Privacy Policy: Monkeys in Space

Operator: Verlo Labs, LLC ("Verlo Labs", "we", "us")
Privacy contact: privacy@verlolabs.com

This policy explains what Monkeys in Space (the website and app at monkeysinspace.app, bio pages and links) collects, how we use it, and your choices. All time periods in this policy are calendar days.

The short version:

• We use your data to show you your own stats and insights.
• We don't sell your data or use it for ads.
• Your bio page and links are public. Your stats from TikTok and YouTube stay private to your account.
• We count visits to your bio page, taps on your links and visits to our own website, not people: we use no cookies to count them, build no profile of any visitor, and our code never stores a visitor's IP address. Where you're signed in, a cookie of ours keeps your own visits and taps from counting.
• Our hosting provider, Vercel, may check that a visitor is using a real browser when traffic looks automated or unusually heavy; a browser that passes keeps Vercel's security cookie, valid for up to 1 hour, which we don't read or use.
• You can disconnect a platform or delete your account anytime, and we'll delete the data.

1. What we collect

Account information

• Name, email address, password (stored hashed) or login-provider details, and when you created your account
• If you choose "Continue with Google", Google shares your name, email address and profile picture with us through our sign-in provider, Clerk, along with an ID for your Google account and whether Google has verified that email address. We use them to create your account and sign you in, and that email address becomes your account's email address, used as this policy describes. Our own records keep only your email address; Clerk keeps the rest with your sign-in details, along with the sign-in tokens Google gives it, which we use only to ask Google to revoke them before we ask Clerk to delete your sign-in account. Google knows you used it to sign in to Monkeys in Space, under Google's own Privacy Policy (https://policies.google.com/privacy (opens in a new tab)). You can stop using Google to sign in anytime in your Google Account's connections (https://myaccount.google.com/connections (opens in a new tab)), and you can still sign in with a code we email you; that doesn't delete what Clerk already holds; when you delete your account, we also ask Clerk to delete your sign-in account (section 6).
• If you already have an account with the same verified email address, Continue with Google opens that same account and adds Google as a way to sign in.
• Signing in with Google never connects YouTube. Connecting YouTube is separate and optional: you give its read-only permissions on Google's own screen, and you can use a different Google account for it.
• If you turn on two-step verification: the secret key your authenticator app uses to make sign-in codes, and your backup codes. Our sign-in provider, Clerk, keeps them to check your codes when you sign in. They go straight to Clerk and never reach our own servers.
• When you last opened the app, so your dashboard can show what changed since your last visit and so we can tell when an account is no longer used (section 6)
• Your confirmation that you're 18 or older, and when you accepted our Terms and this Privacy Policy (and which versions)
• When you sign up, open the app or start a plan, we check the approximate country and region our hosting provider attaches to the request, to confirm sign-ups are open where you are and whether paid plans are open there. We don't store it.
• Your plan. If you choose a plan, our payment processor, Stripe, collects your card and billing address at checkout; we never receive or store your card number. We give Stripe your email address and an internal account ID. We keep Stripe's IDs for you and your plan, whether it's monthly or yearly, its status, when your trial and each billing period end, whether you've turned renewal off and when, when it ended and why, whether you've used your free trial, and when you first paid. When you tick the box agreeing that your plan renews, we record which wording you saw, the plan, its price and currency, when the trial ends and when you agreed. We read your billing country, province or state, and postal code from Stripe to check you're in a place where paid plans are open (section 4), and don't keep it. If we noted a province's code for you earlier, when paid plans there hadn't opened, we no longer use it: it and when we noted it are deleted with your account, or sooner. If we give you complimentary access: its kind, a short reason, and when it starts and ends. If your page is paused because a plan ended, when it was paused.
• A log of consent, deletion and moderation events: for example when you connected or disconnected a platform, accepted a new version of this policy, added Google as a way to sign in, turned support access on or off, let search engines list your bio page or turned that off, chose to forward your old address or stopped forwarding it, added a profile picture or wallpaper, what our automatic check found about one, when we removed one that was blank, when data was deleted, when a link, page, picture or wallpaper was taken down, when we looked at your profile picture or wallpaper, when we looked up your account's records, when we viewed your account with support access on, when we gave you complimentary access or ended it, or when we added your page to "In the spotlight" on our homepage, changed that entry or removed it. Each entry holds an internal account ID, the platform, the event, a short reason, a version and a date, never your stats, email address or content.

