Sub-processors

Every external service that processes your data, listed here in plain English. We commit to emailing you 30 days before this list ever changes.

Sub-processor	What we use it for	What data it sees	Region
Amazon Web Services (AWS)	Cloud compute, managed database, encrypted object storage, and email delivery.	All your data, encrypted at rest.	India (Mumbai region)
Google Gemini	Monthly aggregate AI insights, the Ask Moniqo assistant, and receipt reading when you choose “AI read”.	For monthly insights: PII-redacted aggregates only. For Ask Moniqo: the same summary, plus the rows needed to answer the question you asked — your own data only, scrubbed of identifiers (card numbers, IBANs, national IDs, emails, phone numbers) before it is sent. For “AI read”: the receipt image itself, because reading a photo means seeing it — this is never the default and only happens on a receipt you choose it for. Bank statements are never sent. Never used to train models.	US (provider)
AWS Textract	Receipt reading when you choose “Deep read” (Business tier).	The receipt image itself, for that one receipt you chose it for. Never the default, never bank statements.	India (Mumbai region)
Sentry (env-gated)	Error tracking when the app crashes.	Stack traces and request paths — never transaction data or PII.	Provider-hosted

Our commitments

30 days' notice — we email every user before adding any sub-processor that will see customer data.
Right to revoke AI — you can opt out of AI insights specifically without losing access to anything else.
No advertising trackers — no Google Analytics, no Meta Pixel, no Mixpanel, no Segment, no third-party JavaScript on the product surfaces.
No data brokers — Moniqo data is never sold, licensed, or shared with marketing or analytics platforms.

See our security page for how we protect your data, or email privacy@moniqo.me with any sub-processor question.

Last updated 7 June 2026.