PRIVACY POLICY
Last Updated: July 2026
Monkey DESK is a product of Monkey Brain LLC
Last Updated: July 2026
Monkey DESK is a product of Monkey Brain LLC
Monkey Brain LLC, operator of the Monkey DESK (M:DESK) platform, is committed to protecting the privacy and security of the personal information of its Users, Clients, and visitors. This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information in compliance with applicable laws, including the Puerto Rico Privacy Policy Notification Act (Act No. 39-2012, 10 L.P.R.A. § 4061 et seq.) and its implementing Regulation No. 8568, the Puerto Rico Data Security Breach Notification Act (Act No. 111-2005, as amended, 10 L.P.R.A. § 4051 et seq.), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), the Telephone Consumer Protection Act (TCPA), and other applicable regulations in Puerto Rico and the United States of America.
1.1 Information You Provide Directly
When you create an account, subscribe to a plan, complete forms, or contact us, we may collect:
1.2 Automatically Collected Information
When you access the Platform or visit our website, we may automatically collect:
1.3 Information from Third Parties
We may receive information about you from sources such as:
1.4 User's Customer Data
When you, as an M:DESK subscriber, use the Platform to manage your own clients ('End Clients'), you control the data entered into the system. In relation to such data, Monkey Brain LLC acts as a data processor on behalf of the subscriber. You, as the subscriber, are the data controller and are responsible for: (a) obtaining necessary consents from your End Clients; (b) informing them about the processing of their data; and (c) responding to any data rights requests from End Clients.
Monkey Brain LLC ("we," "us," or "our") may collect your mobile phone number when you submit our contact form at monkeydesk.io/contact. By providing your number and checking the consent boxes, you agree to receive SMS text messages from Monkey Brain LLC / Monkey DESK.
2.1 Information We Collect
2.2 How We Use Your Mobile Number
We use your mobile phone number solely to send you SMS messages you have consented to receive, including appointment reminders, account notifications, and marketing communications. We do not use your number for any other purpose without your explicit consent.
2.3 SMS Data Sharing
We do not sell, rent, lease, or share your mobile phone number with third parties for their own marketing or promotional purposes. Your number may be shared only with our SMS service provider (Twilio) solely to operate the messaging service on our behalf, under confidentiality obligations.
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes.
2.4 Opting Out
You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message and no further SMS messages will be sent to your number. To re-subscribe, reply START to any of our messages.
2.5 Message & Data Rates
Standard message and data rates may apply to all SMS messages sent to or received from us. Contact your wireless carrier for details on your plan.
2.6 Questions
For questions about our SMS practices, contact us at: hello@monkeybrain.media | monkeydesk.io/contact
We use the information collected for the following legitimate purposes:
The processing of your personal data is based on one of the following legal bases:
5.1 Subprocessors and Service Providers
To operate the M:DESK Platform, we share information with service providers acting as subprocessors. These include, but are not limited to:
All technology partners and subprocessors are subject to contractual agreements obligating them to maintain the confidentiality and security of your data and to use it only for authorized purposes. The names of our strategic technology partners are not publicly disclosed for operational security and commercial strategy reasons.
5.2 Legal Disclosure
We may disclose your information when required by law, in response to valid legal processes, to comply with court or governmental orders, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of Monkey Brain LLC, its Users, or others.
5.3 Business Transfers
In the event of a merger, acquisition, asset sale, or corporate reorganization, your information may be transferred as part of the process. In such case, we will notify you before your data becomes subject to a different privacy policy.
5.4 We Do Not Sell Your Data
Monkey Brain LLC does NOT sell, rent, or exchange your personal information with third parties for commercial purposes unrelated to the provision of M:DESK services.
We retain your personal information for as long as your account is active or as necessary to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. After account cancellation, we may retain certain information for up to thirty-six (36) months as required by applicable laws, after which we will delete or anonymize it.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
To exercise any of these rights, send your request to: Hello@monkeydesk.io. We will respond within no more than thirty (30) calendar days. We may request identity verification before processing your request.