Data from platforms you connect

When you connect an account, we receive the data that platform allows, based on the permissions you approve:

• YouTube (through YouTube API Services): Channel details (channel ID, name, handle, a link to your channel's profile picture, subscriber count, total views, video count). Your videos' details (title, publish date, length and link) and statistics (views, likes, comments). Owner analytics from YouTube Analytics, per day: views, watch time, average view duration and average percentage viewed, subscribers gained and lost, likes, comments, shares, card impressions and clicks, and engaged views. We also collect:
  • Your past daily figures: when you connect, we ask YouTube for your channel's past daily analytics and daily views by traffic source, going back up to 24 months.
  • Views by traffic source: how many views came from each kind of source (for example YouTube search or related videos), per day. Only the kind of source, never search terms or which other videos sent the views.
  • Thumbnail impressions: how often YouTube showed each video's thumbnail, per video per day (the report also has each video's click-through rate, which we don't keep). We also add up each day's impressions into a total for your channel. YouTube only provides these through a daily report, so we ask YouTube to set up a report job on your channel. It starts with the 30 days before it was set up, and we ask YouTube to cancel it when you disconnect YouTube or delete your account, if our access to your channel still works (unless another Monkeys in Space account has the same channel connected, in which case it keeps running for them). If you removed our access in Google's settings first, we can't cancel it, and YouTube retires it once its reports go unread.
  • Per-video figures for "Post vs your typical": YouTube's average view duration, average percentage viewed and subscribers gained for your videos, so we can show what stood out on a post that did better than your typical.
  • Audience breakdowns: the share of your viewers in each age group and gender, and your views by country (your top 25 countries), which we turn into shares. These are totals and percentages; they never identify a viewer.
• TikTok: Profile info (your TikTok account ID, display name and a link to your profile picture). Follower, likes and video counts. For your public videos: title and description, publish time, duration, link, and view, like, comment and share counts.

We only request the permissions our features need, and they're read-only: we can see your stats, but we can't post, edit or delete anything on your YouTube or TikTok. The one thing we ask YouTube to set up is the daily report job described above, which only prepares your own numbers for us.

Things you add

• Notes you add to your timeline (a date, a short note you write, and the type you pick: plain, new format, sponsor or new posting time)
• The follower or subscriber goal you set for each platform
• Links, labels and bio page content (these are public; see section 4)
• If you add a profile picture: the picture, cropped to a square, which our server turns into three smaller copies (120, 240 and 360 pixels across) and keeps instead of the file you picked. The copies carry none of the file's other details, such as where or when a photo was taken. With them, we keep details such as when you added the picture, what our automatic check found and when (section 2), whether we've looked at it or taken it down, a random id for it, and fingerprints of it (short codes worked out from the picture, which let us spot an exact copy of a picture we've taken down).
• If you add a wallpaper (a picture behind your bio page): the picture, cropped to a phone screen's shape, which our server turns into copies for phones and wider screens (the whole picture, up to 768 pixels across; its middle, up to 1,440 pixels across; and the whole picture again, up to 1,000 pixels tall, on a wider background in the colours of its own edges) and keeps instead of the file you picked, with the picture's average colour, which your page shows while the picture loads. The copies carry none of the file's other details, such as where or when it was taken. With them, we keep the same details as for a profile picture: when you added the wallpaper, what our automatic check found and when (section 2), whether we've looked at it or taken it down, a random id for it, and fingerprints of it.
• Link drafts you keep: the address, link title and ending you typed for a link you haven't added yet. Only you see them: a draft is never on your bio page and opens nothing.
• Where you'll post a link, for a link that has one (YouTube, TikTok, Instagram, X or Other; new links no longer ask): a note for you, never shown on your bio page
• Notification settings, and your time zone as your browser reports it, so quiet hours and the days and times we show you follow your local time
• Your appearance choices (theme and text size), saved with your account

Link and bio page visits

When someone clicks one of your links or visits your bio page, we add one to an hourly count for that link or page. Each count is broken down by:

• the hour
• the link clicked (or the bio page visited)
• the referring site's or app's name, for example instagram.com (if the browser provides it), never the full address it came from, or, when the browser doesn't say, the app whose built-in browser opened the page or link (for example Instagram). For a visit to your bio page, or a tap on one of its buttons, we also note which kind of site the visitor came from (for example TikTok), taken from that referring site or app, from a tag on your page's address or from the app whose built-in browser opened it, so you can see which places lead to which links. When someone opens one of your links by scanning that link's own QR code, we note that the visit came from a QR code. Nothing about the person is kept.
• the device type (mobile, tablet, desktop or other)
• an approximate country, from the location our hosting provider attaches to each request

Visits to our own website are counted the same way: daily totals by the tag on the link someone followed (for example ?src=reddit) and the referring site's or app's name, or the app whose built-in browser opened it, plus how many accounts were created from each tag. When you create an account, we also note which of our links you came from, if any, so we can see which ways of finding us work. No cookies are used, nothing about a visitor is kept, and these totals are only for us.

Each bio page also has a Share button. When someone uses it to share the page or copy its link, we add one to a daily total of shares for that page. We keep only the day and the total, nothing about who shared, how or where.

