Privacy Policy

Everyday Apps ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, and protect information when you use our applications on the monday.com platform.

Our applications run entirely on monday.com's secure infrastructure, meaning we do not store your data on external servers. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Everyday Apps acts as a data processor on behalf of monday.com and its users. monday.com acts as the data controller for data stored within their platform.

For questions about this privacy policy, please use our contact form.

Data processed through our apps:

• Board data - Column names, item names, and values you choose to import/export
• File data - Contents of CSV/Excel files you upload for import (processed temporarily)
• User identifiers - monday.com user IDs for authentication purposes

Data we do NOT collect:

• Personal contact information (unless you contact us directly)
• Payment or financial information (handled by monday.com)
• Data from boards you don't explicitly use with our apps

All data processing occurs on monday.com's secure servers. We:

• Do not store your monday.com data on external servers
• Do not transfer your data to third parties
• Do not sell your data under any circumstances
• Process data temporarily only during active app operations

When you upload a file for import, the file is processed in memory, data is written to your monday.com board, and the file is immediately discarded.

Under GDPR, we process your data based on:

• Contract performance - To provide the services you've requested through our apps
• Legitimate interests - To improve our apps and ensure security
• Consent - When you explicitly choose to use our apps and upload data

Your data is protected by monday.com's enterprise-grade security infrastructure:

• SOC 2 Type II certified infrastructure
• ISO 27001 certified information security management
• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Regular security audits and penetration testing
• GDPR compliant data centers in the EU and US

Since our apps run on monday.com servers, no data leaves their secure environment.

Under GDPR, you have the following rights:

• Right of access - Request information about your data processing
• Right to rectification - Correct inaccurate personal data
• Right to erasure - Request deletion of your data ("right to be forgotten")
• Right to restrict processing - Limit how we use your data
• Right to data portability - Receive your data in a structured format
• Right to object - Object to certain types of processing
• Right to withdraw consent - Withdraw consent at any time

To exercise these rights, use our contact form or manage your data directly through monday.com's platform.

We do not retain your monday.com data. All data:

• Is processed in real-time during app operations
• Remains stored only within monday.com's platform
• Is not copied or backed up to external systems

If you uninstall our app, no data persists on our side as we never stored it externally.

Our apps operate within monday.com's infrastructure. monday.com maintains data centers in:

• European Union (for EU customers)
• United States

monday.com ensures appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) where applicable.

Our apps within monday.com do not use cookies or tracking technologies. The Everyday Apps website may use:

• Essential cookies - Required for website functionality
• Analytics - Anonymous usage statistics (if enabled)

You can control cookie preferences through your browser settings.

Our apps interact only with:

• monday.com - Platform provider and data controller

We do not integrate with or share data with any other third-party services.

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify users of significant changes through:

• Email notification (for registered users)
• Notice on our website
• In-app notification

Continued use of our apps after changes constitutes acceptance of the updated policy.

For privacy-related inquiries or to exercise your GDPR rights, please use our contact form.

We aim to respond to all privacy requests within 30 days.