01 / Scope
Access requests and related communication
This notice applies to information submitted in a request for access to Monsoon Gateway and to direct communication about that request. Monsoon determines why and how the information covered by this notice is processed.
This notice does not apply to prompts, model responses, or other content sent through the gateway or Playground. Those data are governed by authenticated workspace controls and the terms provided during onboarding.
02 / What we collect
Information needed to review a request
Monsoon may collect:
- Name and email address.
- Company or project, when provided.
- A description of the product or project being built.
- Optional interest in future Vietnam-resident routing.
- The consent text, version, language, and time associated with a submission.
- A keyed digest derived from the source IP address.
- The browser user agent and submission time.
Credentials, confidential information, and sensitive personal data are not required and should not be included in a project description.
03 / Purpose and consent
Review, onboarding, and service security
Monsoon uses this information to:
- Evaluate and respond to an access request.
- Contact the applicant directly about participation and onboarding.
- Understand product needs across models, routing, and data residency.
- Protect the request process, prevent abuse, and maintain a consent record.
Submitting an access request requires affirmative consent to process the information for these purposes, including primary storage in Singapore. Monsoon records the exact consent text, version, language, and time. Consent may be withdrawn at any time by contacting privacy@monsoon.sh. Withdrawal does not affect processing completed before it was received.
Interest in Vietnam-resident routing is optional and is not consent to receive marketing.
04 / Storage and providers
Primary application records in Singapore
Primary application and consent records are stored in Singapore. For a request submitted from Vietnam, this involves transferring information to Singapore. Administrative access is limited to people who need the information to review requests, support onboarding, operate the service, or handle privacy requests.
Monsoon uses the following service providers:
- Vercel provides website hosting and delivery and may process access and security metadata.
- Fly.io provides application processing, the primary Singapore database, and infrastructure logs.
These providers process information as needed to deliver and protect their respective services. Monsoon uses restricted administrative access and encrypted connections for data in transit.
05 / Retention
Up to 90 days for access requests
Monsoon-controlled application and consent records are retained for up to 90 days from submission, then deleted or de-identified. A record may be deleted sooner after a valid request. A longer period may apply when required by law or necessary to resolve a security matter.
Service-provider access and infrastructure logs follow the provider's operational retention schedule. If access is granted, information needed to administer the resulting relationship may be retained under the terms presented during onboarding.
06 / Your rights
Access, correction, deletion, and choice
Subject to applicable law, a person may:
- Know how their information is processed.
- Access, obtain, or correct their information.
- Request deletion, restriction, or protective measures.
- Object to processing or withdraw consent.
- Complain, report a violation, bring a claim, or seek compensation where applicable.
Requests can be sent to privacy@monsoon.sh. Monsoon may verify the requester's identity before acting. Valid requests will be acknowledged within two business days and completed within the time required by applicable law.
07 / Use boundaries
Purpose-limited handling
Access-request records are not:
- Sold.
- Used to train or evaluate AI models.
- Used for unrelated marketing or to add an applicant to a newsletter without separate consent.
- Shared for purposes unrelated to the request or operation of the service.
Information may be disclosed to the service providers identified above, or when reasonably necessary to comply with law, protect the service, or protect the rights and safety of Monsoon and others.
08 / Updates and contact
A current record of the policy
Monsoon may update this notice to reflect changes to the access program, applicable law, or how information is processed. The effective date above identifies the current version. A material change to purpose or processing will be communicated, and renewed consent will be requested where required.
Questions or privacy requests can be sent to privacy@monsoon.sh.