TimeBoard Privacy Policy
Effective: 2026-09-05 ยท Controller: [COMPANY LEGAL NAME]. Draft for legal review before Marketplace submission.
What we store
| Data | Source | Why | Protection |
|---|---|---|---|
| monday account id, slug, seat count | monday install webhook / OAuth | Identify your account | Encrypted database volume |
| OAuth access token (and refresh token) | monday OAuth | Read item names, post updates, maintain the Hours column | AES-256-GCM encrypted at rest; key held outside the database; nulled immediately on uninstall |
| User id, name, email, timezone, role flags | monday users API | Show who logged time; CSV export | Name and email AES-256-GCM encrypted at rest |
| Board and item ids and names, group titles | monday boards/items API | Display and CSV | Encrypted database volume; refreshed, not archived |
| Time entries (start, end, duration, note, billable) and an audit log of edits | Your users | The product | Encrypted database volume |
We do not read item column values other than names and groups, and we never capture screenshots, keystrokes, URLs, or activity outside monday.com.
Logs
Server logs contain request method, path, status code, timing and monday account id. They contain no tokens, names, emails or notes, and are retained for 30 days.
Third parties
- monday.com: the platform the app runs inside (API calls, iframe hosting of our views).
- [HOSTING PROVIDER, e.g. Railway]: hosts the server and database in [REGION].
- Anthropic (api.anthropic.com): powers the optional AI features. When you use "Describe it" or "AI summary", the text you typed, the item name, and the period's hours and notes are sent to Anthropic's API to produce the result. No tokens, emails, or account identifiers are sent. Anthropic does not train on API data.
- Google Fonts: loads the Figtree typeface for our views.
No analytics, advertising, or tracking cookies. We set no cookies at all; authentication uses monday's signed session token on each request.
Retention and deletion
Uninstalling TimeBoard removes our access token immediately. All remaining data for the account is permanently deleted within 10 days, automatically. Email [SUPPORT EMAIL] to request earlier deletion or an export.
Your rights
Depending on where you live you may have rights to access, correct, export, or delete personal data. Contact us at the address above; we respond within 30 days.
Changes
We will post changes here and, for material changes, notify account admins in the app.