Introduction

This Privacy Policy explains how Appstorm ("We", "Us" or "Our"), based in Tirana, Albania, collects, uses and shares personal data when You use our applications, including Kanbanify and Workloadify (each an "Application" and together the "Apps"). The Apps are built for and run within the monday.com platform and its hosting infrastructure ("monday code"), and Your app configuration is stored within monday.com. By using the Apps, You agree to the collection and use of information in accordance with this Privacy Policy. This Policy also describes Your rights and how applicable data-protection law, including the EU General Data Protection Regulation (GDPR) and Albanian data-protection law, protects You.

Some data processing differs between the Apps. Where a practice applies to only one App, We say so — for example, usage and error analytics apply to Kanbanify, and the public-holiday lookup applies to Workloadify.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Apps / Application means our software applications, including Kanbanify and Workloadify, provided within the monday.com platform, together with all related features and updates.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Appstorm, Tirana, Albania.
  • Country refers to: Albania.
  • Platform means monday.com, through which the Apps operate and which provides their hosting and storage.
  • Customer Data means content within Your monday.com account that an App processes on Your behalf (e.g. boards, items, columns, users and teams).
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Telemetry / Diagnostic Data means technical data about how the Apps are used and how they perform, such as which screens are viewed, which actions are taken, performance metrics and error logs.
  • Service Provider / Sub-processor means a third party that processes data on Our behalf, such as Our hosting platform and Our analytics and error-monitoring provider.
  • You means the individual accessing or using the Apps, or the company, or other legal entity on behalf of which such individual is accessing or using the Apps, as applicable.

Who Is Responsible for Your Data

For personal data processed in connection with the Apps (such as telemetry and diagnostic data), the data controller is Appstorm, Tirana, Albania. For Customer Data within Your monday.com account, You (or Your organization) are the controller and We act as a processor acting on Your instructions.

Collecting and Using Your Personal Data

Account and context data

When an App runs, the Platform provides context information about Your session, such as Your monday.com account and user identifiers, role indicators (for example whether You are an admin, guest or view-only user), language, time zone and the identifiers of the board or view the App is running in. We use this context to operate the App and to apply Your configuration correctly.

Installer contact data

When a user installs an App, monday.com provides Us with that installing user's contact details, such as their name and email address. We use this information to send service-related and feature communications about the App. We receive these details only for users who install an App, not for all users of Your account.

Customer Data from the Platform

Each App accesses and processes the monday.com content needed to provide its features — for example board, item and column data, and user, team and workspace details (which may include names, email addresses and profile photos). This data resides within monday.com, and Your App configuration is stored in monday.com's storage. We process Customer Data only to operate the Apps and according to Your instructions; we do not sell it. For performance, an App may temporarily cache some of this data (such as user and team metadata) in Your browser's local storage; this cache expires automatically.

Usage and diagnostic data (Kanbanify)

For Kanbanify, We use Microsoft Azure Application Insights to collect telemetry that helps Us understand how the App is used and to detect and fix problems. This includes which screens are viewed, which actions and buttons are used, configuration choices (such as filters and sorting), the number of boards and items loaded, loading times, Your subscription plan and trial status, and error and performance logs. These events are largely anonymous but may include a pseudonymous account identifier so that We can group events and diagnose issues for a given installation. We do not collect Your name, email address or the content of Your boards through this telemetry, and automatic tracking of network requests is disabled. Workloadify does not use this analytics service.

Public-holiday lookup (Workloadify)

For Workloadify, the App can calculate public holidays for the people on Your boards. To do this it sends a request — authenticated with a short-lived monday.com session token — to a holiday-lookup service We operate on Microsoft Azure. The request contains a country (and optional region) and a year, together with a monday.com person identifier. The person identifier is used only to label the returned holiday list so the correct dates are matched back to each person; the service computes the holidays in memory and returns them, and does not store or retain the identifier, the request or the session token. No names or email addresses are sent to this service.

Support communications

If You contact Us, We collect the information You provide (such as Your email and message content) to respond and provide support.

We do not intentionally collect special categories of data (e.g. health, biometric, political data). Please do not submit such data through the Apps.

Use of Your Personal Data

The Company may use personal data for the following purposes:

  • To provide, operate and maintain the Apps, including to apply Your configuration and deliver their features.
  • To authenticate users and manage access to the Apps.
  • To secure the Apps and prevent fraud or abuse.
  • To provide customer support and respond to Your requests.
  • To monitor, analyze and improve the Apps and develop new features, using usage and error analytics.
  • To send service-related communications (e.g. important updates or security notices).
  • To inform installing users about new and upcoming features of the Apps and to invite their feedback on features We are considering adding.
  • For business transfers: to evaluate or conduct a merger, acquisition or sale of assets, with notice where required.
  • To comply with legal obligations and enforce Our agreements.

