Privacy Policy
Version 2026.1 · Effective November 2, 2026 · Replaces the policy published in 2024. This is an English translation; if there is any discrepancy, the Spanish version prevails.
Contents
This policy explains what personal data the Montu Group processes, for what purposes, with whom it shares it and how to exercise your rights. It applies to Brands and their Authorized Users, Creators, visitors to montu.io, subscribers to our communications and business contacts.
1. Data controller
The controller is the company in your country. Montu SpA operates the Platform and processes the other companies' data as their processor, under internal group agreements.
| Country | Controller | Identifier | Address |
|---|---|---|---|
| Chile | Montu SpA | RUT 77.752.712-6 | Av. Los Halcones 12200, lote 16, Lo Barnechea, Santiago |
| Colombia | Montu Colombia S.A.S. | NIT 902.061.176-0 | Carrera 9 No. 69-70, Bogotá D.C. |
| Peru | Montu Perú S.A.C. | RUC 20615980715 | Calle 2 de Mayo 516, oficina 401, Miraflores, Lima |
Privacy contact for all countries: hola@montu.io.
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Identification and contact | Name, ID document, email, phone, shipping address | You |
| Company | Legal name, tax ID, job title, legal representative | You or your company |
| Account and access | Username, sign-in provider, access logs | You and the Platform |
| Social media | Public profile, posts, audience and performance metrics | Meta, TikTok, YouTube and other networks you connect |
| Profile and content | Bio, portfolio, Collaborations, reviews | You and the Brands |
| Payments and tax | Bank account, tax documents, history of charges and Withdrawals | You and payment processors |
| Usage and device | Pages and features used, IP, browser, approximate location, cookies | The Platform |
| Communications | Emails, support messages and WhatsApp | You |
| Business contact | Name, job title, company and work email | Publicly available sources and business data providers |
We do not store full card numbers: payment processors handle them. We do not request sensitive data. If it appears in your content, we do not process it for purposes other than the Campaign.
3. What we use the data for
| Purpose | Legal basis |
|---|---|
| Create and manage your account and provide the Services | Performance of the contract |
| Show Creator profiles to Brands and suggest Creators for Campaigns | Performance of the contract and consent |
| Collect payments, invoice, pay Withdrawals and apply withholdings | Performance of the contract and legal obligation |
| Verify identity, prevent fraud and protect the Platform | Legitimate interest and legal obligation |
| Support and communications about your account | Performance of the contract |
| Send you Montu news and offers | Consent, or legitimate interest for business contacts; you can object at any time |
| Use names, logos, Collaborations and image in Montu's marketing | Performance of the contract (license in the Terms) and consent |
| Analyze usage, improve the Services, train internal models (including artificial intelligence) and produce statistics | Legitimate interest |
| Comply with the law and respond to authorities | Legal obligation |
| Defend our rights in claims | Legitimate interest |
4. Social media data
When you connect a social network, we obtain data only through its official APIs and with the permissions you approve. We never see your password. We use that data to show your profile and metrics to Brands, verify audiences and measure Campaigns.
- YouTube: Montu uses the YouTube API Services. By connecting your account you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke access in your Google security settings.
- Meta and TikTok: you can revoke access from each network's settings or from the Montu app.
- Deletion: when you disconnect a network, we delete the data obtained from it within 30 days, except for Collaborations and metrics from Campaigns already carried out. To request deletion, write to hola@montu.io.
5. Automatic suggestions
The Platform ranks and suggests Creators based on their profile, audience and performance. These suggestions do not produce legal effects on their own: the Brand always decides whom to hire. You can ask us for information about the logic used and for a human review.
6. Who we share data with
| Recipient | Purpose |
|---|---|
| Brands | View Creators' profiles, metrics and Collaborations; ship products |
| Creators | Learn about the Brand and the Brief of the Campaigns they apply to |
| Montu Group companies | Operate the shared Platform |
| Suppliers | Cloud and hosting (Amazon Web Services); email and messaging (Twilio SendGrid, Google Workspace and Eclectic for WhatsApp and support); payments (Rebill, Mercado Pago, Global66 and banks); electronic invoicing (Tupana in Chile and authorized providers in Colombia and Peru); artificial intelligence (OpenAI and Anthropic); internal management (Notion); and business prospecting (Instantly, Apify and Lusha) |
| Authorities | When required by law or by an order |
| Acquirers | In a merger, sale or reorganization of the business, with the same protections |
We do not sell personal data. Suppliers may only use it according to our instructions and with security measures. You can request the updated list of suppliers.
7. International transfers
Your data may be stored on servers outside your country, including the United States, and may flow between Montu Group companies in Chile, Colombia and Peru. We use suppliers with adequate safeguards and contractual data protection clauses, and we meet the requirements of each country in section 11.
8. How long we keep data
| Data | Period |
|---|---|
| Account and profile | While the account is active and 2 years after the last interaction |
| Tax and accounting documents | The legal period in each country |
| Data obtained from social networks | While the network is connected, and up to 30 days after |
| Collaborations | For as long as the licenses granted in the Terms last |
| Marketing communications | Until you unsubscribe |
| Security logs | 12 months |
We may keep data longer if the law requires it or to defend pending claims.
9. Your rights
You can request access to your data, rectify it, delete it, object to its processing (including for marketing), withdraw your consent and, where the law recognizes them, portability, blocking and the right not to be subject to solely automated decisions. Write to hola@montu.io with your name, the right you are exercising and a document proving your identity. The process is free and we respond within the legal period in your country. You can also file a complaint with the authority in your country.
10. Security
We apply reasonable technical and organizational measures: encryption in transit (HTTPS), role-based access control, data segregation and activity logs. No system is infallible. If an incident affects your data, we will notify the authority and you when the law requires it.
11. Country rules
Chile. Until November 30, 2026, Law No. 19,628 applies. From December 1, 2026, Law No. 21,719 applies: the rights of portability and blocking are added, and you can file complaints with the Personal Data Protection Agency.
Colombia. This policy is the Information Processing Policy of Montu Colombia S.A.S. under Law 1581 of 2012 and Decree 1377 of 2013. The area responsible for handling inquiries and complaints is the Montu Support team, at hola@montu.io. Inquiries are answered within a maximum of 10 business days, extendable by 5. Complaints are answered within a maximum of 15 business days, extendable by 8. Before going to the Superintendence of Industry and Commerce, you must file your complaint with Montu. The databases will remain in force for as long as the purpose of the processing lasts.
Peru. Montu Perú S.A.C. processes data under Law No. 29733 and its Regulations (Supreme Decree No. 016-2024-JUS). We respond to your ARCO rights within the periods set by the Regulations, and you can file complaints with the National Authority for Personal Data Protection.
12. Minors
The Services are only for people over 18. If we learn that we are processing data of a minor without authorization from their representative, we delete it. Creators are responsible for the authorizations of minors who appear in their content.
13. Cookies
We use our own and third-party cookies: necessary, analytics and advertising. Necessary cookies cannot be disabled. Analytics and advertising cookies are only activated if you accept them in the cookie notice, and you can change your choice at any time from that notice or from your browser.
14. Changes to this policy
We will publish any change on this page with its effective date. If the change is material, we will notify you by email or on the Platform before it takes effect, and we will ask for your consent when the law requires it.