Privacy Policy

1. Information we collect

• Account and contact information, such as your name, email address, and phone number.
• Payout information, such as bank name, account type, account number, and payment notes.
• Transaction information, including amounts, currencies, references, payment status, and payer details entered on a payment link.
• Technical and usage information, such as device, browser, IP address, pages visited, and interactions with the service.
• Information you provide to support a request, verify a transaction, prevent fraud, or comply with applicable requirements.

2. How we use information

• Create and manage accounts, payment links, transactions, payouts, and withdrawals.
• Process and confirm payments and communicate transaction status.
• Provide support, secure the service, prevent fraud, and resolve disputes.
• Meet legal, accounting, reporting, and compliance obligations.
• Understand and improve service performance and user experience.

3. When information is shared

We share only what is reasonably needed with payment processors, authentication providers, hosting and database services, analytics providers, email services, fraud-prevention providers, and professional advisers that help operate Monly. These providers process information under their own terms and privacy practices.

We may also disclose information when required by law, to protect users or the service, to investigate fraud, or as part of a business reorganization. We do not sell personal information for money.

4. Cookies and analytics

Monly uses necessary browser storage to maintain sessions and preferences. We also use analytics and advertising technologies to understand visits and campaign performance. Browser settings may let you block some technologies, but necessary features may not work correctly without them.

5. Data retention and security

We retain information for as long as needed to provide the service, complete transactions, resolve disputes, prevent fraud, and meet legal or accounting obligations. Retention periods vary by record type and applicable requirements.

We use administrative and technical safeguards designed to protect personal information. No online service can guarantee absolute security, so you should use a strong password and notify us of suspected unauthorized access.

6. Your privacy rights

Under Colombia's data protection law (Law 1581 of 2012 and Decree 1377 of 2013) and other applicable laws, you may know, access, update, and correct your personal information; request proof of your authorization; be informed about how it is used; revoke your authorization or request deletion when there is no legal or contractual duty to keep it; and file complaints with the Superintendence of Industry and Commerce (SIC) after contacting us.

Send requests to monlyexchange@gmail.com. We answer inquiries within 10 business days and claims within 15 business days, extendable as permitted by law. We may need to verify your identity.

7. Authorization and legal basis

By creating an account or submitting a payment, you authorize Monly, as data controller, to process your information for the purposes described here. We also process information when needed to perform our contract with you, comply with legal obligations, or pursue legitimate interests such as fraud prevention.

8. Payment processing by FastSpring

Card checkouts are handled by FastSpring as merchant of record. FastSpring collects payment card and billing data directly and processes it under its own Privacy Policy. Monly receives only the information needed to confirm the payment, such as payer name, email, amount, currency, status, and order reference.

9. Minors

Monly is not intended for people under 18, and we do not knowingly collect their information. If you believe a minor has provided us information, contact us and we will delete it.

10. International transfers and changes

Because Monly and its providers support international payments, information may be transferred to and processed in countries such as the United States and members of the European Union, which may have different data protection levels. We use providers bound by contractual and security commitments. We may update this policy as the service or applicable requirements change and will update the effective date when material revisions are published.