Privacy Policy

1. Scope and Summary

This policy explains how Monolithos, LLC ("EVUUN," "we") handles personal information when you use evuun.com, EVUUN cards and pages shown inside AI applications, the EVUUN MCP and API, and when EVUUN calls, texts or emails you.

In short:

• We use personal information to arrange, pay for, and follow up on the real-world services you or your customer asked for, and to pay the people who made each Arrangement happen.
• We do not sell personal information and we do not use it for advertising.
• You do not need an account for us to serve you. That means we may hold information about you before you ever visit evuun.com. Section 3 explains where it comes from.
• The Service is for adults. We do not knowingly collect information from anyone under 18.
• The English version of this policy controls if a translation differs.

2. Who This Policy Covers

3. What We Collect, Where It Comes From, How Long We Keep It

Information we receive without asking you directly (GDPR Article 14 & Japan APPI Notice). Categories 1 and 8 can reach us before you have dealt with EVUUN yourself—from the Host you instructed (Category 1), or from published business directories, official venue websites, or a Buyer's specific inquiry request (Category 8). When we first contact you (in a receipt, payment link, quote request, or call), we identify EVUUN and provide or link to this policy (and at the latest within 30 days). You can ask us to delete your contact details or stop contacting you at any time.

4. How We Use Information

1. To find options, obtain Quotes, take payment, secure reservations, and keep you informed about your Arrangements.
2. To contact Suppliers on a Buyer's behalf, and to pay Suppliers, Curators and Hosts.
3. To remember preferences so that later requests need fewer questions.
4. To prevent fraud and abuse, protect accounts, and resolve disputes.
5. To meet legal, tax, accounting and telecommunications obligations.

We do not use automated processing to make decisions that have legal or similarly significant effects on you.

5. Identity Without an Account

• Before you pay, we rely on what your Host tells us, or on the connection you approved yourself. This is enough to prepare a Quote and nothing more. A Host cannot see or use your saved cards, credits, earnings or other Arrangements.
• When you pay, the payment page shows only what you need to decide: Supplier, date, party size, total, cancellation terms and who is charging. Guest names appear as initials. Completing payment, including any issuer or wallet verification, confirms that the authorizing person is you. We then send a receipt and a private link for that Arrangement to the email entered at payment.
• If you claim an account by verifying your email, we bring together the Arrangements paid with that email. Others need an extra proof step. We notify the payment email when an Arrangement is added to an account, so a mistaken match can be reversed.

6. If We Contacted Your Business

• Why you heard from us. A customer asked their AI assistant to inquire with your business, and EVUUN made the inquiry.
• The call. Our voice assistant says at the start that it is an AI assistant calling from EVUUN for a customer and that the call is being transcribed in real time so the quote is accurate. We do not record audio.
• Texts. We text a number only after the person on the call agreed, or after your business contacted us first. Reply STOP to end texts from that number.
• What we keep about your business. The published contact details we used, the hours and channel that worked, and the terms you quoted. We keep these so the next inquiry is quicker. They are used inside EVUUN and are not shown to AI agents as bookable terms unless you agree to be listed (Terms, Section 13.4).
• Personal details of staff. We keep a staff member's name only if they gave it, and only to address them properly next time.
• Opting out. To stop all contact from EVUUN, or to have your business's details removed, reply to any EVUUN message or email privacy@monolithos.ai. We keep the minimum needed to honor the opt-out and to account for bookings already completed.

7. Preferences and Hosts

• Preferences learned through one Host are used only for requests coming through that Host, unless you claim an account and choose to let other Hosts use them.
• A Host receives the status and content of the Arrangements it started for you. It does not receive your payment details, your credits, or Arrangements started elsewhere.
• If you use Mono, another Monolithos product, as your Host, it is treated as any other Host. Mono's own memory of you is governed by Mono's privacy policy. EVUUN sends Mono the results of your Arrangements and does not read Mono's memory.

8. Who We Share With

We share personal information only as needed to run the Service.

The parties to your Arrangement. The Supplier receives what it needs to serve you: name, date, party size, stated needs, and a contact for the day. A Curator sees that their Product was booked and the amounts relevant to their share, not your contact details. A Host sees the Arrangements it started.

Service providers.

AI providers and training. Monolithos does not use personal information from EVUUN to train foundation models. Our AI providers process it under their commercial API terms to return a result to us; their own policies describe their retention.

Legal and corporate. We may disclose information where the law requires it, and will tell you first when we are allowed to. If Monolithos is involved in a merger or sale, information may transfer subject to equivalent protections.