We don't store raw IP addresses. Our code never reads, stores or hashes a visitor's IP address, and we don't set or read a cookie to count or recognize visitors. The one exception is a cookie of ours that keeps your own visits and taps from counting. We don't keep a log of clicks or visits in our database: we keep hourly counts, and when a link gets few taps a count can be as small as 1. In Insights, a country, device type or site with fewer than 3 visits or taps never gets a number of its own, and a page or link with fewer than 3 in all shows no breakdown. The picture of your page's last 7 days you can make in Insights, to save or share, keeps the same rule: it shows your page's own counts (its totals, where most visits came from and your most-tapped link), never a count under 3 and nothing about who tapped, and we make it only when you ask and don't keep it. A count never includes an IP address, a cookie, or anything else that identifies who tapped. To leave out bots and link previews, and to tell which app's built-in browser opened a link or page, we check the kind of browser a request says it comes from, once, and don't store it ourselves. To keep a reload from counting as another visit, a bio page can load one tiny picture from us, and we ask the browser to keep it for 30 minutes; while it does, the browser doesn't ask for it again and we don't count that visit again. Its address names only the page and where the visit came from (the referring site's or app's name, a tag on your page's address, or the app whose built-in browser opened it), never anything about the visitor. Visitors in the EU, the EEA, the UK, Switzerland or a place tied to them, or whose country we can't tell, going by the approximate country above, don't get the picture, and each reload counts for them, as before. We don't build profiles of the people who click your links.

Like any website, our hosting provider (Vercel) receives a visitor's IP address to deliver the page, and the server logs we can see hold a line for each request, including the page asked for and the kind of browser, for up to 1 day (see "Server logs" below). If something breaks on a page, an error report goes to our error-tracking provider (Sentry), set up to remove personal data and not to store IP addresses.

If you visit a bio page or tap a link, our database keeps only the counts described above, and the server logs we can see are gone within 1 day, so there's no record of you for us to find, copy or delete. Questions: privacy@verlolabs.com.

Notifications

Alerts are worked out from your stats and shown in the app. If you turn on push notifications, we store a push subscription for each device you turn them on for (the address its browser's push service gives it and the keys that let only that device read our messages), when you turned them on there, when a notification last got through, and how many tries to reach it have failed since then, so we can send notifications. You can turn them off anytime.

If you email us

If you email support@verlolabs.com or privacy@verlolabs.com, we get your email address, your message and anything you attach. We use them to answer you and, for a report about a link or bio page, to keep a record of what we did about it. Our email provider (Zoho) holds them for us.

Usage and technical data

• Basic logs (for example errors and when features are used) to keep the Service working and secure
• Server logs: Our hosting provider keeps the basic server logs we can see for up to 1 day for security and troubleshooting. IP addresses are not visible to us in these logs. The hosting provider itself (Vercel) still receives each visitor's IP address to deliver pages, and collects IP addresses for its own security, such as protecting against denial-of-service attacks.
• Error reports: when something breaks, a technical report of what went wrong and where in our code goes to Sentry, with personal data (such as email and IP addresses) and access tokens removed first
• Cookies: the cookies our sign-in provider, Clerk, sets to keep you logged in and to protect sign-in from abuse (including security cookies from Cloudflare, which runs Clerk's sign-in service), and one short-lived security cookie of our own while you connect a platform, which checks that the connection was started by you, remembers where to bring you back afterwards, and expires within 10 minutes. If you've connected more than one platform, one more small cookie of our own remembers which platform's tab you last opened on your dashboard, so it opens there next time: it holds only the platform's name (for example "tiktok"), is sent only to your dashboard, and expires 180 days after you last open a tab. When you're signed in, one more cookie of ours stays in that browser for a year so your own visits, taps and shares from it don't count: it holds a code made from your account (not your name or email) and is read only for that and for its switch in Settings, "Don't count my own visits on this browser". If you turn the switch off, the cookie keeps that code and only remembers that the switch is off. A browser keeps one at a time, for the account it was last set for. Clerk sets its cookies only from our homepage (which checks whether you're already signed in), the sign-in and sign-up screens and the screens you see when signed in, never from bio pages, links or our Terms and Privacy pages. We don't use advertising or analytics cookies. Our hosting provider, Vercel, may also ask a browser to pass a quick security check when traffic looks automated or unusually heavy, on any of our pages, bio pages and links included. A browser that passes keeps a short-lived security cookie from Vercel, valid for up to 1 hour, so it isn't asked again. We don't read or use it.
• When you open your dashboard, your browser saves your bio page's handle on that device (in its local storage), so your page can show you an "Edit page" button there. A bio page checks for it only in the browser it's opened in: nothing is sent to us, and visits are counted the same way. Signing out or deleting your account on that device removes it, and so does clearing your browser's data for our site.
• On a bio page, unless you're in one of the places named in "Link and bio page visits" or we can't tell your country, your browser may keep a tiny picture from us for 30 minutes, so a repeat visit in that time isn't counted again.
• If you turn on push notifications, your browser keeps a small script from us (a service worker) on that device so notifications can arrive

