{ "schemaVersion": 2, "source": "seed:site-repo/privacy@2026-07-16", "readPosture": "published_read_model", "contentRef": "content:mnstry-site/privacy", "tenantRef": "mnstry", "tenantSlug": "mnstry", "pageRef": "page:mnstry-site/privacy", "slug": "privacy", "title": "Privacy policy", "summary": "MNSTRY (\"we,\" \"us,\" or \"our\") is committed to protecting your privacy. Last updated: December 25, 2025. This policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.", "lifecycle": { "state": "published", "versionRef": "site-repo:privacy/v1", "versionNumber": 1, "createdAt": "2026-07-16T12:00:00Z", "updatedAt": "2026-07-16T12:00:00Z", "publishedAt": "2026-07-16T12:00:00Z" }, "tenant": { "tenantRef": "mnstry", "slug": "mnstry", "displayName": "MNSTRY", "practitionerName": "Erik Desrosiers", "publicDescription": "White-label agentic infrastructure for professional practice.", "publicDomain": "mnstry.ai" }, "practitioner": { "name": "Erik Desrosiers", "bio": "Founder of MNSTRY. A technologist who spent two decades building and exiting ventures before turning to the world of personal development, where he found practitioners doing transformation work with transactional tools.", "credentials": [ "Founder, MNSTRY", "Two decades building and exiting technology ventures" ], "disclosure": "MNSTRY is a technology platform. Erik Desrosiers is its founder, not a practitioner providing services through it. All professional services on MNSTRY-powered platforms are delivered by independent practitioners." }, "sections": [ { "sectionRef": "section:privacy/hero", "kind": "hero", "eyebrow": "Legal", "title": "Privacy policy", "summary": "Last updated: December 25, 2025. MNSTRY is a platform as a service (PaaS) provider that enables practitioners to configure, deploy, and manage client engagement systems. We act as technical infrastructure; all client care is the responsibility of the designated practitioner. This policy explains how we collect, use, disclose, and safeguard your information.", "blocks": [] }, { "sectionRef": "section:privacy/body", "kind": "legal", "title": "Privacy policy", "blocks": [ { "blockRef": "block:privacy/h1", "kind": "heading", "text": "Information we collect" }, { "blockRef": "block:privacy/t1a", "kind": "text", "text": "Information you provide directly. When you request access to our platform or create an account, we may collect:" }, { "blockRef": "block:privacy/l1b", "kind": "bullet_list", "items": [ "Name and contact information (email address)", "Professional background and practice details", "Account credentials", "Content you create, including session notes, journal entries, and knowledge base materials", "Communications with us, including support requests and feedback" ] }, { "blockRef": "block:privacy/t1c", "kind": "text", "text": "Voice and audio data. Our platform includes optional voice input features that allow you to dictate text. When you use voice input:" }, { "blockRef": "block:privacy/l1d", "kind": "bullet_list", "items": [ "Audio recordings are sent to our transcription service provider (OpenAI Whisper) for conversion to text", "Audio data is processed in real-time and is not stored after transcription is complete", "The resulting text is returned to you and may be saved as part of your content, subject to your privacy settings", "We do not retain audio recordings or use them for any purpose other than transcription" ] }, { "blockRef": "block:privacy/t1e", "kind": "text", "text": "Automatically collected information. When you use our platform, we may automatically collect device information (browser type, operating system, device identifiers), usage data (features accessed, time spent, interaction patterns), and log data (IP address, access times, error reports)." }, { "blockRef": "block:privacy/h2", "kind": "heading", "text": "How we use your information" }, { "blockRef": "block:privacy/l2a", "kind": "bullet_list", "items": [ "Provide, maintain, and improve our platform and services", "Process and respond to your access requests and inquiries", "Authenticate your identity and manage your account", "Enable agentic workflows and AI-powered features you configure", "Send administrative communications about the platform", "Ensure security and prevent fraud", "Comply with legal obligations" ] }, { "blockRef": "block:privacy/h3", "kind": "heading", "text": "AI and machine learning" }, { "blockRef": "block:privacy/t3a", "kind": "text", "text": "We do not train AI models on your data. Your content, session recordings, journal entries, and other personal information are never used to train or improve AI models, whether by MNSTRY or our AI service providers." }, { "blockRef": "block:privacy/t3b", "kind": "text", "text": "Privacy-preserving processing. When your content is processed by cloud-based AI services, we employ privacy-preserving techniques including content morphing to replace identifying information with plausible alternatives, stylometric sanitization to prevent re-identification through writing patterns, and request batching and aggregation to prevent identity correlation." }, { "blockRef": "block:privacy/t3c", "kind": "text", "text": "Privacy tiers. The platform supports multiple privacy tiers that you can select on a per-interaction basis:" }, { "blockRef": "block:privacy/l3d", "kind": "bullet_list", "items": [ "Standard tier: cloud processing with privacy-preserving techniques", "Confidential tier: processing on MNSTRY-controlled infrastructure", "Secret tier: on-device processing only, with zero cloud exposure" ] }, { "blockRef": "block:privacy/h4", "kind": "heading", "text": "Data ownership and sovereignty" }, { "blockRef": "block:privacy/l4a", "kind": "bullet_list", "items": [ "Practitioners own their proprietary frameworks, methodologies, and knowledge base content", "Clients own all personal data they generate, including journal entries, session notes, and engagement