Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how MONTHLEE SAS (“Monthlee,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our English-language website, business relationships, and services. It also explains choices and rights that may be available to you.

1. Who is responsible for your information?

Monthlee is generally the controller of personal information used for its marketing website, merchant relationships, support, security, analytics, and its own marketing. When Monthlee processes subscriber, order, or end-customer information solely on behalf of a merchant, the merchant is the controller and Monthlee acts as its service provider or processor.

2. Information we collect

• Contact and identity information, such as name, business email, telephone number, company, role, and account identifiers.
• Business and account information, including merchant profile, subscription-site settings, service selections, and contract details.
• Transaction and subscription information, such as order status, plan, delivery information, and payment status. Payment-card details are handled by payment providers such as Stripe; Monthlee does not intend to store full card numbers.
• Device and usage information, including IP address, browser, device, pages viewed, referral source, advertising identifiers, and interactions with our website or messages.
• Communications, including meeting requests, support messages, feedback, and marketing preferences.

3. Where information comes from

We collect information directly from you, automatically from your browser or device, from merchants that use our services, and from service providers, referral partners, and publicly available professional sources where lawful.

4. How we use information

• Provide, configure, maintain, and secure our website and services.
• Manage merchant accounts, contracts, subscriptions, billing, support, and business communications.
• Process orders and subscriptions on a merchant’s instructions.
• Prevent fraud, misuse, and security incidents.
• Understand website performance, improve our services, and measure marketing and attribution.
• Send service messages and, where permitted, marketing communications; you can opt out of marketing at any time.
• Comply with legal obligations and establish, exercise, or defend legal claims.

5. Legal bases for EEA and UK visitors

Where European data-protection law applies, we rely on performance of a contract, steps requested before a contract, compliance with legal obligations, our legitimate interests (including operating, securing, improving, and promoting our business), and consent where required. You may withdraw consent at any time without affecting earlier lawful processing.

6. Service providers and disclosures

Depending on how you interact with Monthlee, providers may include Webflow for the marketing site; Google Analytics, Google Tag Manager, and Google Ads; Microsoft Clarity; Brevo for communications; Stripe for payments; Clerk for authentication; Resend for transactional email; and infrastructure providers such as Google Cloud, Amazon Web Services, or Heroku. We use providers only as applicable to the relevant interaction.

We may disclose information to service providers under appropriate restrictions; to a merchant when we process information for that merchant; to professional advisers and authorities where legally required; or as part of a merger, financing, reorganization, or sale of all or part of the business.

We do not sell personal information for money. Some analytics or advertising disclosures may be treated as a “sale,” “sharing,” or targeted advertising under certain U.S. state laws. Where those laws apply, you may use our cookie controls or contact us to exercise an opt-out. We honor legally required browser-based opt-out signals, such as Global Privacy Control, where applicable and technically supported.

7. International transfers

Monthlee is established in France, while some providers operate in the United States and other countries. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

8. Retention

We retain information only as long as reasonably necessary for the purposes described above and for legal, accounting, security, and dispute-resolution needs. Typical periods include the duration of an account or business relationship plus applicable limitation periods; billing records for up to 10 years where French law requires; analytics data for up to 13 months; and prospect information for up to three years after the last meaningful contact. Actual periods may vary by record type, configuration, and legal requirements.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your privacy rights

Depending on your location and subject to legal exceptions, you may have the right to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent. Residents of certain U.S. states may also have rights to know or access information, correct or delete it, receive a copy, opt out of targeted advertising, sale, sharing, or certain profiling, limit certain uses of sensitive information, receive equal service, and appeal a denied request. State-law thresholds and exceptions mean not every right applies in every situation.

Send requests to bonjour@monthlee.fr. We may need to verify your identity and authority. Authorized agents may submit requests where permitted. We will not discriminate against you for exercising an applicable privacy right.

11. Merchant end customers

If you are a customer or subscriber of a merchant powered by Monthlee, direct privacy requests first to that merchant. The merchant determines the purposes of processing; Monthlee will assist the merchant as required by law and contract.

12. Children

Our website and services are intended for businesses and adults. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

13. Cookies and similar technologies

We use cookies, local storage, pixels, and related tools as described in our Cookie Policy. You can manage non-essential categories through the preference controls available on the website and through your browser.

14. Complaints and changes

You may contact us with a concern. Where applicable, you may also complain to your local data-protection authority; in France, this is the CNIL. We may update this Policy to reflect legal, technical, or business changes and will revise the date above when we do.