8.1 Security Measures
We implement reasonable technical, administrative, and physical security measures to protect your information against unauthorized access, loss, alteration, or destruction. These measures include:
However, no internet data transmission system or electronic storage is completely secure.
8.2 Breach Notification
In the event of a security breach compromising unencrypted personal information of Puerto Rico residents, Monkey Brain LLC will, in accordance with the Puerto Rico Data Security Breach Notification Act (Act No. 111-2005, as amended):
The notification will include a general description of the incident, the type of information involved, and contact information for further assistance, including our support line at (787) 663-6373 and service@monkeydesk.io.
This section does not limit or replace any additional breach notification obligations under HIPAA applicable to Healthcare Sector Clients using the HIPAA Compliance Add-On, which are governed by the applicable Business Associate Agreement (BAA) and Section 11.5 of this Policy.
The M:DESK Platform is directed exclusively to individuals 18 years of age or older and is not designed for use by minors. We do not intentionally collect personal information from children under 13 years of age. If we become aware that we have collected personal information from a child under 13 without the verifiable parental consent required by COPPA, we will promptly delete such information. If you believe we may have information from a minor, please contact us at Hello@monkeydesk.io.
Some M:DESK features use artificial intelligence (AI) tools to enhance the User experience. We do not use your personal information to train generalized or publicly available AI models. The use of AI is limited to providing the specific services you have contracted, through specialized subprocessors operating under restricted instructions.
The Platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We recommend reviewing the privacy policies of any external sites you visit. Monkey Brain LLC assumes no responsibility for the privacy practices of third parties.
The provisions of this section apply when M:DESK is used by healthcare providers or other Covered Entities under HIPAA.
12.1 Monkey Brain LLC's Role as Business Associate
When the M:DESK Platform is used by a HIPAA Covered Entity to manage patient-related information, Monkey Brain LLC acts as a Business Associate as defined in 45 C.F.R. § 160.103. In this role, Monkey Brain LLC may create, receive, maintain, or transmit Electronic Protected Health Information (ePHI) on behalf of the Covered Entity, exclusively for the purposes established in the Business Associate Agreement (BAA) in effect.
12.2 BAA Requirement
Monkey Brain LLC will not process PHI from any Covered Entity without a duly executed and effective Business Associate Agreement (BAA) between the Parties. The absence of a BAA constitutes a HIPAA violation that falls exclusively on the Covered Entity.
12.3 Permitted Uses of PHI
Under the BAA, Monkey Brain LLC will use patient PHI from the Covered Entity solely to:
Monkey Brain LLC will NOT use PHI for: advertising, third-party marketing, data sales, or to train generalized artificial intelligence models.
12.4 ePHI Security
When the HIPAA Compliance Add-On is active, the M:DESK Platform implements additional security safeguards specific to ePHI, including: AES-256 encryption at rest, TLS encryption in transit, audit logs, enhanced access controls, and active BAA agreements with the underlying technology infrastructure provider.
12.5 Breach Notification
In the event of a security breach involving patient ePHI from the Covered Entity, Monkey Brain LLC will notify the Covered Entity without undue delay and in no case later than thirty (30) days after discovery of the breach. The Covered Entity is responsible for making HIPAA-required notifications to affected individuals and to HHS.
12.6 Patient Rights
Monkey Brain LLC will cooperate with the Covered Entity's requests related to patient rights under HIPAA, including requests for access, correction, restriction, and accounting of PHI disclosures, in accordance with the terms established in the BAA.
We reserve the right to update this Privacy Policy periodically. We will notify you of material changes through a notice on the Platform or by email at least fifteen (15) days before the changes take effect. Continued use of the Platform after notification will constitute your acceptance of the updated Policy.
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
Monkey Brain LLC — Monkey DESK (M:DESK)
Privacy Officer: Hello@monkeydesk.io
Phone: (787) 558-5868
Support: Service@monkeydesk.io
Website: monkeydesk.io
© 2025 Monkey Brain LLC — All Rights Reserved | Puerto Rico, U.S.A.
