Privacy policy

Publisher and contact

Moninga
1 rue Jean Goffaux, Chastre
Belgium

What Moninga uses

This policy applies to Moninga Scheduler, Moninga’s email meeting scheduling assistant, available at moninga.app.

Your name and email address, provided by Google when you sign in, identify your account. When you copy the assistant scheduler@moninga.app on an email, Moninga receives that email (sender, recipients, subject and body; attachments are not read) and the participants’ replies. It keeps the participants, the messages needed for coordination, the proposed time slots and the answers received.

This processing serves to provide the service you request: organising the meetings you initiate. Information about guests is used only to coordinate those meetings. Processing guests’ data relies on the legitimate interest in organising the meeting requested by the user.

Google user data

With your permission, Moninga accesses Google Calendar to:

• read the list of your calendars, so you can choose which ones to take into account;
• know your availability in those calendars: for each event, only its times, its status and your response to the invitation are read, never its title, description, location or other attendees;
• create, update or cancel the events of agreed meetings, and check that they have not been changed since.

Moninga does not access your Gmail mailbox. Google access tokens are encrypted before being stored. Google user data is not sold, not used for advertising and not used to train artificial intelligence models. It is viewed by a person only with your consent, for security reasons or to comply with a legal obligation.

Moninga’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Moninga’s access to your Google account at any time, from Moninga or at myaccount.google.com/permissions.

Artificial intelligence

To understand requests and replies, Moninga sends the artificial intelligence provider the text of the email concerned, a few recent messages from the conversation, your scheduling preferences and the time slots already proposed. The content of your calendar events is never sent. If you connect Telegram, your messages to the bot and a summary of your recent meetings (subject, participants, status, latest messages) are sent in the same way to answer you. Providers are used through their business APIs, whose data is not used to train their models; with OpenAI, Moninga also requests that exchanges are not retained.

Service providers and processing locations

• Railway: hosting of the application and database, in its Western Europe region (Amsterdam, Netherlands).
• Resend: sending and receiving the assistant’s emails, through Amazon Web Services in Ireland.
• OpenAI (or Anthropic, depending on configuration): interpreting requests.
• Google: sign-in and calendar.
• Stripe: payment. Moninga does not receive your card number.
• Telegram, only if you connect it: requests for your input and your replies.

Several of these providers are established in the United States. Transfers outside the European Economic Area are covered by these providers’ contractual safeguards (European Commission standard contractual clauses or the Data Privacy Framework).

Retention

Technical logs are kept for 30 days and contain neither email bodies nor API keys. Former internal counters, now disabled, are deleted after 90 days at the latest. When you disconnect Google, Moninga revokes its access with Google and immediately deletes the access token and calendar selection. The history of meeting requests is kept while the account is active; it is deleted on request to the contact address above, within 30 days at most. Billing data is kept for the period required by accounting obligations.

Your choices and rights

You can pause the assistant and disconnect integrations. Disconnecting Google revokes access and immediately deletes the token; the history is deleted on request, within 30 days. Contact the publisher to request access, rectification, erasure or restriction of your data, its portability where applicable, or to object. You may also lodge a complaint with the competent data protection authority.

Guests can contact the publisher in the same way as users. Requests are handled with proportionate identity verification.

Cookies and analytics

Internal audience measurement is disabled. Google Analytics 4 has been chosen, but its activation is postponed. Once configured and accepted, it will measure public pages only, without receiving form fields, participant identities or meeting content from Moninga. It will only be activated after this policy is updated. View and change your preferences.