records", "MNSTRY acts strictly as technical infrastructure and does not claim ownership of user content", "We enforce security at the database level to ensure structural isolation", "Data is only ever accessed or shared based on explicit, granular consent from its owner" ] }, { "blockRef": "block:privacy/h5", "kind": "heading", "text": "Third-party services" }, { "blockRef": "block:privacy/t5a", "kind": "text", "text": "We work with trusted third-party service providers to operate our platform: Supabase (database hosting and authentication), Vercel (web application hosting and deployment), OpenAI (voice transcription and language model services; we require zero-data-retention agreements with AI providers where available), and Resend (transactional email delivery). We carefully select service providers that maintain appropriate security measures and only share the minimum information necessary for them to perform their services." }, { "blockRef": "block:privacy/h6", "kind": "heading", "text": "Data security" }, { "blockRef": "block:privacy/l6a", "kind": "bullet_list", "items": [ "Encryption in transit using TLS/SSL", "Encryption at rest for stored data", "Row-level security (RLS) ensuring data isolation between users", "Regular security audits and vulnerability assessments", "Access controls limiting data access to authorized personnel", "Client-side encryption options for sensitive content" ] }, { "blockRef": "block:privacy/t6b", "kind": "text", "text": "While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections." }, { "blockRef": "block:privacy/h7", "kind": "heading", "text": "Data retention" }, { "blockRef": "block:privacy/l7a", "kind": "bullet_list", "items": [ "Account information is retained while your account is active", "Content you create is retained until you delete it or close your account", "Access request submissions are retained via email for processing purposes", "Voice recordings are not retained after transcription is complete", "Log data is retained for security and debugging purposes, typically for 90 days" ] }, { "blockRef": "block:privacy/t7b", "kind": "text", "text": "When you delete content or close your account, we will delete or anonymize your information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes." }, { "blockRef": "block:privacy/h8", "kind": "heading", "text": "Your rights" }, { "blockRef": "block:privacy/t8a", "kind": "text", "text": "Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@mnstry.ai. We will respond within the timeframe required by applicable law." }, { "blockRef": "block:privacy/h9", "kind": "heading", "text": "Cookies and tracking" }, { "blockRef": "block:privacy/t9a", "kind": "text", "text": "We use cookies and similar technologies to maintain your session and authentication state, remember your preferences, and understand how you use our platform. We do not use cookies for advertising purposes or share cookie data with advertising networks. You can manage cookie preferences through your browser settings." }, { "blockRef": "block:privacy/h10", "kind": "heading", "text": "International data transfers" }, { "blockRef": "block:privacy/t10a", "kind": "text", "text": "Your information may be transferred to and processed in countries other than your country of residence. We take appropriate safeguards including standard contractual clauses, data processing agreements with all service providers, and compliance with applicable data protection frameworks." }, { "blockRef": "block:privacy/h11", "kind": "heading", "text": "Children's privacy" }, { "blockRef": "block:privacy/t11a", "kind": "text", "text": "Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at privacy@mnstry.ai and we will take steps to delete such information." }, { "blockRef": "block:privacy/h12", "kind": "heading", "text": "Healthcare disclaimer" }, { "blockRef": "block:privacy/t12a", "kind": "text", "text": "MNSTRY is a technology platform and does not provide medical, therapeutic, or mental health services. All client care is the responsibility of the designated practitioner using our platform. Practitioners using MNSTRY for healthcare-related purposes are responsible for their own compliance with applicable healthcare regulations, including HIPAA in the United States." }, { "blockRef": "block:privacy/h13", "kind": "heading", "text": "Changes to this policy" }, { "blockRef": "block:privacy/t13a", "kind": "text", "text": "We may update this privacy policy from time to time. When we make material changes, we will update the \"Last updated\" date, notify you through the platform or via email for significant changes, and provide you with an opportunity to review the changes before they take effect." }, { "blockRef": "block:privacy/h14", "kind": "heading", "text": "Contact us" }, { "blockRef": "block:privacy/t14a", "kind": "text", "text": "Email: privacy@mnstry.ai. Mailing address: Merkaba Group L.L.C., P.O. Box 35512, Dallas, TX 75235, United States." } ] } ], "disclosures": [ { "disclosureRef": "disclosure:paas", "title": "Platform, not practitioner", "body": "MNSTRY is a platform as a service (PaaS) provider enabling practitioners to configure, deploy, and manage proprietary client engagement systems. MNSTRY does not provide medical, therapeutic, or spiritual services. All client care is the responsibility of the designated practitioner." } ], "offerRefs": [], "mediaRefs": [], "forms": [], "seo": { "title": "MNSTRY | Privacy policy", "description": "MNSTRY (\"we,\" \"us,\" or \"our\") is committed to protecting your privacy. Last updated: December 25, 2025. This policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.", "canonicalPath": "/privacy" }, "attribution": { "tenantRef": "mnstry", "pageRef": "page:mnstry-site/privacy" }, "agentMetadata": { "manifestRef": "site-repo:manifest", "llmsPath": "/llms.txt", "jsonApiPath": "/content/privacy.json", "pagePath": "/privacy" } }