Privacy Policy
Market Monster collects the account details, workspace content and security records needed to run the service, uses a short list of named providers to do it, and does not sell personal information. You can ask to access, export or delete your data at any time.
Updated
Who we are
Market Monster is operated by Sanford Labs LLC, a single-member Michigan limited liability company ("we", "us"). This policy covers this website and the Market Monster application.
Information we collect
We collect:
- Account information you give us: name, email address and your business name. If you turn on two-factor authentication or add a passkey, we store the secret or public key needed to check it.
- Content you add to your workspace, and the team members you invite.
- Security and usage records: sign-in events, IP address, browser and device type.
How we use it
To run the service, sign you in and keep your account secure, send account email and verification codes, support you, and improve Market Monster. We do not sell personal information.
Analytics and cookies
This website uses PostHog for analytics in cookieless mode: it sets no cookies and stores nothing in your browser. PostHog counts visitors with a privacy-preserving hash calculated on its servers, and records page views and clicks on early-access links. To know which page or campaign brought you here, the site passes your first page, the referring website and any campaign tags along in the links you click, and includes them in an early-access email so we know how you found us. These requests go through our own domain at /ingest. This website uses no advertising cookies.
The Market Monster application also uses PostHog, to understand how the app is used. It links activity to your account ID, never your name or email, masks every form field in session recordings, and stores an identifier in your browser to do so.
Service providers
We share information only with providers that help us run the service, under confidentiality obligations:
- OVHcloud, which hosts our servers.
- Postmark, which sends account email.
- Have I Been Pwned, which checks whether a new password has appeared in a known breach. It receives only the first five characters of a hash of the password, never the password itself.
- Stripe, which will process payments when paid plans launch.
- PostHog, for website and application analytics. In the application, every form field is masked in session recordings.
Retention
We keep account and workspace data while your account is active and for as long as needed to provide the service and meet legal obligations. You can ask us to delete your account and data.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal information, or to object to some processing. Email michael@sanfordlabs.io to make a request.
Changes
We will update the date at the top of this page when this policy changes, and tell account holders about material changes by email.
Contact
Questions about privacy: Sanford Labs LLC, michael@sanfordlabs.io.