Privacy

monovus.solutions is a set of static pages. There is no cookie banner because there are no cookies, and there is no analytics script, tag manager, session recording, fingerprinting or embedded third-party content. Fonts are served from this site.

Two infrastructure providers necessarily see the request that delivers a page to you: GitHub Pages hosts the files and, like any web server, records requests in its own logs, and Cloudflare provides DNS for the domain. We do not receive or combine those logs with anything else. Each provider handles that data under its own privacy policy.

While you answer

The assessment and its report run in your browser. Your answers are scored on your own device and are not sent to us or to anyone else. Your progress is saved in your browser's local storage so you can come back to it, and "Start over" clears it.

If you send us your report

Nothing leaves your browser unless you choose to send us your report. If you do, we receive the details you enter (name, work email and company), your consent choices, your context answers and assessment answers, your scores and stage, your main gaps and your optional note.

They are sent to us by email through our form provider, Formspree, which processes the submission on our behalf in the United States (Formspree security). If the form is not connected, the site offers to open your own email app instead, and nothing is sent unless you send that email yourself.

Why

To reply to you about your results, to arrange a Readiness Review if you ask for one, and to keep a record of our correspondence. We use your email for marketing only if you tick the separate, optional box that asks for it.

The early-access request for Control works the same way. It sends the details you enter (your work email and what your first agent will do) to us through Formspree or, if the form is not connected, opens your own email app with them filled in. We use them only to reply to you about early access.

We keep assessment submissions and early-access requests, and the emails they create, for 24 months, then delete them. Email hello@monovus.solutions and we will delete them sooner.

Occasional insights are sent only if you tick the optional, unticked consent box, in line with Canada's anti-spam legislation (CASL). Every message has an unsubscribe link, and you can also email us to stop them.

When you email hello@monovus.solutions, we use what you send only to answer you and to keep a record of our own correspondence. We do not add you to a mailing list because you emailed us, and we do not pass your message to anyone else.

Monovus operates a private application, registered with Google as NAS Offsite Backup, whose only job is to copy backup archives from a machine you control into a Google Drive account you control.

What it accesses, and why

The application requests Google Drive access so it can create a backup folder and write, read back, verify, and prune archive files inside it. Reading is needed because a backup you cannot restore is not a backup: the application must list and download its own files to verify and restore them.

What it can actually see

Archives are encrypted on the source machine, before upload, using restic with AES-256. Google Drive receives opaque encrypted blocks. The encryption key never leaves the source machine and is never transmitted to Monovus or to Google.

The practical consequence: neither Monovus nor any Monovus employee can read the contents of your backups. Not because we promise not to — because we do not hold the key.

Where the data goes

Into your Google Drive, and nowhere else. The application has no Monovus-operated server component. There is no telemetry, no analytics, and no copy sent to us. Nothing is transferred to any third party.

Retention and deletion

Backup archives stay in your Drive until you or your retention policy removes them, because they are your files in your account. You can delete them yourself at any time, and you can revoke the application's access entirely at myaccount.google.com/permissions. Revoking access stops all further reading and writing immediately.

The only Google data the application stores locally is the OAuth token that lets it reconnect without asking you again. Revoking access invalidates it.

Concretely, we do not and will not:

• transfer Google user data to third parties, except as required by law;
• use it for advertising, ad targeting, or audience building;
• use it to train, fine-tune, or evaluate generalised machine-learning or AI models;
• sell it, ever;
• allow a human to read it, except with your explicit permission for a specific support request, or where required by law.

We do not sell or rent personal information, run third-party trackers, serve advertising, build profiles or use dark patterns to obtain consent. If we ever need to do something this page does not describe, we will change this page before we do it, not after.

Email hello@monovus.solutions and we will tell you what we hold about you, correct it or delete it, within 30 days. We will not ask you to justify the request.

Monovus operates from Ontario, Canada, and handles personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are unhappy with how we handled a request, tell us first; you can also contact the Office of the Privacy Commissioner of Canada.

Monovus sells to businesses and is not directed at children. We do not knowingly collect information from anyone under 16.

The date at the top of this page is the date it last changed. If a change materially affects how we handle your data, we will say so plainly at the top rather than quietly editing a clause.

Monovus, hello@monovus.solutions, Toronto, Ontario, Canada. Write to that address to reach the person accountable for privacy at Monovus; we will give you their name on request.