MasterMonetization
Login

Privacy Policy

Last updated: April 16, 2026
This privacy notice for Master Monetization (doing business as "Master Monetization") ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:
  • Visit our website at mastermonetization.com, or any website of ours that links to this privacy notice
  • Use Master Monetization, our subscription research library of compiled field manuals and cited Master syntheses, available in a browser and over the Model Context Protocol (MCP)
  • Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please reach out through our contact form at https://mastermonetization.com/contact.

TABLE OF CONTENTS



1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
  • Email addresses
  • Passwords (stored only as a hash by our authentication provider; we never see them)

What we deliberately do not ask for. We do not collect your name, phone number, mailing address or billing address, and we do not offer or send SMS. An email address and a password are the whole of what an account requires.

Sensitive Information. We do not process sensitive information.

Payment Data. When you subscribe to a paid plan, payment is processed by Stripe, Inc. Stripe collects and stores your payment instrument details (such as card number, expiration date, and security code) directly; we do not see or store your full payment card information on our servers. We receive limited billing-related data from Stripe (such as the last four digits of your card, card brand, billing country, transaction ID, and subscription status) so we can manage your account and prevent fraud. Stripe's privacy practices are described at https://stripe.com/privacy.

API keys. If you connect an AI client over MCP, we issue you an API key. We store only a SHA-256 hash of it, never the key itself — which is why a key is shown once and cannot be shown again, and why a copy of our database is not a set of working credentials. When you revoke a key we retain its hash so the revoked key cannot be silently reused.

Search terms and usage records. Every call to the Services writes one usage record. It contains the account it belongs to, the API key used (if any), which tool was called, which document was returned, the search terms you sent, how many results came back, the time, a hashed form of your IP address, and the country derived from it.

We want to be direct about the search terms, because it is the part most people would want to know: we store what you search for, linked to your account, and we read it. We use it to decide what to research and publish next — a search that returns nothing tells us what to build, and it is the most useful signal this service has. We keep search terms for 90 days, after which they are erased from the record automatically. We do not sell them, we do not share them with advertisers, and we do not use them to train any model. They are deleted when you delete your account. If you would rather a particular question never be stored, do not send it to us.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
  • To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
  • To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
  • To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
  • To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
  • To send you marketing and promotional communications. We may send product updates and marketing communications by email, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. We do not send marketing text messages unless you separately and explicitly opt in.
  • To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
  • To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you. The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. Ours are:
  • Performance of a contract — creating your account, authenticating you, deciding what your plan gives you access to, taking payment and sending the transactional email that goes with it. This is the service you signed up for.
  • Legitimate interests — security and abuse prevention. Rate limiting, diagnosing faults, and detecting credential sharing. The hashed IP address and country exist for this and nothing else: one key used from many countries at once is the signal we look for.
  • Legitimate interests — deciding what to publish next. This is the basis on which we read your search terms, and we would rather name it than bury it. Our interest is knowing which subjects members want covered, and particularly which searches return nothing. We balance it by keeping search terms for only 90 days, never selling or sharing them, never training a model on them, and deleting them with your account. You may object to this processing at any time under section 10 — write to us and we will stop associating your search terms with your account.
  • Legal obligation — retaining billing records for tax and accounting.
If you are located in Canada, this section applies to you. We may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (implied consent).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:
  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Service Providers. We share information with the vendors needed to operate the Services, and with no others. The complete list is below — there are four, and we would rather name them than describe them in the abstract. Each processes data only on our instructions.
  • Payment Processor. We share payment-related information with Stripe, Inc. to process subscription charges, refunds and chargebacks. Stripe handles your card details under its own privacy policy at https://stripe.com/privacy. We never see or store a full card number.

Our complete list of subprocessors:
  • Cloudflare, Inc. — Application hosting, database (D1), CDN and edge network. Receives: All account and usage records; request metadata including IP address.
  • Supabase, Inc. — Authentication (email/password sign-in). Receives: Email address, hashed password, authentication timestamps.
  • Stripe, Inc. — Payment processing and subscription billing. Receives: Name, email, billing address and card details — collected by Stripe directly.
  • Resend, Inc. — Transactional email delivery. Receives: Email address and message contents.
We send nothing to any AI provider. See section 6 — the Services generate nothing on demand, so there is no model to send your data to.

