1. Scope
1. Scope
This Privacy Policy applies to all personal data processed by Monorail AI Ltd in connection with the Platform at mnrl.app and all associated Services. It covers data collected from website visitors, account holders, and any other individuals who interact with the Platform.This Policy does not apply to third-party websites or services linked from the Platform. Those services have their own privacy policies, which you should review independently.
2. Data Controller
2. Data Controller
The data controller for your personal data is:Monorail AI Ltd
Governed by the laws of England and WalesContact: support@mnrl.appWhere applicable, Monorail AI Ltd processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) for users based in the European Economic Area.
3. Categories of Data We Collect
3. Categories of Data We Collect
Monorail AI may collect and process the following categories of personal data:
- Identity data — your name, username, and profile information provided at registration
- Account data — email address, password (stored in hashed form), account preferences, and plan details
- Usage data — records of the tools you use, prompts submitted, Outputs generated, credit consumption, and feature interactions
- Technical data — IP address, browser type and version, device information, operating system, and session data collected automatically when you use the Platform
- Payment data — billing information processed by our third-party payment provider; Monorail AI does not store full card details
- Communication data — the content of any messages you send to the support team or through any contact forms
4. How We Collect Data
4. How We Collect Data
Monorail AI collects personal data in the following ways:
- Directly from you — when you register for an account, subscribe to a plan, use the Services, or contact support
- Automatically — through cookies, server logs, and analytics tools when you visit or interact with the Platform
- From third parties — through OAuth providers if you use a third-party login option, and from payment processors in connection with billing
5. Purposes of Processing
5. Purposes of Processing
Monorail AI processes your personal data for the following purposes:
- Providing and maintaining the Services, including processing your prompts and generating Outputs
- Managing your account and subscription, including billing and credit management
- Communicating with you about your account, service updates, and support requests
- Improving and developing the Platform, including analysing usage patterns and performance
- Detecting and preventing fraud, abuse, and security threats
- Complying with legal obligations
- Enforcing the Terms of Service and other applicable policies
6. Legal Basis for Processing
6. Legal Basis for Processing
Monorail AI relies on the following legal bases to process your personal data:
- Contract performance — processing necessary to provide the Services you have subscribed to, including handling your prompts and managing your account
- Legitimate interests — processing for fraud prevention, security, platform improvement, and direct marketing to existing customers, where these interests are not overridden by your rights
- Legal obligation — processing required to comply with applicable law, including tax, financial regulation, and law enforcement requests
- Consent — where we rely on your consent, for example for optional cookies or marketing communications, you may withdraw consent at any time by contacting support@mnrl.app or adjusting your preferences in the Platform
7. AI Processing and Third-Party Providers
7. AI Processing and Third-Party Providers
To provide the Services, your prompts, inputs, and associated Content are transmitted to Third-Party Providers, including OpenAI, Anthropic, xAI, Cohere, ElevenLabs, Speechify, and FalAI, for processing by their AI models.Monorail AI takes steps to ensure that data sharing with Third-Party Providers is limited to what is necessary to generate the requested Output. Where possible, Monorail AI pursues data processing agreements with Third-Party Providers to protect your data.
8. International Data Transfers
8. International Data Transfers
As a global platform, Monorail AI and its Third-Party Providers may transfer personal data outside the UK and European Economic Area (EEA). Where such transfers occur, Monorail AI takes steps to ensure an adequate level of protection through mechanisms including:
- Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority
- Adequacy decisions by the UK or European Commission
- Other legally recognised transfer mechanisms
9. Data Retention
9. Data Retention
Monorail AI retains personal data for as long as necessary to fulfil the purposes for which it was collected, including:
- Account data — retained for the duration of your account and for a reasonable period after account closure to comply with legal obligations
- Usage and transaction data — retained for the period required by applicable financial and tax law
- Support communications — retained for a reasonable period to resolve disputes and improve the Services
10. Data Security
10. Data Security
Monorail AI implements technical and organisational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorised personnel
- Regular security reviews and monitoring
No method of transmission over the internet or electronic storage is completely secure. Monorail AI cannot guarantee absolute security of your data. If you become aware of a security incident affecting your account, contact support@mnrl.app immediately.
11. Your Rights
11. Your Rights
Depending on your location, you may have the following rights with respect to your personal data:
- Access — request a copy of the personal data Monorail AI holds about you
- Correction — request that inaccurate or incomplete data be corrected
- Deletion — request erasure of your personal data where there is no compelling reason for its continued processing
- Portability — request your data in a structured, commonly used, machine-readable format
- Restriction — request that processing of your data be restricted in certain circumstances
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw consent at any time where processing is based on consent
12. Automated Processing
12. Automated Processing
Monorail AI may use automated processing to detect fraudulent activity, enforce content policies, and manage credit consumption. Where automated processing produces decisions that have a significant legal or similarly significant effect on you, you may have the right to request human review. Contact support@mnrl.app for more information.
13. Cookies and Tracking Technologies
13. Cookies and Tracking Technologies
14. Third-Party Services and Links
14. Third-Party Services and Links
The Platform may contain links to third-party websites or services. These are provided for your convenience and do not constitute an endorsement by Monorail AI. Monorail AI is not responsible for the privacy practices or content of third-party services. You should review the privacy policies of any third-party services you access.
15. Data Minimisation and User Responsibility
15. Data Minimisation and User Responsibility
You are responsible for the Content you submit to the Platform. Monorail AI encourages you to:
- Avoid submitting unnecessary personal data of yourself or others in your prompts
- Avoid submitting sensitive personal data (such as health, financial, or identity information) unless strictly necessary
- Ensure you have a lawful basis for submitting any personal data relating to third parties
16. Children's Data
16. Children's Data
The Platform is not directed at individuals under 18 years of age. Monorail AI does not knowingly collect personal data from children. If you become aware that a child has provided personal data through the Platform, contact support@mnrl.app and Monorail AI will take steps to delete that data.
17. Changes to this Policy
17. Changes to this Policy
Monorail AI may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Where changes are material, we will provide reasonable notice. Your continued use of the Platform after any changes take effect constitutes your acceptance of the updated Policy.
18. Contact
18. Contact
For questions, concerns, or requests relating to this Privacy Policy or your personal data, contact:Monorail AI Ltd
Email: support@mnrl.appIf you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection supervisory authority.