9. Integrity Records and Deletion

To keep the allocation of money verifiable by every party, EVUUN stores Receipts, directory entries for Suppliers, and contribution records in an append-only form. Each entry carries a cryptographic fingerprint of the entry before it. Corrections are added as new entries rather than by changing old ones.

When you ask us to delete personal information:

• we remove or irreversibly de-identify the personal fields in live records and stop using them;
• the fingerprints, amounts and non-personal structure remain so that other parties' records still add up;
• encrypted off-site backups that still contain the information expire within 30 days.

We do not publish personal information to any public ledger.

10. Mobile Numbers and SMS

No mobile information, including mobile phone numbers, SMS opt-in data or consent, is shared with, sold to or rented to third parties or affiliates for marketing or promotional purposes. It is shared only with the telecommunications providers needed to deliver the messages. Reply STOP to end messages from an EVUUN number, or HELP for help.

11. International Transfers

Monolithos, LLC and its main systems are in the United States (State of Delaware). Fulfilling Arrangements in other countries requires sending the booking details described in Section 8 to the named Suppliers and service providers there:

• Transfers to Suppliers: When we send booking details to a Supplier outside your country to request a Quote or hold your reservation, that transfer is carried out as necessary to perform a contract with you or in your interest (including under GDPR Article 49(1)(b) and (c) and UK/Swiss equivalents).
• Transfers to Service Providers: For personal data from the EEA, the UK, or Switzerland processed by our cloud, payment, and communications providers, we rely on the European Commission's Standard Contractual Clauses (SCCs) (with the UK Addendum or Swiss adaptations) and, where a U.S. provider is certified, the EU-U.S. Data Privacy Framework (DPF) and its UK and Swiss extensions.
• Notice for Japan (APPI Article 28): Personal information from Japan (including contact details of Supplier personnel) is processed by Monolithos, LLC in the United States (under U.S. federal and Delaware law) and by Suppliers in the destination country of an Arrangement. Monolithos applies technical, organizational, and contractual safeguards aligned with the OECD Privacy Guidelines and Japan's Act on the Protection of Personal Information (APPI).

12. Your Rights

Wherever you live, you can ask us to:

• tell you what we hold about you and give you a copy;
• correct it;
• delete it, subject to Section 9 and to records the law requires us to keep;
• stop using your preferences, or stop contacting you.

If you have a claimed account you can do most of this yourself. Where a control described in this policy is not yet available in your account, email us and we will carry it out for you. If you do not, email privacy@monolithos.ai from the email address on your receipt, or include your Arrangement reference. We verify requests using information we already hold and do not ask for identity documents by default. We answer within 30 days, or sooner where the law requires.

EEA, UK and Switzerland. Our legal bases are: performing the contract for your Arrangement; our legitimate interests in contacting Suppliers for a Buyer, remembering preferences, and preventing fraud; consent where we ask for it; and legal obligation for tax and accounting records. You may object to processing based on legitimate interests and may complain to your data protection authority.

United States (including California, Virginia, Colorado, Connecticut, Texas, Washington, and Nevada). The categories of personal information we collect, our sources, our business purposes, and the categories of recipients are set out in Sections 3, 4, and 8. We do not "sell" personal information and do not "share" it for cross-context behavioral advertising (nor have we done so in the past twelve months), and we honor Global Privacy Control (GPC) signals. We will not treat you differently for exercising a privacy right. If we decline to take action on a request, you may appeal by emailing legal@monolithos.ai with the subject "Privacy Appeal."

Dietary, accessibility, and accommodation notes (Sensitive Data & Health Data Boundary). EVUUN is a commercial booking service, not a healthcare provider, and does not collect medical records. Where you include a dietary restriction, food allergy, or mobility/accessibility request in an Arrangement, we use and pass that note to the Supplier solely to fulfill that specific Arrangement (as permitted under Cal. Civ. Code § 1798.121(d)). We do not automatically store health, allergy, or disability conditions in long-term preference profiles ("memory") unless you explicitly save them, and we never use such notes for advertising, profiling, or model training.

13. Security

Connections are encrypted in transit. Access to production systems is limited to the people who need it, and non-routine access to stored records is logged. Payment card data is handled by our payment processors. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

14. Changes and Contact

We will post changes here and, for material changes, give at least 30 days' notice by email or on the Service.

Monolithos, LLC, Attn: Privacy Office 131 Continental Dr, Suite 305 Newark, DE 19713, United States privacy@monolithos.ai · legal@monolithos.ai