Privacy Policy

supermonolith ("we", "us") turns the places your company already talks and works into a reviewed knowledge base that AI agents can use. This policy explains what we collect when you use https://www.supermonolith.com, why, and the choices you have.

What we collect

• Account information. Your name, email address and profile picture when you sign in with Google, or your name and email when you sign up with a password. Passwords are stored only as a one-way hash.
• Data from sources you connect. If you connect Gmail, Google Drive, GitHub, Notion, Jira, Discord or Slack, we fetch the content you authorize, such as emails, messages, issues, pull requests and pages, so we can find company knowledge in it. We store the items we process and the rules and summaries we derive from them.
• Agent activity. When an AI agent you connect through our MCP server reads your knowledge or reports a correction, we store the request and the correction text so the brain can learn from it.
• Technical data. Basic logs such as request times, error codes and the API key prefix used, to keep the service running and secure.

How we use it

• To run the service: extract candidate rules, show them for your review, and compile approved rules into skill files.
• To serve approved knowledge to the agents and API keys you create.
• To secure the service, prevent abuse and fix problems.
• To contact you about your account.

We do not sell your data. We do not use your data to train AI models.

AI processing

To extract knowledge, we send the text of the items you connect to a third-party AI model provider, which processes it on our behalf only to return the result. Nothing is shared with agents until a person on your team approves it in the review queue.

Google user data

When you sign in with Google we receive your name, email address and profile picture. If you connect Gmail or Google Drive, we request read-only access to the content you choose and use it only to provide the features you see in the product. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your Google Account permissions page.

Who we share it with

Only service providers that help us run supermonolith, under their own privacy and security terms: our hosting provider, our database provider and our AI model provider. We may also disclose information if the law requires it.

Keeping and deleting your data

Disconnecting a source stops us fetching anything new from it. To delete your account and everything we stored for it, email [email protected] and we will delete it within 30 days.

Security

Traffic to supermonolith uses HTTPS. API keys are stored as hashes. Access tokens for connected sources are kept on our servers and never shown in the browser. No system is perfectly secure, so please use strong passwords and keep your API keys private.

Children

supermonolith is built for businesses and is not meant for anyone under 16.

Changes

If we change this policy we will update the date above and, for material changes, tell account holders by email.

Contact

Questions or requests: [email protected]