How Emonk AI handles your data.
Draft, under review — not yet final legal text
Draft dated 17 October 2026
1. Who we are
The data controller is Emonk Media Ltd, a private company registered in England and Wales under company number 17407166, registered office 248 Hordern Road, Wolverhampton, WV6 0HQ. We are registered with the Information Commissioner's Office (ICO), registration number ZC235072. Questions about this notice or your data: hello@emonk.io.
2. What Emonk AI is
Emonk AI is software run by Emonk Media Ltd that reads advertising and analytics data for the paid-media accounts the agency manages for its clients, and turns that data into reports, recommendations and tasks for the agency's team. It reads data; it does not change your accounts.
3. What we read, and where it comes from
Through connections that the agency (or you, as a client) has authorised, Emonk AI reads data from:
- Google Ads — campaign, ad group, keyword and ad performance figures, budgets and settings.
- Meta Ads — campaign, ad set and ad performance figures, budgets and settings.
- Google Analytics 4 — aggregated website traffic and conversion figures.
- Stripe — payment and subscription records for the agency's own billing (for example, which plan a client is on and whether an invoice has been paid).
Every connection is read-only. Emonk AI cannot create, edit, pause or delete anything in these accounts.
Most of this data is about advertising performance rather than about people. Where it does contain personal data, it is limited to: the names and email addresses of the people who use Emonk AI (agency team members and client contacts), the account identifiers of the connected platforms, and whatever aggregated or technical data those platforms expose (for example, a GA4 report does not identify individual visitors to us).
4. Why we read it
- To analyse how the advertising accounts the agency manages are performing against the client's objective.
- To produce recommendations, task lists and reports for the agency's team and, through them, for the client.
- To run and bill the agency's own service.
- To keep the service secure and working.
5. Our lawful basis (UK GDPR)
- Performance of a contract — where you are a client of Emonk Media Ltd, we process data as needed to deliver the service you have engaged us for.
- Legitimate interests — our interest in running, improving and securing the service, and in responding to people who contact us. We balance this against your rights.
- Consent — where a platform's own authorisation screen asks you to grant access, that access is given by your consent and can be withdrawn at any time by disconnecting (see section 8).
6. Who else processes it (sub-processors)
We do not sell personal data and we do not share it for marketing. These providers process data on our behalf under contracts that require them to protect it:
- Vercel — hosts the application and this website.
- Supabase — database and authentication.
- Anthropic — the AI models that produce the analysis and written output. Data sent to Anthropic is not used to train its models.
- Stripe — payment processing.
- Resend — sends the service's emails.
We may also disclose data where the law requires it.
7. International transfers
Some of these providers process data outside the UK, mainly in the United States. Where that happens we rely on the UK's adequacy regulations or the International Data Transfer Agreement / Addendum, as applicable to each provider.
8. Disconnecting, and how long we keep data
You (or the agency) can disconnect any platform at any time by revoking Emonk AI's access in that platform's own settings, or by emailing hello@emonk.io. When a connection is revoked we stop reading from it immediately.
Data we have already pulled is kept for as long as the client engagement runs, because the service depends on a history of how the account has performed. When an engagement ends, or on request, we delete the client's data within 30 days, except for records we are required to keep by law (for example, invoices, which we keep for six years). See our data deletion page for the exact steps.
9. Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict or object to how we use it, and ask for it in a portable form. Email hello@emonk.io and we will respond within one month.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk, or by phone on 0303 123 1113.
10. Changes
We will update this notice when the service changes. The date at the top shows the current version.