Monocle Prism Privacy Policy

Effective date:

October 27, 2026

Last updated:

October 27, 2026

Monocle Prism is a trade name of We'll Do It LLC.

1. Introduction

This Privacy Policy explains how We'll Do It LLC, doing business as Monocle Prism ("we", "us"), collects, uses, shares and protects personal information when you visit monocleprism.com, create an account, or use the Monocle Prism platform and its apps (the "Service").

Who we are. We'll Do It LLC, 2321 E. University Dr., Phoenix, AZ 85034, United States.

Two roles.

• Controller. For information about our own account holders, visitors and buyers (sign-up details, billing, support, site use), we decide how it is used and we are the controller.
• Processor (service provider). For the content a business puts into its workplace (its customers, contacts, records, files, messages), that business is the controller and we process it on its instructions under our Data Processing Addendum. If you are a customer of a business that uses Monocle Prism, contact that business about your information first; we will help it respond.

Related documents: Terms of Service · AI Terms · Data Processing Addendum · Acceptable Use Policy

2. Legal reasons we use your information

• Contract. To provide the Service, run your account and workplace, and process payments.
• Legal obligation. Tax, accounting and other legal requirements.
• Legitimate interests. Security, fraud prevention, keeping the Service working, improving it, and support, balanced against your rights.
• Consent. Optional marketing, non-essential cookies and similar choices you can withdraw at any time.

3. Information we collect

What we do not ask for. Monocle Prism does not ask for Social Security numbers or ITINs for its own account and billing, and the verification forms refuse them, along with EINs and bank numbers. A workplace may record tax IDs about its own customers in its records; that is Your Content. .

Prompt Shield. If you type something that looks like a password or other credential into a Monocle AI prompt, Prompt Shield warns you on your device before it is sent. Prompt Shield does not store or send what it finds. It is a caution, not a guarantee that no sensitive data is ever sent.

4. How we use information

We do not use workplace content for advertising, and we do not use it to train AI models.

5. Access to workplace content by our staff

Our policy is that our staff, including our administrators and executives, do not open the content of a customer's workplace unless that customer approves it, and the approval can be withdrawn at any time. Maintenance is done without reading workplace content where possible.

Inside a workplace, who can see what follows that workplace's own permissions, set by its administrators.

6. Monocle AI

• Default model. Monocle AI's default model is provided by Anthropic (Claude) and processed in the United States.
• Other models. You or your workplace may choose other models, including other Claude models and models provided through Google Cloud (Vertex AI). The default model and Google's models are processed in the United States. Some other models, and some background features that use Claude (documents, contracts, research), may be processed outside the United States. We list each model's processing location in the sub-processor list. A model a workplace connects with its own key, or hosts itself, runs wherever that provider or owner runs it.
• Providers we allow. We send workplace content only to AI providers whose business terms, as we have reviewed them, do not allow them to train their models on it. Provider tiers that may train on customer data are not offered.
• Your own AI keys. On plans that allow it (Max and Enterprise), a workplace may connect its own AI provider account. Requests then go under that workplace's own agreement with the provider, and that provider's terms apply.
• Confirmation before changes. Monocle AI asks the person to confirm before it creates, changes or deletes records in the workplace from chat.
• Retention. AI providers may keep requests and responses for a limited time set by their terms, to detect abuse and keep the service safe. They do not use them to train models. We do not promise that a provider keeps nothing, and deleting a workplace in Monocle Prism does not delete a provider's own safety copy within that time. Monocle Prism keeps prompts, responses and conversation history while the workplace exists; a person cannot currently delete an individual conversation. Usage records (model, amount, feature and time, not the text) are kept as billing records.

See the AI Terms for more.

7. Sharing

We do not sell personal information and we do not share it for cross-context behavioral advertising .

We share personal information with:

• Service providers (sub-processors) that run parts of the Service for us under contract (section 8);
• integrations you connect, as you authorize (section 9);
• people in your workplace, as your workplace's permissions allow;
• marketplace providers you buy from, with what they need to fulfill your order;
• professional advisers under confidentiality; government or law enforcement when valid legal process requires it; and a successor in a merger or acquisition, with notice where required.

8. Service providers (sub-processors)

Locations were checked against production configuration on 2026-10-25.

A business verification service is used for some provider and payout checks .

9. Integrations you connect

A workplace can connect services such as Google Workspace, Microsoft 365, QuickBooks, Stripe, Slack, Zoom, HubSpot or GitHub. Data moves only when someone in your workplace connects a service, and only within the permissions shown when connecting. Connection keys are stored encrypted in our vault. You can review and disconnect connections in your workplace's settings. Each connected service processes data under its own terms.

Google user data

Monocle Prism is a business platform operated by We'll Do It LLC. This section explains what Monocle Prism does with information it receives from Google when you sign in with Google or connect a Google service. It adds to the rest of this Privacy Policy, and where they differ for Google user data, this section applies.

What we access. When you sign in with Google, we receive your name, email address and profile picture (the `openid`, `email` and `profile` permissions). We use them only to create your Monocle Prism account and sign you in.

When you choose to connect a Google service to your Monocle Prism workplace, we ask Google for only the access that service needs, and only when you connect it:

• Gmail (`gmail.send`): to send the emails you write in Monocle Prism. Monocle Prism does not read your Gmail.
• Google Calendar (`calendar.freebusy`, `calendar.calendarlist.readonly`, `calendar.app.created`): to see when you are available or busy (no event details), to list your calendars, and to create and manage one calendar of its own, "Monocle Prism scheduling", for your bookings. These permissions do not let Monocle Prism change or delete events on your other calendars.
• Google Tasks (`tasks`, `tasks.readonly`): to show your tasks in the calendar view and keep them in step.
• Google Contacts (`contacts.readonly`): to import the contacts you choose.
• Google Business Profile (`business.manage`): to manage your business listings and reply to reviews.
• Google Ads (`datamanager`): to report purchases made with your business to your own Google Ads account, for people who agreed to advertising measurement.

