momo is in early access — help shape the open-source AI support desk. Get started →
momo

Privacy Policy

Privacy Policy

Effective Date: 25.09.2026

Goodrepublic UG ("we," "us," "our") operates the website askmomo.eu and related services, including the momo application and its integrations (collectively, the "Services"). We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

a. Personal Information You Provide

We may collect information you submit directly, including:

  • Email address
  • Name and contact details
  • Account registration information
  • Content you add to the Services (for example help articles, documents and website content used as knowledge)
  • Communications with us

This data is collected when you sign up, contact support, request information, or use interactive features of the Services.

b. Customer Conversation Data

When the Services are used by our customers (for example a store owner who adds the momo chat to their website or Shopify store), we process, on their behalf, the messages that visitors type into the chat, and any details the visitor chooses to share (such as an email address or an order number). Our customer is the controller of this data; we act as its processor.

c. Shopify Store Data

If a merchant connects a Shopify store, we access product and order information through Shopify's read-only permissions. Order details are retrieved live to answer a visitor's question, and only after the visitor provides the matching order number and email address. Order data is not copied into our database; only the chat text is stored. We never modify a store.

d. Automatically Collected Data

When you access our Services, we may collect:

  • Device and usage data (e.g., browser type, IP address, pages visited)
  • Anonymous, aggregated usage statistics

2. How We Use Your Information

We process personal data for purposes that include:

  • Providing, operating, and maintaining the Services
  • Generating answers to visitor questions
  • Improving user experience and understanding how the Services are used
  • Communicating with you about updates, security alerts, and support
  • Complying with legal obligations

We only process data when required by contract, with your consent, under our legitimate interests, or to comply with law.

Where applicable (e.g., for users in the EU), we rely on:

  • Contract performance
  • Consent, where requested
  • Legitimate interests, such as improving the Services and ensuring security
  • Legal compliance

4. Analytics and Cookies

We measure website usage with a self-hosted instance of Umami, hosted in Germany. Umami is privacy-friendly: it does not use cookies, does not track you across websites, and no analytics data is shared with third parties.

We only use cookies and similar technologies that are strictly necessary, for example to keep you signed in and to remember your preferences. Most browsers allow you to manage cookie preferences. Disabling certain cookies may affect functionality.

5. Third-Party Services

We may share personal data with:

  • Service providers (e.g., hosting, email delivery, AI model providers that generate answers from the conversation text)
  • Legal authorities if required by law
  • Parties in connection with business transitions (e.g., merger, sale)

Service providers process data only on our instructions and under data processing agreements. We do not sell your personal information.

6. Data Storage and Location

All personal data we control is processed and stored in Germany, and backups are also stored in Germany.

7. Data Retention

We retain personal data only as long as necessary for:

  • Providing the Services
  • Fulfilling legal and compliance obligations
  • Resolving disputes

Retention time may vary depending on the category of data and purpose of processing. When a customer uninstalls the Shopify app, store access is removed immediately, and the related data is deleted when Shopify sends its deletion request. On a customer data deletion request, we erase the relevant personal data from stored conversations.

8. Your Rights

Depending on your location (e.g., GDPR region), you may have the right to:

  • Access the data we hold about you
  • Rectify inaccurate information
  • Delete your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a data protection supervisory authority

To exercise these rights, contact us using the details below. If your data was submitted through a chat on a third-party website or store, you can also contact that business directly.

9. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect data from minors. If you believe we have, please contact us.

10. International Transfers

We store and process personal data in Germany. Where a service provider (for example an AI model provider) processes data outside the European Economic Area, we ensure an adequate level of protection, for example through Standard Contractual Clauses or an adequacy decision.

11. Security

We protect personal data with technical and organizational measures, including encryption in transit, encryption of stored access credentials, and strict separation of each customer's data.

12. Changes to This Policy

We may update this Privacy Policy. The revised version will be effective when published. We will indicate the effective date at the top.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact:

Goodrepublic UG Email: security@askmomo.eu Address:

Karl-Kunger-Straße 12435 Berlin