Online tracking

• We don't let advertising, analytics or other companies collect personal information about your activity over time and across different websites when you use Monkeys in Space. There are no ad or analytics trackers on our pages, bio pages or links.
• Our sign-in provider, Clerk, runs only on the pages named under "Cookies" above, and uses its cookies and your IP address only to run sign-in for us. To keep your account secure, Clerk records the browser, device type, IP address and an approximate city and country (worked out from the IP address) for each signed-in session. When you sign in or sign up, Clerk also records the time zone your browser reports and keeps one with your account, so its emails to you can show times in your time zone. We don't use this to track where you are, and our app doesn't use or store it (the time zone under "Things you add" above comes from your browser, not from Clerk). We look at it only to investigate a security problem on your account (for example, if you ask us to or we suspect someone else has signed in to it), or when the law requires it. Our other service providers (section 4) receive technical information, such as your IP address, only to run the Service for us and keep it secure. When you're signed in, your browser loads your connected accounts' profile pictures straight from YouTube's or TikTok's own image servers, which receive that request, including your IP address, under their own privacy policies.
• If you choose to sign in with Google or connect YouTube or TikTok, those sign-in and permission screens are run by Google or TikTok under their own privacy policies.
• Do Not Track. Apart from the YouTube and TikTok accounts you choose to connect, we don't collect information about your activity on other websites or apps, and we don't track you across sites. Some browsers send a "Do Not Track" or Global Privacy Control signal. Because we don't do the kind of cross-site tracking these signals are meant to stop, and we don't sell or share personal information for advertising, the Service works the same way whether or not your browser sends one.

If you give us written permission to show your page on our homepage. Our homepage can show a section called "In the spotlight", with a few bio pages. Your page is only ever there if you've given us written permission; signing up isn't permission. For a page on that list we keep a record: the day your permission reached us, a short note of where we keep it, when we last confirmed it still applies, the dates it's shown between, when we added it, whether it's turned on, and the short line shown under your name, if you've agreed one. We also keep its place on the list, which says nothing about you. The line shows on the card. The rest of the record is seen only by our Founder and, apart from its place on the list, by you, in Download my data. The name and picture it shows are the ones your public bio page shows.

Information from others. Some of what we hold about you comes from others, not from you: YouTube and TikTok send the data above when you connect them, Google shares what's described above if you choose Continue with Google, and someone who reports your bio page or a link to us may tell us about it. Verlo Labs, LLC (section 11) collects and holds it, uses it as section 2 says and shares it only as section 4 says, and you can ask to see or correct it (section 7).

2. How we use it

• To create your account and sign you in, including the emails for that, such as codes to sign in, confirm your email or reset your password, and any notice about your account's security (our sign-in provider, Clerk, sends them for us)
• To show you your stats, trends, alerts and link analytics
• To show you which of your accounts each set of numbers comes from, by the name and profile picture that platform shows (only to you, never on your bio page)
• To show your bio page's display name and picture, and a short line you've agreed, in "In the spotlight" on our homepage, only with your written permission and only between the dates it covers
• To send alerts and notifications you've turned on
• To run your plan and bill for it: starting your free trial and giving one per account, charging your card through Stripe, emailing you when your plan starts, 3 days before a trial ends, before a yearly plan renews, once a year about a monthly plan and when your page pauses, emailing accounts made before paid plans began once to say they're beginning and once to correct what that email said about where plans are available, pausing your page when a plan ends, checking that you're in a place where paid plans are open, and refunding a charge made after you cancelled renewal or deleted your account
• To answer your questions, requests and reports
• To keep the Service secure, prevent abuse and fix problems. This includes looking at public bio pages and links, and where they lead, to catch things like phishing or impersonation.
• To check that profile pictures and wallpapers follow our Terms: our server checks each one automatically, new and already added, looking at the whole picture for sexual content. The check runs in our app on our hosting provider (section 4), so no other company sees the picture, and it doesn't detect or recognise faces or guess anyone's age. We also look at new ones after they're added, whether or not your page is public, and we look into every report. We take down one that breaks our Terms. If one came through exactly blank, we remove it and tell you.
• To follow the law and the rules of the platforms you connect

What we don't do:

• sell your data
• use platform data for advertising or ad targeting
• combine data across our customers to build benchmarks or rankings
• build profiles of the people who click your links
• send newsletters or marketing email

3. Features we've retired

On October 19, 2026 we retired the AI read, Ask and the tags you could add to your posts. Since then, nothing has been sent to an AI provider, and every stored AI read, Ask question and answer, and tag is deleted from our database by October 21, 2026. Deleted data leaves our database provider's restore history and our encrypted backups within 2 days (section 6). Anthropic, the AI provider that wrote the reads and answers, deletes what we sent it and what it wrote under its own retention rules. The consent log (section 1) keeps when you turned the AI read on or off, and when your data was deleted, for 36 months, like every entry in it.

4. Who we share it with

Your bio page and links are public. Your bio page stays private until you make it public, and until then its address shows visitors the same message as an address with no page. Bio pages ask search engines not to list them, unless you turn on "Let search engines find my page". Anyone can see your bio page's handle, display name and picture (your initials, or your profile picture if you add one), the wallpaper behind your page if you add one, the bio you write under your name and the text of the links you show on it, and anyone who taps one of your links is sent to the address you saved, except outside the dates you set for it, when it opens your bio page instead while your page is public. A private link is hidden from your page, but anyone with its link can open it. If you rename your bio page and tick "Forward your old address here for 90 days", your last address forwards to it for 90 days: anyone who opens that address is sent to your bio page, which says "This page moved from" that address. You can turn this off anytime in Settings ("Stop forwarding"). Only your last address forwards, and only while your bio page is public. Our hosting provider may keep copies of your public page for us, to help it open quickly: each is shown to visitors for up to a minute after it's made, and we ask our provider to delete them as soon as you change your page, make it private or delete your account. While your page is public, others can make and keep their own copies of it, under their own policies, not ours. For example, an app or chat where someone shares your page's link may fetch its title, description and share picture to show a preview, and keep that preview; and if you let search engines find your page, they may keep a copy of it until they next check it. Your page's share picture shows your name, your @username and your initials. It can show your profile picture in place of your initials if you've added one and we've looked at it. Those copies can still show up after you remove your profile picture, turn off "Let search engines find my page", make your page private or delete your account: in search results until the search engine checks your page again (that can take a while, sometimes weeks or more), in link previews already shared in apps and chats, and in web archives. We ask search engines to drop your page and the Internet Archive not to save it, but we can't delete copies others already have. Don't put anything on them you want kept private.

