Privacy Policy

1. Data Controller

The legal entity responsible for processing your personal data:

(International platform management: Montade Arche LLC, New York, USA)

2. Our Website and Cookies

Our website does not use third-party analytics or advertising cookies that track the user.

Your language and theme preferences are stored only in your browser’s local storage (localStorage); they are not transmitted to our servers.

Our website is hosted on the servers of the hosting provider Hostinger. For the purposes of security, prevention of cyber attacks and network optimisation, technical server logs (IP address, request time and page accessed) are retained for a maximum of 30 days and are then automatically deleted.

3. Communication Channels (WhatsApp, Viber, Email)

When you contact us via WhatsApp, Viber or the email address arche@montade.com, your telephone number, email address and message content are processed solely for the purpose of responding to your request. These data are archived for the duration of the business relationship or for the statutory limitation period of a maximum of 1 year from the last communication.

4. Payment Data

Credit card and bank payments are carried out via Stripe, a PCI-DSS Level 1 certified payment infrastructure. Your card number, security code or card details are never held or stored in our systems. Through Stripe, Montade receives only the summary data required for accounting and authorisation (full name, email, package type and transaction status). For tax calculation, Stripe also collects your billing address during checkout and (if entered by business buyers) your tax ID; this information is kept in the Stripe account and is not stored in Montade's systems.

5. Chat Demo

The chat demo on our website consists solely of static scenarios running in your browser. Choices made or messages exchanged in the demo are not recorded on our servers.

6. Our Role as Data Processor in Assistant Services

For the assistants we set up for businesses, Montade acts as the “Data Processor” and the business receiving the service acts as the “Data Controller”:

• The business concerned decides on the scope of the data the assistant collects from guests and on the purposes of processing.
• Message traffic is transmitted in encrypted form via the relevant platform providers (Meta / WhatsApp Cloud API, Rakuten Viber) and artificial intelligence model infrastructure providers (the provider and sub-processors used are specified in the service contract and in the list of sub-processors notified to the business; data are configured so as not to be used for model training).

7. Your Rights and Supervisory Authority

Under the Montenegrin Law on Personal Data Protection, you have the right to access your data, to request the correction of inaccurate data and to request the deletion of data that are not subject to a statutory retention obligation.

You may contact us with your requests at arche@montade.com. If you consider that your request has not been met, you have the right to lodge a complaint with AZLP, the Montenegrin data protection authority (Agencija za zaštitu ličnih podataka i slobodan pristup informacijama – www.azlp.me).