What we collect, and what we refuse to.
A plain description of what the software actually does with your information.
This page describes what our system does today, accurately and in plain words. It is not a final privacy policy — the binding document is being drafted with counsel and will replace this page before any money moves. We would rather tell you exactly what we hold now than show you a page that says “placeholder”.
What we collect
- Your email address
- To sign you in, to send the copy of your bank authorization the law requires us to furnish, and to send password reset codes. If you used the updates form without opening an account, this is the only thing we have.
- Your full legal name
- Required to open an account, because it is the name your identity check runs against and the name on your bank authorization. An account cannot be created without one.
- Your bank's name, its routing number, and the last four digits of your account
- To debit the account you authorized. We never store the full account number — it is used to set up the authorization and then discarded, which is why the app can only ever show you ····1234.
- What you bought, when, and at what price
- The ledger. It is what proves the metal is yours, so it is kept for as long as you hold metal with us and for as long afterwards as our record-keeping obligations require.
- A delivery address, if you take physical delivery
- Only when you request a withdrawal, and only to ship that parcel.
What we deliberately do not hold
- No card numbers
- There are no cards. Every payment is an ACH debit from the account you linked.
- No full bank account numbers
- Only the last four digits are retained.
- No Social Security numbers, dates of birth, or images of your ID
- Our identity provider collects and holds those. We receive their verdict — cleared, or not — and keep that. What we never store cannot leak from us.
- No advertising or analytics trackers
- There is no Google Analytics, no advertising pixel and no third-party session recording on this site. The only cookie we set is the one that keeps you signed in, and JavaScript cannot read it.
Who else sees anything
- Our identity verification provider
- Your name and email, to confirm you are who you say you are and to screen against sanctions lists. This is a legal obligation, not a choice.
- Our payment processor and your own bank
- The authorization details needed to move the money you approved, and nothing else.
- Our bullion dealer
- Nothing that identifies you. We buy in our own name and allocate to you on our books; the dealer never learns who our customers are.
- Our email provider
- Your address and the message, for notices, authorizations and reset codes.
Asking us about your data
Email hello@monthlyounce.com and ask what we hold about you, ask us to correct it, or ask to be removed from the updates list. We will answer.
One limit worth stating rather than burying: while you hold metal with us, we cannot delete the ledger entries that prove it is yours, and we cannot delete records we are required to keep to satisfy anti-money-laundering and payments obligations. Everything outside that, we can.