"In the spotlight" on our homepage is public too. If you've given us written permission, anyone who visits our homepage can see your page's display name and picture, the short line under them if you've agreed one, and a link to your page. The rest of our record of your permission is never shown there. Search engines read our homepage whatever your "Let search engines find my page" setting says, and our hosting provider keeps copies of it to open it quickly. Others, search engines included, can make and keep their own copies, under their own policies, not ours, and those can still show up after your page has left the homepage.

Apart from that, we share data only with service providers that help us run the Service, under contracts that limit their use of it:

• hosting and infrastructure: Vercel (hosting, and storage for profile pictures and wallpapers) and Neon (database)
• backups: GitHub (Actions), which runs the nightly job and a monthly restore test, and briefly holds the unencrypted copy while it's encrypted or tested, and Cloudflare (R2), which stores the encrypted copy
• sign-in: Clerk (holds your email address and sign-in details, and what Google shares if you choose Continue with Google)
• error reports: Sentry (reports have personal data and access tokens removed)
• email: Zoho (our support and privacy mailboxes) and Resend, which sends the emails about your plan, the one-time notice that paid plans are beginning and its one-time correction, and the emails about disconnecting an account that hasn't been opened in 90 days (it receives your email address and the email)
• payments: Stripe (card payments, tax, receipts and invoices, and its own emails about them)

If you turn on push notifications, your browser's push service (for example Apple, Google or Mozilla) delivers them under its own terms. Each notification reaches it encrypted, so it can't read what it says.

We may also share data:

• if the law requires it, or to protect people's safety or our legal rights
• in a business transfer, such as a merger or sale, where the buyer must honor this policy. We won't transfer information we received from Google (YouTube) in such a transfer without first asking for your explicit consent; if you don't give it, we delete that information.

Your connected platform data stays private to your account. We don't show your connected platform data to other users. We see it only when you've turned on "Support access" in Settings, or when the law requires it. Support access lets us view, never change, your dashboard numbers, posts, notes, links and click counts, and settings, only to help with what you asked us about. It never shows us your platform login or keys, and we don't post, export, copy or share anything. It turns itself off 24 hours after you turn it on, or sooner if you turn it off. We log each time it's turned on or off, and each time we view your account with it on. To run the Service and answer support requests, we can see our own records about your account, such as whether a platform is connected, when we last updated your numbers and whether that worked, and the consent log in section 1, but not your numbers or content, and each lookup is logged. Our Founder, the only person with access to our sign-in provider's dashboard, can see its list of accounts: each account's name, email address, profile picture, and when it was created and last signed in. That list is used only to run the Service and answer support requests, and is never exported or shared. Looking at it isn't logged. The session details in section 1 are still looked at only for a security problem, or when the law requires it. The automated parts of the Service (collecting your numbers, working out your alerts) process it without anyone viewing it.

Where we operate. Monkeys in Space accounts are open to people who live in the United States (including Puerto Rico and Guam), Canada (outside Quebec, Saskatchewan and Manitoba, for now), Australia, or New Zealand. An account made before a place closed to new accounts stays, as our Terms of Service say. To start a plan, your billing address must be in one of those places too: we check it at checkout and end a plan started from anywhere else at once, refunding anything charged. Bio pages and links can be viewed from anywhere. Verlo Labs is based in the United States. Your account data is stored in the United States, and an encrypted backup copy is kept with Cloudflare. Some of our service providers, such as our hosting network, also handle it in other countries while delivering the Service, and use it only to provide the services listed above. Your browser's push service may also deliver notifications from other countries. While your information is outside your country, it's subject to the laws there and may be accessed by that country's courts, law enforcement and national security authorities. Our privacy officer (section 11) can answer questions about our service providers.

