1. Scope & Definitions#
| Term | Meaning |
|---|---|
| App Developer | The creator and maintainer of the application reflector.dev. |
| Licensee | The organization that has purchased or subscribed to the app and distributes it to its users. |
| User | Any individual who accesses the app through the Licensee’s Monday.com workspace. |
| Monday.com | The SaaS platform that hosts the app and provides all data storage and processing services. |
| EULA | End‑User License Agreement governing the relationship between the User and the Licensee. |
| Personal Data | Any information that can identify a natural person (e.g., name, email, IP address, task details). |
2. Data Controller & Processor#
- Monday.com is the sole data controller and processor for all Personal Data collected, stored, and processed by the app.
- The App Developer does not act as a data controller or processor and has no automatic access to any user data, unless article 4. is applicable.
3. Data Storage & Processing#
- All data is stored exclusively on Monday.com’s infrastructure within the geographic region(s) selected by the Licensee.
- Monday.com handles encryption at rest and in transit, access controls, backup, and disaster‑recovery in accordance with its own privacy and security policies.
- The App Developer does not host, replicate, or backup any user data outside of Monday.com.
4. Access by the App Developer#
| Condition | Access Procedure |
|---|---|
| A User experiences an issue with the app and submits a written request through the official support channel of the Licensee, and the request is backed by the User’s signed EULA | 1. The Licensee forwards the request to the App Developer. 2. The App Developer receives only the minimal data necessary to resolve the issue (e.g., specific task IDs, error logs). 3. Access is logged by Monday.com and the Licensee, and the data is deleted immediately after the issue is resolved. |
| Any other circumstance | No access is granted. The App Developer must request assistance from Monday.com or the Licensee, who will handle the matter without exposing raw user data. |
5. Legal Basis for Processing#
- Monday.com processes Personal Data based on the contractual necessity of providing the SaaS service to the Licensee and its Users.
- The App Developer’s limited access, when authorized, is based on explicit user consent documented in the EULA and the written support request.
6. Data Retention#
- Any data accessed by the App Developer under the conditions above is retained only for the duration needed to resolve the issue and is then permanently deleted.