Privacy Policy

This policy covers visitors to our website and people who contact us to request access or a demo. Where we act as a processor of a customer's data under a separate agreement, that agreement governs how we handle it.

Information you give us. When you request access or book a demo, we collect the details you submit:

• Your name
• Your work email address
• Your company or organisation
• What you choose to tell us about your systems and needs

Information collected automatically. Our hosting providers process basic technical data (such as IP address, browser type and the pages requested) to deliver and secure the site. We also count visits with Vercel Web Analytics, which uses no cookies and does not identify you: it records the page, referring site, country, and device and browser type, and measures when someone opens or submits one of our forms, without their contents. Only if you accept analytics cookies, we also use Google Analytics to measure how the site is used, such as pages viewed, approximate location (country or city), device and browser type, how you arrived, and which buttons or forms you use. See Cookies and analytics.

Customer content. If your organisation becomes a customer, we process the source code and data you provide solely to deliver the service. This content is executed only inside an isolated, network-egress-free environment and is not used to train shared models.

• To respond to your request and communicate with you about Montora
• To provide, secure, maintain, and improve our website and services
• To keep records for our legitimate business and compliance needs
• To comply with legal obligations

We do not sell your personal data, and we do not use customer content for advertising.

Where the UK GDPR or EU GDPR applies, we rely on one or more of the following bases: your consent; our legitimate interests in operating and promoting our business (balanced against your rights); performance of a contract with you or your organisation; and compliance with a legal obligation.

We share personal data only with:

• Service providers who process it on our behalf under contract (for example, hosting, database, and email providers), and only as needed to provide the service
• Vercel, which hosts the site and provides cookieless visit statistics
• Google, which provides Google Analytics, if you accept analytics cookies
• Authorities or third parties where required by law, or to protect our rights, safety, or property
• A successor entity in the event of a merger, acquisition, or reorganisation

Where personal data is transferred outside the UK or EEA, we put appropriate safeguards in place (such as an adequacy decision or standard contractual clauses) to protect it.

We keep personal data only for as long as necessary for the purposes described here, to meet legal or contractual requirements, and to resolve disputes. When it is no longer needed, we delete or anonymise it.

We protect data with encryption in transit, access controls, and least-privilege practices. Untrusted code is executed only in an isolated, sandboxed environment with no network egress, and control-plane secrets are never exposed to it. No system is perfectly secure, but we work hard to protect your information.

Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data; to object to processing; to data portability; and to withdraw consent at any time. You may also lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, contact us using the details below.

Essential. Some cookies and local storage are needed for the site to work, such as signing in to the Montora app and remembering your light or dark theme and your cookie choice. These do not need your consent.

Cookieless visit counts. Vercel Web Analytics counts page views and form submissions without setting cookies or storing anything on your device, and without identifying you or following you across sites, so it runs for every visitor.

Analytics cookies (optional). With your consent, we use Google Analytics 4 to understand which pages are useful and whether our forms work. It sets the _ga and _ga_* cookies, which last up to two years. We do not use it for advertising: Google signals and ad personalisation are switched off, and we never send it your name, email address or anything you type into our forms. We only measure our public website pages, not the Montora app. Google may process this data outside the UK, under its own safeguards.

Nothing is loaded until you choose Accept, and rejecting is just as easy. You can change your mind at any time in cookie settings, also linked in the footer; withdrawing consent stops measurement and deletes the analytics cookies. You can also block cookies in your browser settings.

Our website and services are intended for organisations and are not directed at children. We do not knowingly collect personal data from children.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.

For any privacy question or to exercise your rights, contact us at privacy@montoralabs.com, or write to Montora Ltd, 189 Fleet Road, Fleet, GU51 3BL, United Kingdom.