MunkeyPrivacy Policy
Last updated: 16 October 2026
Munkey ("we", "us") is a software agency that builds websites, web apps, internal tools and AI integrations. This policy explains what personal data we handle, why, and the choices you have. Questions: [email protected].
What we collect
- When you contact us or become a client: your name, email address, company, and whatever you tell us about your project.
- Business contact details for outreach: we look for companies we could help using publicly available sources such as Google Maps listings, company websites and news coverage. We may record a company's name, address, public phone number, public business email address and basic facts about its website (for example, whether it has a sitemap).
- Technical data: when you visit munkey.company, our hosting and network providers process your IP address and browser information to deliver and protect the site. This website does not use advertising or analytics cookies.
Why we use it
- To reply to you, prepare proposals and deliver the work we agree on (performance of a contract).
- To contact businesses about services that may be relevant to them, one message at a time and never in bulk (legitimate interest). Every outreach email tells you how to opt out.
- To keep the website secure and working (legitimate interest).
- To meet legal, tax and accounting obligations.
Concept demos
We sometimes build a concept website for a business to show what we could make for it. These demos use information the business has published itself, are clearly labelled "Concept demo by Munkey, not the official website", and are kept out of search engines. If one concerns your business and you want it removed, email us and we will take it down promptly.
Who we share it with
We do not sell personal data. We use a small number of service providers to run our business, such as cloud hosting (Google Cloud), network and security services (Cloudflare) and email delivery (Resend). They process data only on our instructions. We may also disclose data if the law requires it.
International transfers
Our providers may process data outside your country, including in the United States and India. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Client and project records are kept for as long as needed to deliver the work and meet legal obligations. Outreach records are deleted when you ask us to, or when they are no longer useful, at the latest 24 months after our last contact.
Your rights
Depending on where you live (including under the GDPR, UK GDPR, India's DPDP Act and US state privacy laws), you can ask to access, correct or delete your data, object to or restrict how we use it, or ask us to stop contacting you. Email [email protected] and we will respond within 30 days. You can also complain to your local data protection authority.
Changes
If we change this policy we will update the date at the top of this page.