Privacy Policy

1.1 Scope

This Privacy Policy describes how Monthlees ("Monthlees," "we," "us") collects, uses, discloses, and safeguards personal information when you access or use our websites, headless storefront, membership services, applications, and related services (collectively, the "Services").

1.2 Information We Collect

We may collect the following categories of personal information:

• Identifiers: name, email, postal address, IP address, device identifiers.

• Commercial Information: purchases, subscriptions, payment tokens (processed by third parties).

• Internet/Network Activity: interactions, logs, cookies, analytics.

• Geolocation Data: approximate location inferred from IP.

• Inferences: preferences derived from interactions.

We do not intentionally collect sensitive personal information unless required to provide Services.

1.3 Sources of Information

Information may be collected directly from you, automatically via the Services, or from third parties (e.g., Shopify, Stripe, analytics providers).

1.4 Use of Information

We use personal information to:

• Provide, operate, and improve Services

• Process orders and memberships

• Communicate transactional and service messages

• Prevent fraud and secure the Services

• Comply with legal obligations

1.5 Disclosure of Information

We may disclose information to:

• Service Providers (payment processors, fulfillment, analytics)

• Legal Authorities when required by law

• Business Transfers in mergers, sales, or reorganizations

We do not sell personal information for monetary consideration.

1.6 Data Retention

We retain personal information only as long as reasonably necessary for legitimate business purposes or as required by law.

1.7 Your Rights

Depending on jurisdiction, you may have rights to access, delete, correct, or restrict processing of personal information. Requests may be submitted to SUPPORT@MONTHLEES.COM. We may verify identity before responding.

1.8 International Transfers

Information may be processed in the United States or other jurisdictions with different data protection laws.

1.9 Security

We employ reasonable administrative, technical, and physical safeguards; however, no system is 100% secure.