5. YouTube-specific information

• Monkeys in Space uses YouTube API Services.
• By connecting YouTube or using the Service's YouTube features, you agree to the YouTube Terms of Service: https://www.youtube.com/t/terms (opens in a new tab).
• Google's Privacy Policy applies to YouTube data: http://www.google.com/policies/privacy (opens in a new tab).
• Monkeys in Space's use of information received from Google APIs will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.
• You can revoke our access to your YouTube data anytime through Google's security settings: https://security.google.com/settings/security/permissions (opens in a new tab). You can also disconnect YouTube in our app.
• We check at least every 30 days that our access is still authorized.
• YouTube details other than statistics, such as your videos' titles, lengths and links, and your channel's name, handle and profile-picture link, are refreshed or deleted within 30 days. We don't store video descriptions, categories or thumbnails, and for your profile picture we keep only the link, never the image.
• Every 7 days we ask YouTube whether each video we store still exists. When YouTube tells us a video is gone, we check again a day or more later, and if it's still gone we delete that video's numbers here. We never keep a video's numbers more than 30 days without YouTube confirming it still exists.
• We store YouTube data in our database (hosted by Neon, with an encrypted nightly backup at Cloudflare R2) and use it only to show you your own stats, alerts and insights. We share it only with the service providers in section 4, never show it to other users, and never combine it with other creators' data.
• We don't show ads, and no third party serves ads or other content in Monkeys in Space, apart from the sign-in screens our sign-in provider (Clerk) provides, the security check our hosting provider (Vercel) may show (section 1), and your own profile picture under "Connected as", which your browser loads straight from YouTube's or TikTok's image servers.
• You can ask us to delete the YouTube data we store at any time: disconnect YouTube or delete your account in Settings, or email privacy@verlolabs.com. We delete it within 7 days. Deleting the data we store does not, in any way, affect data stored by YouTube. To delete data on YouTube itself, use YouTube or another app that YouTube allows to delete it.

5b. TikTok-specific information

• We use the TikTok data described in section 1 only to show you your own stats, alerts and insights. It shows in your account and nowhere else: never on your bio page, never to other users, and to us only when you've turned on Support access (section 4). We never combine it with other creators' data.
• You can remove Monkeys in Space's access to your TikTok account anytime in TikTok's own settings, or disconnect TikTok in our app.
• If TikTok tells us you've removed our access, we delete your TikTok data here right away. Either way, once our access stops working we delete it as described in section 6.
• TikTok's Privacy Policy applies to your TikTok account and the data TikTok holds: https://www.tiktok.com/legal/privacy-policy (opens in a new tab).
• Deleting the data stored here doesn't affect data stored by TikTok. Your account, your videos and your own TikTok analytics are untouched.