No Sale of Personal Information. We do not sell personal information and have not done so. We do not share it for cross-context behavioural advertising, we run no advertising network, and we do not rent or sell contact lists or user data. This includes your search terms.

Email we send you. We send transactional email only — confirming your address, resetting a password, team invitations, and notices about a failed payment or a cancelled subscription. There is no marketing list and no newsletter, so there is nothing to unsubscribe from. We do not send SMS and do not hold a phone number to send one to.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: No. We serve documents to your AI client; we run no AI ourselves and send your data to no AI provider.

This is worth stating plainly, because the Services are usually reached through an AI tool and are easily mistaken for one. Master Monetization is a library of documents written and compiled in advance. Nothing is generated on demand. We operate no model, we call no model, and we send nothing you give us to OpenAI, Anthropic, Google or any other AI provider.

How the MCP connection works. If you connect an AI client such as Claude Code or Claude Desktop, that client runs on your machine under your own agreement with its provider. When it calls us it sends an API key, the name of the tool it wants, and its arguments — typically your search terms or the identifier of a document. We answer with text from our library. Your conversation with your AI assistant is not sent to us; only the tool call it makes is. Equally, we have no visibility into and no responsibility for what your AI provider does with the conversation on their side — that relationship is between you and them.

No training, ever. We do not use your search terms, your usage records or anything else about you to train, fine-tune or improve any model — ours or anyone else's. We do not sell that data and we do not share it with advertisers. We do read search terms ourselves, for the single purpose described in section 1: deciding what to research and publish next.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: We do not offer social login, and we connect to none of your other accounts.

You sign in with an email address and a password. There is no "continue with Google", no "continue with Facebook", and no way to connect a YouTube channel, a Meta Page, an ad account or any other external service to Master Monetization. We therefore hold no OAuth tokens, no profile data from any platform, and no ability to act anywhere on your behalf. Nothing here can post, publish or read on another service, because no such connection exists.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information. Specifically:
  • Account and subscription records — for as long as your account exists, then as long as needed for tax and accounting obligations.
  • Search terms — 90 days. After 90 days the search text is erased from the usage record automatically, by a scheduled job rather than on request. The record of the call itself remains, without the words.
  • Other usage records — kept on a rolling basis for rate limiting, diagnostics and detecting credential sharing, then deleted.
  • Revoked API key hashes — retained after revocation so a revoked key can never be silently reused.
Deleting your account removes your account record, your API keys and your entire usage history, search terms included. Billing records we are legally required to retain remain with Stripe.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. In concrete terms: all traffic is encrypted in transit; API keys are stored only as SHA-256 hashes, so a copy of our database is not a set of working credentials; IP addresses are hashed rather than stored raw; and entitlement is checked on every single request, so there is no session that outlives it and a cancelled subscription stops working immediately. Member data lives in a database that is entirely separate from our research corpus. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, and we do not claim otherwise. You should only access the Services within a secure environment.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or request deletion of your personal information at any time.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by reaching out through our contact form at https://mastermonetization.com/contact.

Deleting your account: You may delete your account and the personal information associated with it at any time from your account settings within Master Monetization, or by reaching out through our contact form at https://mastermonetization.com/contact. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain certain records to comply with legal obligations (such as tax and accounting records), resolve disputes, or enforce our agreements.

If you have questions or comments about your privacy rights, please reach out through our contact form at https://mastermonetization.com/contact.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, please reach out through our contact form at https://mastermonetization.com/contact, or contact us by post at:

Master Monetization
3167 San Mateo NE #273
Albuquerque, NM 87110, US
Phone: 505-240-8035
Email: info@mastermonetization.com

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please reach out through our contact form at https://mastermonetization.com/contact.