Privacy Policy
How Monova handles the personal data of visitors, enquirers and clients across this website, its proposals, invoices and the pages it hosts.
- Last updated
- 8 November 2026
- Controller
- Monova
- Jurisdiction
- England and Wales
1Who we are
Monova ("we", "us") is a software studio based in the United Kingdom. We are the data controller for the personal data described here. You can reach us at [email protected].
This policy covers this website and the pages it serves: the contact form, proposals (
/quote), payment pages (/pay), review requests (/review), shared files and snippets (/i, /f, /s) and the status page. Software we build for clients, such as Discord bots, has its own policies.2The data we process
Contact form
- What
- Your name, email address, optional Discord username, the kind of project, your budget range and your message, plus the IP address the form was sent from.
- Why
- To reply to you and, if we work together, to prepare a proposal.
- Kept
- Until the enquiry is closed, and for up to 24 months afterwards so we can refer back to it.
Proposals
- What
- The name and email you enter when accepting or declining a proposal, the time you did so and your IP address.
- Why
- To record that the proposal was agreed and by whom. This forms part of our contract with you.
- Kept
- For six years after the project ends, as required for business and tax records.
Payments
- What
- Invoice details (amount, description, your name and email) and Stripe's reference for the payment. Card numbers are entered on Stripe's pages and never reach our servers.
- Why
- To take payment and keep accounting records.
- Kept
- Six years, as required by HMRC.
Testimonials
- What
- What you write when we invite you to leave a review: your words, name, role, company and an optional logo.
- Why
- To publish on this website, only with the consent you give on the form.
- Kept
- While published. Ask us and we will take it down.
Visiting the site
- What
- Our hosting and Cloudflare keep standard server logs (IP address, pages requested, browser type) for security. Shared file and snippet pages count views in total, not per person.
- Why
- Keeping the site running and spotting abuse.
- Kept
- Server logs for up to 30 days. View counts are totals only.
Cookies
- What
- The public site sets no tracking cookies. A session cookie is used only when a member of the studio signs in to the admin area.
- Why
- Signing in to manage the site.
- Kept
- The admin session cookie expires when it is cleared or after seven days.
3Our legal bases
- Contract
- Accepting a proposal, paying an invoice and the records that go with them: we need this data to deliver and bill the work you asked for.
- Legitimate interests
- Replying to enquiries, keeping the site secure and keeping a record of past projects. We have weighed these against your rights and keep the data to a minimum.
- Consent
- Publishing a testimonial with your name and logo. You can withdraw it at any time by emailing us.
- Legal obligation
- Keeping invoices and payment records for the period UK tax law requires.
5How long we keep it
The periods above are the longest we keep each kind of data. Enquiries that do not lead to a project are deleted sooner on request. Backups roll over and are overwritten within 30 days.
6Your rights
You can ask to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing of it, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
Email [email protected] from the address the request is about and we will answer within one month. We may need to keep invoice and contract records where the law requires it, and we will tell you if that applies.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
7Changes
We will post any changes on this page and update the date at the top. Material changes to how we use client data will be emailed to current clients first.