Skip to content
Acmonic

Privacy policy

Last updated:

This policy explains how Acmonic handles personal data when you visit acmonic.com, use the client workspace, or work with us. It applies to visitors and clients worldwide and is written to meet the EU and UK General Data Protection Regulations (GDPR), the California Consumer Privacy Act (CCPA/CPRA) and comparable privacy laws.

1. Who is responsible

Acmonic is the data controller for the data described here. When we process personal data on your behalf inside a project (for example your customers' data in a system we build), you are the controller, we act as your processor, and a data processing agreement can be signed on request. Contact: contact@acmonic.com.

2. Data we collect

  • Account data: name, email address, password (stored only as a secure hash), optional company, phone number, language and region.
  • Project data: your requests, answers, messages, files, offers, signed agreements, deliveries and reviews.
  • Billing data: invoices, amounts, payment method, payment references and refund records. Card numbers go directly to Stripe and never reach our servers.
  • Support data: tickets and the emails you send us.
  • Technical and security data: IP address, approximate country, browser, device, sign-in history and security logs.
  • Assistant and website check data: the questions you type into the assistant and the web addresses you submit for the free check.

3. Why we use it and our legal basis

  • To deliver the services you request and manage your account (performance of a contract).
  • To send verification codes, project updates, invoices and support replies (performance of a contract).
  • To keep accounting, tax and signature records (legal obligation).
  • To protect the platform, detect bots and fraud, and keep the service reliable (legitimate interests).
  • To measure and advertise with cookies, send WhatsApp notifications or publish your review (consent, which you can withdraw at any time).

We do not make decisions with legal or similarly significant effects about you by automated means alone. Automated security checks can temporarily limit access; you can contact us to have a person review this.

4. Cookies and security checks

Strictly necessary cookies keep you signed in and remember your language and region. Analytics and advertising cookies (Google Analytics, Meta Pixel, Microsoft Clarity) are placed only if you accept them, and you can change your choice through “Cookie settings” at the bottom of every page. We use Cloudflare Turnstile to tell people from automated traffic; it processes technical signals from your browser for that purpose only.

5. The AI assistant

Messages you type into the assistant are sent to an AI provider (Google) to generate a reply. Please do not enter passwords, payment details or sensitive personal information.

6. Who receives your data

We never sell your personal data or share it for cross-context behavioural advertising without your consent. We share it only with people working on your project and with service providers bound by confidentiality and data protection terms: hosting and storage, Cloudflare (network security), Stripe and other payment providers you choose, email delivery, Google (assistant and website performance checks) and, if you opted in, WhatsApp and analytics or advertising partners. We may disclose data when the law requires it or to protect rights and safety.

7. International transfers

Our providers may process data outside your country. When data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision or on safeguards such as the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards.

8. How long we keep it

  • Account and project data: while your account is active, then deleted or anonymised within a reasonable period, unless you ask for earlier deletion and no legal duty prevents it.
  • Invoices and signed agreements: for the period required by accounting, tax and limitation laws.
  • Security logs: up to 12 months.
  • Website check results: kept in memory for about 30 minutes, then erased.

9. Security

We protect data with encrypted connections, protected storage of messages and files, hashed passwords, role-based access, confirmation of sensitive actions, malware scanning of uploads and activity logs. No system is perfectly secure; if a breach is likely to put you at risk, we will inform you and the competent authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict your data, to object to its use, to withdraw consent, and to know what we collect and share. Californian and other US residents may also opt out of sale, sharing or targeted advertising (we honour Global Privacy Control signals as an opt-out) and will not be treated less favourably for using their rights. Use Settings or write to contact@acmonic.com; we reply within the time set by law, usually one month. We may need to confirm your identity. You can also complain to your local data protection authority.

11. Children

Our services are for businesses and adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

12. Changes

We may update this policy. The date at the top shows the latest version, and we will tell clients about important changes by email or in the workspace.