Your data. Your choices.
Updated 23 October 2026
About this policy
This policy explains the current Datamon application. Contact info@datamon.app for privacy questions or requests. Updated 23 October 2026. Datamon is the product name; deployment operators must identify their legal entity and applicable jurisdiction before offering the service commercially.
What stays on your device
Spreadsheet parsing, visual editing, and supported local calculations run on your device. Your browser keeps preferences, cached account projects, pending changes, and legacy device projects. Clearing browser storage can remove pending or legacy work, so export a backup first. Account projects already saved to the database remain available when you sign in again.
What leaves your device
When you create or edit an account visualization, its complete dataset, original data, geographic data, chart settings, annotations, and referenced assets are saved to the configured database. These projects are scoped to your account workspace. When you request AI, Datamon sends your question, data profile, limited sample values and rows, and relevant calculation context to the configured AI service. That provider can receive personal information contained in the sample. Cloud analysis explicitly uploads the chosen dataset to configured object storage and processing workers. Uploaded images are processed on the server and converted to WebP. Maps with external tile layers contact the selected provider and can disclose request information such as IP address and map area. When server video export is available and you request it, the visualization's data and styling are sent to our render service. Render inputs and video downloads expire after 24 hours and are removed by the running worker.
Google accounts
When enabled, Google sign-in provides your verified Google account identifier, email address and display name so we can create and recover access to your Datamon cloud workspace. We request identity and basic profile access, without access to Gmail or Google Drive. We do not store Google access or refresh tokens. Existing guest projects remain on your device until you choose to upload them. Contact info@datamon.app about account data or deletion requests.
Cloud sessions and permissions
Creating, editing, and saving visualizations requires a Google account. The encrypted account session lasts up to 90 days and is renewed while you use the workspace. Signing out ends that browser’s session. Legacy anonymous workspace cookies no longer grant access. Never send a session cookie or publication edit token to support.
Publishing is public
Publishing creates a public, unlisted link or embed that includes the selected visualization and its underlying values. Anyone with that link can inspect or copy the data. An edit token controls updates and revocation; it does not make the viewing link private. Revocation cannot delete copies already downloaded by others. Check data and image permissions before sharing.
Why data is processed
Datamon processes the information you supply to provide requested editing, analysis, storage, publishing and support; infrastructure also processes request information for delivery and abuse prevention. We do not install advertising or website analytics trackers in this version. Local storage and necessary sessions are described in the cookie policy. Contact us about the legal basis applicable to your request and deployment.
Providers and international processing
Configured hosting, object storage, database, AI and map providers may process information in countries other than your own. The current AI adapter uses OpenRouter when enabled; its downstream model provider may also process the request. Retention and processing locations depend on deployment configuration and provider terms. Do not submit confidential or regulated data without checking those providers and your organization’s rules.
Retention and deletion
Account visualizations remain until you delete them. Deleted account project payloads are removed while a minimal deletion marker prevents stale devices from recreating them. Legacy local projects remain until you delete them or clear browser storage. A session expiring does not automatically delete cloud datasets or projects. Publications remain until revoked or removed. Uncompleted cloud upload reservations expire after 15 minutes and can be reclaimed; cloud project history keeps up to 20 versions. Export jobs expire after 24 hours. Configured metadata backups use an eight-day rotation. These mechanisms do not establish a universal deletion deadline for all provider logs or storage; ask info@datamon.app about your deployment and deletion request.
Your privacy requests
You can export or delete local projects and revoke publications using the workspace. For cloud access, correction, deletion, objection, restriction or other privacy requests, email info@datamon.app with enough non-secret information to identify the relevant workspace or public link. We may need to verify control of the resource. Rights and applicable time limits depend on your location; contact your local data-protection authority if you need to raise a concern.
Children and sensitive data
Datamon is intended for professional and educational data work, not for collecting children’s information. Avoid uploading sensitive personal data unless you are authorized to process it and have verified the deployment and its providers.
Changes
Material changes to data handling will be reflected here. Optional tracking, if introduced, must have a separate choice before it loads. Review this policy before enabling connected services with sensitive data.