Privacy policy
MonthReady is operated by liu zhongkai. Operator type: Individual. Country: China. Contact: highsave@gmail.com. Effective October 20, 2026.
What the service processes
We process practice and team contact details, client contact details, document checklists, uploaded documents, item comments, review decisions, subscription identifiers and operational logs to provide the service. Free tool inputs are processed to generate the requested output and are not saved as client records.
How information is used
Data is used for authentication, authorized document collection, reminders, review, exports, payment status and security. MonthReady does not sell client documents or use them to train AI models. This version has no AI document processing.
Who can access information
Your practice’s authorized team can access client records according to their role and assignment. A client link grants access only to its associated request. Hosting, database, email, malware scanning and payment providers process the information necessary for their services. The frontend, API, PostgreSQL records, encrypted files and self-hosted malware scanning run on an operator-managed VPS. Email delivery shares addressing and message content with the recipient’s mail provider; support email is handled through Gmail. Paddle processes checkout and payment information when a practice owner subscribes, and returns transaction and subscription status to MonthReady. Payment details are entered with Paddle; MonthReady does not store card numbers. Paddle processes information under its own privacy notice.
Retention and deletion
Practices can configure uploaded file retention from 1 to 36 months, with a 12-month default. Expired files are removed by the retention worker. Checklist and audit metadata remain until practice deletion. Authentication sessions expire after seven days; sign-in links expire after 15 minutes. Daily server backups are retained for seven days and expire by rotation. Deleted records may remain in those backups until rotation; if a backup is restored, deletion requests must be reapplied. Contact highsave@gmail.com to request access, correction, deletion or export. We verify authority before disclosing or deleting records.
Security and cookies
Private storage, server-side authorization, secure sign-in links and HTTP-only session cookies protect access. Uploaded files remain quarantined until the configured scanner clears them. Authentication cookies are necessary for the service. No advertising cookies or AdSense are included.
Your responsibilities and choices
Only upload documents you are authorized to provide. Do not upload passwords, one-time banking codes or unrelated identity records. Your practice determines its document requirements and lawful basis for collection. You can export data and ask the practice to correct or remove records.
International use
The operator is based in China. Hosting and mail services can process information internationally, including in the United States; server hosting location and contractual transfer safeguards must be confirmed with support before regulated production use. Practices act as controllers of client records and MonthReady processes those records on their instructions; the operator controls account, support and security information. Processing is used to fulfill service agreements, meet legal obligations and protect the service. Ask support for a data processing agreement and hosting details before uploading records subject to such requirements. Do not upload real client records until those requirements are satisfied.
Privacy questions
Contact highsave@gmail.com about privacy or a complaint. You may also complain to the competent data protection authority. Material changes to this policy will be communicated to account owners.