Moneo, please contact that business first; we will help it answer your request. You can also ask the business to stop sending you SMS.

You can complain to the data protection authority in North Macedonia, the Personal Data Protection Agency (azlp.mk).

10. Changes to this policy

We may update this policy and will tell you about important changes by email or in the app.