Privacy Policy

Last updated: October 27, 2026

This policy describes how WayWay Corp (“WayWay,” “we,” “us”) handles your information when you use Monsaic (the “Service”). By using the Service you agree to this policy and to our Terms of Service.

1. What we collect

  • Account information. When you sign up, our authentication provider (Clerk) collects your email address, name, and sign-in credentials on our behalf.
  • Payment information. Payments are processed by Stripe. We receive transaction records (amount, status, a payment-method fingerprint used for fraud prevention) but never your full card number.
  • Usage data. The tickers you research, the reports you generate and view, your credit balance and purchase history, and standard technical logs (IP address, browser type, pages viewed).
  • Communications. Messages you send through the contact form or by email.
  • Mailing list. If you join our mailing list, your email address, when you joined, and which sign-up form you used. Joining the list does not create an account.
  • Cookies. Session cookies for authentication, a short-lived referral-attribution cookie when you arrive via a referral link, and privacy-friendly analytics. We do not run third-party advertising trackers.

2. How we use it

  • to operate the Service: generate reports, manage credits and subscriptions, and provide support;
  • to secure the Service: fraud prevention, abuse detection, and rate limiting;
  • to improve the Service: aggregate usage analytics and error diagnostics;
  • to communicate with you about your account, purchases, and material changes;
  • to send mailing-list emails (recommended stock tickers and offers such as founders pricing), only if you joined the list. Every one carries an unsubscribe link.

We do not sell your personal information.

3. Who we share it with

We share data only with the service providers that run the product, each bound by its own data-protection commitments: Clerk (authentication), Stripe (payments), Vercel (hosting and analytics), Neon (database), Inngest (background jobs), our AI model and research providers (OpenAI, Anthropic, Exa — they receive the ticker being researched, never your identity), Resend (account and mailing-list email), Sentry (error tracking), and Langfuse (generation observability). We may also disclose information when required by law or to protect the Service and its users.

4. Retention

We keep account and transaction records while your account is active and as long as needed for legal, accounting, and fraud-prevention purposes. Generated reports remain in your library until you delete your account. If you leave the mailing list, we keep your address only to record that you opted out, so we never email you by mistake.

5. Your rights

You can access and update account details from your account page, and leave the mailing list at any time with the unsubscribe link in any list email. You may request a copy or deletion of your personal data by emailing hello@monsaic.ai; we honor applicable rights under laws such as the CCPA and GDPR. Deleting your account removes your personal data except records we must retain by law.

6. Security

All traffic is encrypted in transit (HTTPS/HSTS), secrets are never logged, and access to production data is restricted. No system is perfectly secure; report concerns to hello@monsaic.ai.

7. Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

8. Changes and contact

We may update this policy from time to time; material changes will be announced on the Service or by email, and the date above will change. Questions: hello@monsaic.ai.