Privacy Policy

Effective date: April 28, 2026 · Last updated: May 10, 2026

Monza Lab LLC (“Monza Lab,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our websites — including monzalab.com, monzaindex.ai, and monzahaus.com — use our products and services, or otherwise interact with us (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

1. Who We Are

Monza Lab LLC is a single-member limited liability company organized under the laws of the State of Wyoming, USA, with EIN 30-1486916. Our principal place of business is 150 SE 2nd Ave, Ste 1403-6691, Miami, FL 33131, United States. For privacy-related inquiries, contact us at privacy@monzalab.com.

This Privacy Policy applies to all properties owned and operated by Monza Lab LLC, including:

• monzalab.com — corporate website and creative studio.
• monzaindex.ai — AI Index platform and related software products.
• monzahaus.com — MonzaHaus collector cars platform, reports, and community.

2. Information We Collect

We collect information in the following ways:

• Information you provide directly — such as your name, email address, phone number, company, billing details, and any content you submit through forms, sign-ups, surveys, or communications with us.
• Account and transaction data — if you purchase a product or subscribe to a service, we collect order details, payment confirmations, and related records (we do not store full payment card numbers; payments are processed by Stripe and similar third-party processors).
• Automatically collected data — including IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, time spent, and clickstream data, collected through cookies, pixels, and similar technologies.
• Communications — records of your interactions with us via email, chat, the in-app Advisor, social media, or other channels.
• Information from third parties — we may receive information from analytics providers, advertising partners, and publicly available sources (such as auction houses and listing platforms whose data we index).

3. How We Use Your Information & Legal Basis

We use the information we collect for the purposes below. For users in the EEA/UK, the table also identifies our legal basis under Articles 6 and (where applicable) 9 of the GDPR.

• Provide, operate, and maintain the Services — legal basis: performance of a contract.
• Process transactions, send confirmations and receipts — legal basis: performance of a contract.
• Personalize your experience — legal basis: legitimate interests (offering a useful product).
• Send marketing communications and newsletters — legal basis: consent (you may withdraw at any time).
• Analyze usage and measure performance (Vercel Analytics, Vercel Speed Insights, Google Analytics) — legal basis: consent (via the cookie banner).
• Advertising and conversion measurement (Meta Pixel, Conversions API) — legal basis: consent; no advertising tracker fires before opt-in.
• Detect and prevent fraud, abuse, and security incidents — legal basis: legitimate interests.
• Comply with legal obligations (tax, accounting, lawful requests) — legal basis: legal obligation.

We do not use your data to make decisions producing legal or similarly significant effects on you without human review. The in-app Advisor produces informational analysis only.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Services, remember your preferences, measure performance, and deliver relevant advertising. Providers we use include Vercel Analytics, Vercel Speed Insights, Google Analytics and Meta (Facebook) Pixel for analytics and advertising. You can control non-essential cookies through our cookie banner (shown on first visit) or your browser settings. Disabling cookies may affect your experience. See our Cookie Policy for the complete list and purpose of each cookie.

5. AI Advisor and AI-Generated Content

When you interact with the in-app Advisor or generate a report, your prompt and the relevant context (e.g. listing data) are sent to third-party AI providers (currently Anthropic and Google) to produce a response. We do not allow these providers to train their public models on your content under the contractual terms applicable to their enterprise APIs. AI-generated analysis is informational and is not financial, legal, or investment advice.

6. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Service providers — with vendors who perform services on our behalf, such as hosting (Vercel), authentication and database (Supabase), payment processing (Stripe), email delivery, analytics, customer support, and advertising. These providers are bound by contractual obligations to protect your data.
• Legal and safety — when required by law, subpoena, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.
• With your consent — for any other purpose disclosed at the time of collection or with your separate consent.

7. International Data Transfers

Monza Lab LLC operates from the United States and may process data in other countries where our service providers operate. By using the Services, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the nature of the data and applicable legal requirements. You may request deletion of your account and associated personal data at any time by contacting us.

9. Sub-processors

We rely on a small number of vetted vendors to operate the Services. Each is contractually bound to protect your data:

• Supabase — authentication & databaseUnited States · DPA + SCCs
• Vercel — hosting, Analytics, Speed InsightsUnited States · DPA + SCCs
• Stripe — payments & subscription managementUS / Ireland · DPA + SCCs
• Anthropic — AI Advisor responses (Claude API)United States · enterprise terms; no model training on your content
• Google (Gemini, Analytics) — vision scoring + analyticsUnited States · DPA + SCCs
• Meta (Pixel, CAPI) — advertising attribution (consent only)US / Ireland · DPA + SCCs

We will update this list when sub-processors change. If we add a new sub-processor, the “Last updated” date above changes and we may notify you.

10. EU and UK Representative

For users in the EEA/UK, our Article 27 representatives are listed below. You may contact them directly regarding GDPR/UK GDPR matters.

To be appointed before EU launch. If you reside in the EEA or UK and need to exercise your rights before then, contact us at privacy@monzalab.com and we will respond directly.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your data, subject to legal exceptions.
• Objection / restriction — object to or restrict certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent.
• Opt out of marketing — unsubscribe via the link in any marketing email or by contacting us.

California residents (CCPA/CPRA): you have additional rights including the right to know what categories of personal information we collect, to request deletion, to correct inaccurate information, to opt out of the “sale” or “sharing” (cross-context behavioral advertising) of personal information, and to limit the use of sensitive personal information. We do not sell personal information for monetary value. To honor your right to opt out of sharing for advertising, you may reject advertising cookies through the Cookie preferences link in our footer, and we honor the Global Privacy Control (GPC) browser signal automatically.

EEA/UK residents (GDPR): you may lodge a complaint with your local supervisory authority if you believe our processing of your personal data violates applicable law.

To exercise any of these rights, contact us at privacy@monzalab.com. We will respond within the timeframes required by applicable law.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

12. Third-Party Links and Services

Our Services may contain links to third-party websites or integrations with third-party platforms (including auction houses such as Bring a Trailer, Cars & Bids, Collecting Cars, AutoScout24, Elferspot, and others whose listings we surface). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent version. Material changes will be communicated through our Services or via email. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

© 2026 Monza Lab LLC. All rights reserved.