6. How long we keep data, and deletion

• Connected platform data: Kept while the platform is connected and needed for your features. Some platforms only keep data for a limited time, and we save your stats so your history doesn't disappear. Daily figures older than 24 months are deleted.
• TikTok videos you delete or make private: Each time we refresh your TikTok data, TikTok gives us your recent public videos (up to 60). When a video we store should be in that list and isn't, we check again a day or more later, and if it's still missing we delete that video and its numbers here. Older videos, beyond that list, can't be checked this way, so their numbers stay until you disconnect TikTok or delete your account (daily figures older than 24 months are deleted either way).
• When you disconnect a platform: We revoke our access and delete that platform's data right away, including its alerts. If any part of that deletion fails, a daily cleanup job finishes it, within 7 days at the latest. Reconnecting later starts fresh: nothing is restored. Your notes, goals and links stay, since they're your own content.
• When you revoke access through the platform instead (for example in Google's settings): We check our access every time we refresh your data. If we can't confirm it for 7 days, we delete that platform's data, and the app warns you before that happens.
• When you delete your account: Your account closes at once: you're signed out, and our access to your connected YouTube and TikTok accounts ends (we ask each platform to revoke our connection tokens, and delete our copies). We also ask our sign-in provider, Clerk, to delete your sign-in account at the same time. Your bio page and its links stop working right away, and we delete your account and associated data within 7 days, apart from the records listed below (names on hold, the consent, deletion and moderation log, takedown records, emails you sent us, and records the law requires us to keep).
• Names on hold: When you delete your account, we keep your bio page's name and your links' endings for 90 days, with nothing that links them to you, so nobody else can claim them and send people who follow your old links somewhere else. If you rename your bio page, your old name is held for you for 90 days, and while it's held your last address forwards to your bio page if you chose that when you renamed (section 4). Links copied with your old name keep working while it's held, then stop, and outside a link's dates they open your old address instead. If you delete a link, its ending is held for you for 90 days, then released. If you change a link's ending, its old ending keeps opening that link for 90 days unless you stop it sooner or delete the link, and it's held for you for those 90 days, then released. A page or link we've taken down for breaking our Terms keeps its name on hold until we restore it.
• If you don't open the app for 90 days: If 90 days pass without you opening the app, and you don't have a plan or free access from us, we disconnect your YouTube and TikTok accounts and delete the data we hold from them within 7 days, the same as when you disconnect a platform. Being connected, our daily refreshes and visits to your page don't count as opening the app. We email you about 7 days before, and opening the app before then keeps them connected. Your bio, links, design, pictures and counts stay until the 12 months below, and you can connect again anytime at no charge, though some history can't be fetched again.
• Database restore history: After we delete data, it can stay in our database provider's (Neon's) restore history for a short period, currently up to 6 hours, before it's gone for good.
• Backups: We keep a nightly encrypted copy of our database with a separate provider so we can recover from a disaster. Each copy is deleted within 2 days of being made, so data we delete can remain in an encrypted backup for up to 2 days before it's gone for good.
• If you stop using Monkeys in Space: If 12 months pass without you opening the app, and you're not paying for a plan, we close your account and delete its data the same way.
• If we close your account under our Terms (for example, for repeated copyright infringement): we close it and delete its data the same way as when you delete it yourself.
• Unfinished sign-ups: A login made without our sign-up page's 18+ box (for example on our sign-in provider's own sign-up page) never becomes an account: we delete it right away. If you sign up but don't pick a username and have no link, connected platform, plan, free access from us or anything you've written, like a note, a goal or a bio, we delete your login and account after 24 hours. Either way, it's deleted within 3 days at the latest. If you've confirmed you're 18 or older, those 3 days count from your last visit.
• Link drafts: Kept until you add the link or delete the draft, and deleted 90 days after you last changed it, or with your account.
• Link and bio page counts: Kept until you delete your account or the link. A link you turned off before you could delete links doesn't work and isn't on your bio page; its counts stay for you. Deleting a link removes it and its counts right away, and its ending is held for you for 90 days, then released. While we've taken down your bio page or any of your links, you can't delete links. Your bio page's share counts are kept and deleted exactly like its visit counts.
• Your bio (the short text under your name, called "Currently" and "bio or status" until October 2026): It stays until you change or remove it. If you had set a Currently line to end, it still ends at the time you chose and is deleted within 7 days after, unless you keep it as your bio. While we've taken your page down, it isn't deleted this way.
• Your profile picture and wallpaper: Each is kept until you remove it or add another, then deleted right away (if a delete doesn't go through, our daily cleanup job finishes it). If our automatic check flagged one you remove or replace, we keep it, shown to no one, for up to 30 days, then delete it. They're deleted with your account like the rest of your data. While we've taken one of them or your page down, it isn't shown to anyone and you can't remove or replace it: we keep it until we restore it or your account is deleted. If the law requires us to keep one for a report to the authorities, we keep it for up to 1 year and 14 days from when we last took it down, even after you remove it or delete your account.
• Headings and text between links: We no longer show headings and text between links. Any that were saved are in Download my data until November 8, 2026, and then we delete them. While we've taken your page down, they aren't deleted this way.
• Words we hold back (section 9): We don't keep them. If we hold words back to check whether an account belongs to someone under 18, we keep a private note of which account they came from, until that account is deleted or for 30 days after we've decided it belongs to an adult.
• Alerts: Deleted 90 days after they're created. An alert about a link you delete is deleted with it, right away.
• "In the spotlight": Your page leaves our homepage when its end date passes (90 days after it starts, unless we agreed other dates), unless we renew it with your permission still covering the new dates. It also leaves when you ask us to take it off, or when your page stops being public, is taken down or paused, or you delete your account. When we turn it off it leaves at the next visit. Otherwise our hosting provider's copy of the homepage is drawn again every 5 minutes or so while people visit it, so your page can still show for a few minutes, and to one more visitor after a quiet spell. We delete the record of your permission 1 year after its end date, sooner if we remove it from the list, and within 7 days of your deleting your account. An email giving permission stays in our mailboxes as "Emails you send us" says below; permission given another way, such as a text message, we keep no longer than that record. The log's entries saying your page was added, changed or removed stay for the log's 36 months; they say only the kind of change and when.
• Push subscriptions: Deleted when you turn notifications off on that device or sign out on it, when you sign out of all devices, when its push service tells us the subscription no longer works (including after a sign-out that couldn't reach us), or when you delete your account. We also delete one sooner in three cases: when you turn notifications on for more than 10 devices (we keep the 10 most recently turned on or reached), when we change the key we sign notifications with (the next time you open the app on that device, its subscription is replaced with a new one), and when someone signed in to a different account turns them on in the same browser (the subscription moves to their account).
• Appearance choices: Kept until you change them or delete your account. Accounts whose theme is Auto, the old default, are moved to Light once, since we can't tell who picked Auto on purpose; you can pick Auto again in Settings.
• Server logs: The server logs we can see are kept by our hosting provider for up to 1 day. Vercel keeps its own security records under its own policies.
• Error reports: Scrubbed of personal data, and kept by Sentry for up to 30 days (up to 90 days for reports from before October 18, 2026), then deleted.
• Emails you send us: Kept in our support and privacy mailboxes for up to 2 years after our last reply. A report about a link or bio page is kept for 5 years, as the record of what we did about it.
• Consent, deletion and moderation log: Kept for 36 months, then deleted. It holds no stats, email address or content.
• Takedown records: When a link, bio page, profile picture or wallpaper is reported to us, we keep a private record of its name or link ending, what kind of report it was and what we did about it, for 5 years. It doesn't say who reported it.
• Records the law requires us to keep: If the law requires us to keep specific account, bio-page, picture, wallpaper or link records (for example, to preserve evidence for a legal request or a report to the authorities), we keep those records only for as long as that requirement lasts.
• When a plan ends: your page and links pause, private links included. A connected YouTube or TikTok account stays connected and we keep refreshing its data as above, unless 90 days pass without you opening the app (the bullet about that, above), or that platform has moved into the plan (the next bullet): then we disconnect it and delete its data as in "When you disconnect a platform". Your bio, links, design, pictures and counts stay until you delete them or your account, or until 12 months pass without you opening the app.
• When a platform moves into the plan: if seeing a platform's figures without a plan ends (Terms section 5 says when, with at least 7 days' notice in the app), then from that day we disconnect that platform for accounts without a plan and delete its data as in "When you disconnect a platform", with its tokens revoked at the platform. Your account, bio, links, design, pictures and counts stay.
• Billing records: your plan's details, and any province we noted for you, are deleted with your account. The record of each renewal you agreed to is kept for 7 years, for tax, accounting and any dispute about a charge, even after you delete your account, and so are Stripe's IDs for any plan we cancel or charge we refund after you delete it, so nothing is charged or refunded twice; after 7 years we delete them. Once your account is deleted they aren't linked to it here, but they hold Stripe's references, which Stripe's own records connect to your payments. Stripe keeps its own records of your payments under its own privacy policy.

