Privacy Policy

Last updated: 24 May 2026

This Privacy Policy explains how Antlero OÜ ("we", "us", "our") collects, uses, and protects your personal data when you visit getmondo.ai (the "Website") or use the mondō AI platform (the "Service").

1. Who We Are

Antlero OÜ
Registry code: 16390782
Sakala tn 7-2, 10141 Kesklinna linnaosa
Tallinn, Harju maakond, Estonia
Email: hello@getmondo.ai

Antlero OÜ is the data controller responsible for your personal data. The company is registered in the Republic of Estonia and operates under Estonian and European Union law.

2. Data We Collect

We collect only the minimum data necessary to operate the Website and Service:

• Usage Data: Pages visited, time spent on pages, referrer URL, browser type, and device information. Collected via Google Analytics 4.
• Communication Data: Name and email address when you contact us (e.g., requesting early access).
• Account Data: Email address, name, and organization information when you create an account (closed beta participants only).
• Technical Data: IP address (anonymized), session identifiers, and diagnostic logs for security and performance monitoring.

We do not collect sensitive personal data, payment information, or biometric data. We do not use cookies for advertising or tracking beyond essential analytics.

3. How We Use Your Data

• To provide and improve the Website and Service
• To analyze Website traffic and understand how visitors use our pages (Google Analytics)
• To respond to your inquiries and provide customer support
• To send service-related communications (product updates, beta access notifications)
• To ensure the security and integrity of our systems
• To comply with legal obligations under EU and Estonian law

4. Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our Website. GA4 collects anonymized usage data including:

• Pages visited and time on page
• Approximate geographic location (country/city level)
• Browser and device type
• Referral source

IP addresses are anonymized by Google before storage. We do not send any personally identifiable information to Google Analytics. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

Google Analytics data is processed by Google LLC in accordance with their Privacy Policy. Data transfers outside the EU are governed by Google's Standard Contractual Clauses.

5. Legal Basis for Processing

We process your data under the following GDPR lawful bases:

• Legitimate Interest (Art. 6(1)(f)): Website analytics, security monitoring, and service improvement.
• Consent (Art. 6(1)(a)): Newsletter subscriptions and marketing communications (where applicable).
• Contract Performance (Art. 6(1)(b)): Providing the Service to beta users and customers.
• Legal Obligation (Art. 6(1)(c)): Compliance with Estonian and EU legal requirements.

6. Data Retention

We retain personal data only as long as necessary:

• Google Analytics data: 14 months (default GA4 retention)
• Communication data: 2 years after last contact
• Account data: Duration of your account + 30 days after deletion
• Server logs: 90 days

7. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

• Google LLC (Google Analytics) — for website analytics
• Amazon Web Services (AWS, eu-west-1 region) — for infrastructure hosting
• Authorities — when required by law or to protect our rights

All data is stored and processed within the European Union (EU) or in countries with an adequate level of protection as determined by the European Commission.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Access (Art. 15): Request a copy of your personal data.
• Rectification (Art. 16): Correct inaccurate data.
• Erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Restriction (Art. 18): Limit how we process your data.
• Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Objection (Art. 21): Object to processing based on legitimate interest.
• Withdraw Consent (Art. 7(3)): Withdraw previously given consent at any time.

To exercise any of these rights, contact us at hello@getmondo.ai. We will respond within 30 days as required by GDPR. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Infrastructure is hosted on AWS in the EU (eu-west-1, Ireland)
• Access to personal data is restricted to authorized personnel only
• Regular security assessments and monitoring

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email (for account holders) or a prominent notice on this page. The date of the last update is indicated at the top of the page.

11. Contact

For questions about this Privacy Policy or to exercise your data rights: