Privacy Policy

Monu is operated by codebros design s.r.o., company ID 19971419, VAT CZ19971419, registered at Pustkovecká 363, 708 00 Ostrava, Czech Republic. For any privacy matter, write to podpora@monu.cz.

Monu is software for real estate agencies. Data about an agency's clients (sellers, buyers, tenants, people interested in a property, persons in an AML file) is entered by the agency or brought in from the portals and ad accounts the agency connects. For this data the agency is the controller and we are a processor under Article 28 GDPR. We process it only on the agency's instructions and under a data processing agreement.

If you are a client of an agency and want to exercise your rights, please contact the agency. If you write to us, we will pass the request on and help the agency handle it.

We are the controller for data about app users (agents and other agency members) and about people who sign up through the form on monu.cz.

• App users: name, email and profile picture from signing in with Google, Seznam or Facebook, agency membership and role, account settings.
• Operational records: IP address and browser identification at sign-in, and a record of who changed what and when in the app. Used for security and troubleshooting.
• Form on monu.cz: email and, if you fill them in, name, agency and phone number.
• Support: the content of messages you send us.

• Providing the service and managing accounts: performance of a contract.
• Security, abuse prevention and activity records: legitimate interest.
• Launch updates and beta sign-ups from the form on monu.cz: consent, which you can withdraw at any time.
• Accounting and other legal duties: legal obligation.

We do not sell data and do not use it for advertising. The website uses no analytics or advertising cookies.

An agency can connect its own accounts to Monu. We process data from them as the agency's processor and only for the purpose the agency connected them for.

• Google (Gmail, Drive): we read the agency's mailbox to extract enquiries from portal emails and, with its permission, work with its files.
• Meta (Facebook and Instagram): we read the agency's ad performance (spend, impressions, clicks, lead counts) and leads from Lead Ads forms (name, email, phone and answers to form questions). Leads are stored as the agency's enquiries. We send no personal data to Meta. Access tokens are stored encrypted.
• Property portals (Sreality, Reality.iDNES.cz, RealityMIX): we publish the agency's listings including agent contact details and download enquiries.
• Import from another CRM (Realko, Urbium): login details are used only while the import runs and are not stored.

Google and Meta also apply their own policies. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We rely on these providers to run Monu. Each processes data only on our behalf and under a contract.

• Vercel Inc., USA: hosting of the app and website, servers in Frankfurt (EU).
• DigitalOcean LLC, USA: database, data centre in Frankfurt (EU).
• Cloudflare Inc., USA: file storage in the EU and DNS.
• Anthropic PBC, USA: AI features (extracting data from ID documents, sorting enquiries, drafting listing descriptions, processing voice notes).
• ElevenLabs Inc., USA: voice note transcription.
• Resend Inc., USA: sending emails from the app, from a data centre in the EU (Ireland).
• WEDOS Internet, a.s., Czech Republic: server through which the app connects to property portals.

The app and its data run in the EU. Only data processed by AI features (Anthropic, ElevenLabs), and any access by US providers to their own infrastructure, leaves the EU for the USA. Such transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We disclose data to public authorities only where the law requires it.

• User accounts: for as long as you use Monu. After an account is closed we delete it unless the law requires us to keep something.
• Agency data: for the duration of the contract with the agency. Afterwards we return it to the agency or delete it.
• AML files: ten years after the transaction ends, as required by anti-money-laundering law, after which the app deletes them automatically.
• Form on monu.cz: until the service launches or until you withdraw consent.

Connections to the app are encrypted. National ID numbers and ID document numbers are stored encrypted and the app never sends them anywhere. Documents are available only to signed-in agency members with the right permission, and every download is logged. Only invited users can access the app. We look into agency data only to provide support, with a stated reason and for a limited time. Every such access is logged and the agency is notified.

We use only cookies needed for the service to work: sign-in, the selected agency, language and the property owner's sign-in to the listing overview. These do not require consent.

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object and to withdraw consent at any time. Write to podpora@monu.cz. We reply within one month.

How to have your data deleted, including data from Facebook, is described at /en/smazani-dat.

You can lodge a complaint with the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, https://uoou.gov.cz.

We update this policy when the way we handle data changes. The effective date is always shown at the top.