Privacy Policy
Draft pending legal review. This policy is a working draft, published for transparency while Monsterload is in beta. It has not yet been reviewed by legal counsel and may change, in whole or in part, once that review is complete. It also describes some features and providers that are still being built or finalized. Nothing here is legal advice. The final, counsel-reviewed policy will be posted at this address; please check back for the current version.
The short version
- Monsterload is local-first. Most of what you create and import (your media library, contacts, messages, comments, and analytics) is stored on your own device, not on our servers.
- Your platform credentials stay encrypted on your device. We act on a connected account only at your direction.
- We use a small set of service providers for sign-in, optional AI drafting, transactional email, media hosting, and (for paid plans) payments. They are listed below.
- We do not sell your personal information, and AI features are suggest-only: nothing is sent or published without you.
1. Who we are
Monsterload is a desktop application for creators, operated by KnottyHub LLC, a Delaware limited liability company (“KnottyHub,” “we,” “us”). This Privacy Policy explains how we and our service providers handle information when you use the Monsterload app, our websites, and related services (the “Service”). It should be read together with our Terms of Service.
2. Local-first by design
Monsterload runs primarily on your computer. Your content library, drafts, schedule, contacts, and the messages, comments, and mentions you bring in from connected platforms are stored in a database on your own device. Certain features need cloud services to work: signing in, optional AI drafting, sending email, hosting media and a published creator page, and processing payments for paid plans. This policy focuses on the information those cloud services handle. Information that never leaves your device stays under your control and is not collected by us.
3. Information we collect
3.1 Account and identity
To create and secure an account, we collect your email address and, optionally, a display name. If you sign in with a third-party login provider, we receive a provider identifier associated with you. If you enable multi-factor authentication, we store the information needed to verify it. We also keep a record of your subscription tier so we can provide the right features.
3.2 Content and app data you create
The media, captions, profiles, contact records, and other material you create or import (“Your Content”) are stored on your device. Media files you upload may also be stored with our cloud storage provider to support features such as hosting and a published creator page. We do not browse Your Content, and we access it only as needed to provide the features you use or as required by law.
3.3 Connected-platform information
When you connect an account on a third-party platform, the access credentials needed to act on that account are encrypted and stored on your device, protected using your operating system’s secure storage. Information you bring in from a connected platform, such as direct messages, comments, mentions, and contact details, is stored locally on your device so you can work with it. We use this information only to provide the features you use; we do not use it for advertising.
3.4 Subscription and billing
If you purchase a paid plan, our payment processor collects and processes your payment details under its own terms and privacy policy. We do not receive or store your full payment-card number. We may store a billing identifier, limited display details such as your card’s brand and last four digits, and a record of your plan and payments.
3.5 AI feature inputs
If you use the optional AI drafting features, the text and context you choose to include in a request (for example, a caption to rewrite, a topic, or a message thread you want a reply draft for) are sent to our AI provider to generate the suggestion. See section 6.
3.6 Support and communications
If you contact us, we keep your messages and contact details so we can respond and keep a record of the request.
3.7 Technical and diagnostic information
We keep limited security and audit logs, such as sign-in events, to operate the Service securely. The app does not include third-party advertising, analytics, or behavioral-tracking software. Optional, privacy-preserving diagnostics may be used to find and fix problems; these are off by default and do not include the contents of Your Content.
4. How we use information
- To provide, maintain, and improve the Service and the features you use;
- To create and secure your account, authenticate you, and prevent fraud and abuse;
- To process subscriptions and payments;
- To respond to your requests and provide support;
- To generate AI suggestions you ask for;
- To comply with law and enforce our Terms, including our prohibition on unlawful content.
Where the law requires a legal basis to process personal data (for example, under the GDPR), we rely on performing our contract with you, our legitimate interests in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.
5. Service providers (sub-processors)
We use a small number of service providers to deliver the cloud parts of the Service. They process information only on our instructions and for the purposes below. This list reflects our current providers and may change; it will be finalized as part of the legal review noted at the top of this page.
| Provider | Purpose | Information involved |
|---|---|---|
| Appwrite | Account sign-in, authentication, and subscription entitlements | Email, display name, login identifiers, subscription tier |
| Anthropic (Claude) | Optional AI caption, title, idea, rewrite, and reply drafting | The text and context you submit with an AI request |
| Resend | Transactional email (verification, password reset, security and account notices) | Your email address and the message content |
| Cloudflare | Cloud media storage and content delivery for hosted features | Media files and pages you choose to host |
| Payment processor (for paid plans) | Processing subscription payments | Payment details you provide at checkout, handled by the processor |
Each provider operates under its own terms and privacy policy. We do not sell your personal information to anyone, and we do not share it for cross-context behavioral advertising.
6. AI processing
The AI features are suggest-only: they return drafts for you to review, and nothing is posted, sent, or published unless you decide to do so. When you make an AI request, the text and context you include are sent to our AI provider to produce the suggestion; identifying account details are not part of that request. We keep a local record of usage, such as token counts, to manage limits and billing. Our AI provider processes the request to return a result; under its standard business terms, inputs and outputs from the API are not used to train its models. You should avoid including information in an AI request that you do not wish to share with the provider.
9. Data retention
Information stored on your device remains until you delete it or remove the app. For information handled by our cloud services, we keep it for as long as your account is active and as needed to provide the Service, then delete or de-identify it within a reasonable period, except where we must keep it longer to meet a legal obligation, resolve disputes, or enforce our agreements. Where you use the Service to keep consent or identity records for adult content, those records may be retained as required by applicable record-keeping laws even after you delete related content or close your account.
10. Security
We use technical and organizational measures designed to protect information, including encryption of platform credentials and other secrets on your device and encryption of data in transit. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your device, your account credentials, and any backups you make.
11. Your rights and choices
Depending on where you live, you may have rights to access, correct, export, delete, or restrict the personal information we hold about you, to object to certain processing, and to withdraw consent. Because Monsterload is local-first, much of your data is already in your hands on your device, and you can edit or delete it directly. For information handled by our cloud services, you can request access, a copy, or deletion, and you can close your account from within the app or by contacting us.
We do not sell or “share” personal information as those terms are defined under U.S. state privacy laws such as the California Consumer Privacy Act. We will not discriminate against you for exercising your rights. To make a request, contact us using the details in section 15; we may need to verify your identity first.
12. International data transfers
We and our service providers are based in, and may process information in, the United States and other countries. Where information is transferred across borders, we rely on appropriate safeguards as required by applicable law. By using the Service, you understand that your information may be processed in countries whose data-protection laws differ from those of your own.
13. Children’s privacy
The Service is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will take appropriate steps to delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you. As noted at the top of this page, this policy is a draft and is expected to change once it has been reviewed by legal counsel.
15. Contact us
For privacy questions or to exercise your rights, contact KnottyHub LLC at privacy@monsterload.app, or use the support options in the app.