We will update this section before we ask Google for any other access.

You can see what is connected, and disconnect it, in your workplace's settings in Monocle Prism. You can also remove our access at any time from your Google Account (https://myaccount.google.com/permissions).

How we use it. We use Google user data only to provide and improve the features you or your workplace turn on, inside that workplace. We don't use it for any other purpose.

How we store and protect it. Google user data is encrypted when stored. The keys that let Monocle Prism reach your Google services (access tokens) are kept in an encrypted vault. Inside Monocle Prism, who can see the information follows your workplace's permissions.

Sharing. We don't sell Google user data, and we don't use it for advertising, retargeting or interest-based ads. We share it only:

• with the people in your own workplace, as your workplace's settings allow;
• with the service providers we need to run the feature you asked for (for example, our hosting and database providers), under contracts that let them use it only for that purpose;
• when the law requires it, or to protect the security of our users and services; or
• with your permission.

Monocle AI. We don't use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. Monocle AI uses it only to answer the person who asked, inside their workplace. When answering requires an AI model, the request is sent to the model's provider under business terms that don't allow that provider to train its models on it.

Keeping and deleting it. When you disconnect a Google service, we stop accessing it and delete the access tokens we stored for it. When your Monocle Prism account or workplace is deleted, we delete the Google user data we stored for it, except records the law requires us to keep. You can ask us to delete your Google user data at any time by emailing support@monocleprism.com with the subject "Privacy Request". We act on each request; it is not done automatically.

Limited Use. Monocle Prism's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact. We'll Do It LLC, operator of Monocle Prism. For questions about this section or your Google user data, email support@monocleprism.com with a subject line that names this section.

10. Cookies

monocleprism.com uses:

• Strictly necessary: a sign-in session cookie (ends after 30 minutes without activity, and after 12 hours at most); short-lived cookies (10 minutes) during a sign-in or when connecting a service; a short-lived cookie for platform administrators; and security and bot-protection cookies set by Cloudflare Turnstile on some public forms.
• Analytics and marketing: none in the app code or the production configuration on 2026-10-24; if any are added, they load only after consent.

We honor Global Privacy Control signals as an opt-out of sale and sharing.

11. Security, retention and transfers

Security. Encryption in transit (TLS); data encrypted at rest by our hosting, database and storage providers, each of which states that it encrypts data at rest by default; connection keys and saved logins stored encrypted (Monocle Vault); access controls and strong authentication for staff; vendor review before granting a service provider access to personal data; edge protection through a content delivery network and firewall. We do not publish our specific tools. Enterprise customers may request a security overview under a non-disclosure agreement.

Retention.

• Account and billing records: up to 10 years where required for tax and accounting.
• Workplace content: while the workplace is active. Closing a workplace archives it and keeps its content; we delete it on your request, as set out in the Terms (section 12). A personal workplace is deleted when its owner deletes their account.
• Logs: application logs are kept for 30 days. Sign-in, permission and payment audit records are kept for security and legal purposes.
• Marketing: until you unsubscribe (we keep a suppression list).

International transfers. We operate from the United States. If you are in the EEA or UK, your data is transferred to the United States. We rely on service providers certified under the EU-US Data Privacy Framework or offering Standard Contractual Clauses. We have not yet executed Standard Contractual Clauses of our own, and we are not going to claim that we have.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, port your data, and withdraw consent. California residents may also opt out of sale and sharing and limit the use of sensitive personal information.

Email support@monocleprism.com with the subject "Privacy Request". How long it takes. We aim to respond to California requests within 45 days, with one 45-day extension on notice. We respond to EEA and UK requests within one month, with up to two more months on notice for complex requests, in each case as the law permits. If a request involves data held by a service provider, more time may be needed and we will keep you informed.

How we verify you. Before we act, we verify your identity using information already on file. To know the categories of personal information we collect, or to delete it, we need at least two matching data points. To know the specific pieces we hold, we need at least three matching data points and a signed statement under penalty of perjury. We do not require verification to opt out, to opt in, or to limit the use of sensitive personal information.

Authorized agents (California). California residents may use an authorized agent. We may ask for the agent's signed written permission from you and verification of your own identity, or a valid power of attorney under California Probate Code sections 4121 to 4130.

Notices for specific places. *California:* the rights above apply. We do not sell personal information, and we do not knowingly sell or share the personal information of consumers under 16. *EEA and UK:* the controller is We'll Do It LLC, and you can contact us at support@monocleprism.com. UK residents may complain to the Information Commissioner's Office (https://ico.org.uk/make-a-complaint/). EEA residents may complain to their local data protection authority; the list is at https://edpb.europa.eu/about-edpb/about-edpb/members_en. *Mexico:* you may exercise your rights of access, rectification, cancellation and opposition (ARCO) through the request process above.

If your information is in a business's workplace, we will pass your request to that business, which decides it as controller, and we will help it.

13. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children under 16.

14. Changes

We will post changes here with a new effective date and, for material changes, email account owners.

15. Contact

We'll Do It LLC, doing business as Monocle Prism 2321 E. University Dr., Phoenix, AZ 85034, United States Email: support@monocleprism.com

Monocle Prism is a trade name of We'll Do It LLC.