7. Your choices and rights

You can:

• see your account information and change your settings in Settings
• download a copy of your data anytime with "Download my data" in Settings, as an Excel workbook or a JSON file
• disconnect any platform, turn notifications off, delete links and delete your account
• ask us for a copy of your data, or to correct or delete it, by emailing privacy@verlolabs.com

If you can't sign in. Email privacy@verlolabs.com from your account's email address and ask us to delete your account. Once we've confirmed the request is yours, we close it and delete its data the same way as when you delete it yourself (section 6).

Getting a copy of your data. Email privacy@verlolabs.com to ask what personal information we hold about you, how we've used it and who we've shared it with, or to get a copy of it or have it corrected. We'll confirm the request comes from you (for example, because it's sent from your account's email address) and reply within 30 days, free of charge. If you live in New Zealand, we'll reply within 20 working days, as New Zealand's privacy law requires. If we need more time, we'll tell you within that time, with the new deadline and the reason, and let you know you can complain to your privacy regulator about the delay. If we can't do what you asked, we'll explain why in writing and how you can challenge our decision.

Withdrawing consent. You can withdraw your consent at any time by disconnecting a platform or deleting your account. We then stop collecting that data and delete it as described in section 6. Features that rely on it will stop working. To withdraw your permission for "In the spotlight", email privacy@verlolabs.com, and we take your page off our homepage once we've confirmed the request is yours (section 6).

We don't sell your personal information. If you live in Nevada, you can still ask us not to sell the covered information we collect about you by emailing privacy@verlolabs.com, and we'll reply within 60 days.

Depending on where you live (for example Canada, New Zealand, or California and other U.S. states with privacy laws), you may have additional rights. We'll honor them as the law requires, and we won't treat you differently for using them.

Concerns and complaints. If you're unhappy with how we've handled your information, email privacy@verlolabs.com. Our privacy officer will look into it and reply. If you live in Canada, you can also complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca (opens in a new tab)) or, where it applies, your provincial privacy commissioner. If you live in New Zealand, you can also complain to New Zealand's Privacy Commissioner (https://www.privacy.org.nz (opens in a new tab)).

8. Children

• Monkeys in Space is for people 18 and older.
• We don't knowingly collect personal information from anyone under 18.
• If we learn that we have, we'll delete it.
• You can't use the app until you've confirmed you're 18 or older. A login made without our sign-up page's 18+ box is deleted right away, and a sign-up where you never confirm you're 18 or older is deleted within 3 days (section 6).
• If you think a minor is using the Service, contact privacy@verlolabs.com.

9. Security

• We use reasonable safeguards to protect your data, including encryption in transit, access controls and limited staff access.
• Connection tokens are stored securely.
• We automatically check your links, and the words and names you add to your page, for phishing, look-alike sites, impersonation and signs that an account may belong to someone under 18, check profile pictures and wallpapers for sexual content (section 2), and may hold or turn off what breaks our Terms.
• Our hosting provider's firewall may block traffic from places we can't serve, or abusive traffic.
• No system is perfectly secure. If a breach affects your data, we'll tell you as the law requires, and in any case whenever it creates a real risk of significant harm to you, as soon as we can, with what happened and what you can do. We'll also report it to the regulators the law requires, for example the Privacy Commissioner of Canada or New Zealand's Privacy Commissioner.

10. Changes to this policy

• We'll post any changes here and update the dates at the top of this page.
• If a change is material, we'll let you know in the app or by email before it takes effect.
• If a new version covers a new kind of data or a new use of it, we won't start that for you until you accept the new version or turn it on yourself. Connecting a platform counts as accepting the version that's current at the time; the notice under every Connect button says so.

11. Contact

Questions or requests: privacy@verlolabs.com · Verlo Labs, LLC, 249 Smith St PMB 2111, Brooklyn, NY 11231

Privacy officer. Our Founder is our privacy officer, responsible for Verlo Labs' privacy practices and for our compliance with privacy laws. You can reach our privacy officer at privacy@verlolabs.com, or by mail at the address above. Verlo Labs has no parent company, subsidiaries or affiliates that receive your information.