We send communications about new features and feedback requests only to users who installed an App and whose contact details monday.com has shared with Us, on the basis of Our legitimate interest in keeping them informed about the Apps and improving them. You can opt out of these communications at any time using the unsubscribe link in each email or by contacting Us; We will continue to send only essential service and security messages.

We may share Your personal data in the following situations:

  • monday.com: the Platform on which the Apps run. It provides the hosting, infrastructure and storage for the Apps and Your App configuration, and processes Customer Data under its own privacy policy.
  • Microsoft Azure: Our sub-processor for (i) usage and error analytics via Azure Application Insights for Kanbanify, and (ii) hosting of the public-holiday lookup service for Workloadify. These are processed in the European Union (Azure West Europe region).
  • Legal and safety: where required by law or to protect rights, safety, or the integrity of the Apps.
  • Business transfers: in connection with a merger, acquisition or sale of assets, with notice where required.
  • With Your consent: for any other purpose You authorize.

We do not sell Your personal data.

Legal Bases for Processing (GDPR)

Where the GDPR applies, We rely on the following legal bases:

  • Performance of a contract — to provide the Apps You requested.
  • Legitimate interests — to secure, maintain and improve the Apps and to keep installing users informed about them, where not overridden by Your rights.
  • Consent — for optional features, where required; You may withdraw consent at any time.
  • Legal obligation — to comply with applicable laws.

Retention of Your Personal Data

We retain personal data only as long as necessary for the purposes set out in this Privacy Policy, including to provide the Apps, comply with legal obligations, resolve disputes and enforce Our agreements.

Your App configuration is stored in monday.com for as long as the relevant App is installed, and is deleted or becomes inaccessible within a reasonable period after uninstallation, unless retention is legally required. Kanbanify telemetry and diagnostic data is retained for a limited period in Azure Application Insights (by default, around 90 days) and then deleted. The Workloadify holiday-lookup service does not retain the requests it receives.

Transfer of Your Personal Data

Customer Data and Your App configuration are hosted and processed within monday.com's infrastructure, in line with monday.com's own policies and the data region applicable to Your account. The Kanbanify telemetry and the Workloadify holiday-lookup service We operate are processed in the European Union (Microsoft Azure, West Europe region). Depending on Your location, Your data may therefore be processed in a country outside Your own.

Where We transfer personal data internationally, We rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or transfers to countries with an adequacy decision, and We take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Your Rights

Subject to applicable law, You have the right to:

  • access the personal data We hold about You;
  • request correction of inaccurate data;
  • request deletion ("right to be forgotten");
  • restrict or object to certain processing;
  • request data portability;
  • withdraw consent where processing is based on consent.

To exercise these rights, contact Us using the details below. You also have the right to lodge a complaint with a supervisory authority — in Albania, the Information and Data Protection Commissioner (IDP); in the EU, Your local data-protection authority. If We process Customer Data on behalf of Your organization, please direct such requests to that organization. Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Apps or the public
  • Protect against legal liability

Security of Your Personal Data

The Apps run within monday.com's infrastructure and rely on its security controls for hosting and storage. We use commercially reasonable technical and organizational measures to protect personal data, such as encryption in transit, access controls and monitoring. Requests to the Workloadify holiday-lookup service are authenticated using a signed monday.com session token. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee its absolute security.

Children's Privacy

The Apps are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal data from children under 18. If You are a parent or guardian and You are aware that a child has provided Us with Personal Data, please contact Us, and We will take steps to remove that information.

Domains and Endpoints Used by the Apps

For transparency, the following domains are contacted by the Apps in addition to the monday.com Platform:

  • appstorm-holidays-cbetg7d6gjdxg6cq.westeurope-01.azurewebsites.net/api/publicholidays (Workloadify only) — an Azure Function We operate that returns public-holiday data used in workload calculations. This is Our own first-party service, not a third-party product. Requests are authenticated with a short-lived monday.com session token. No data is stored or processed by this service; a monday.com user identifier is included only to match requested users with the holidays returned in the response.
  • appstorm.tech (all apps) — Our documentation site.
  • forms.gle (all apps) — an optional user feedback form.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy and terms of service of any site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will post the updated version on this page and update the "Updated on" date at the top of this Privacy Policy.

Where changes are material, We will provide notice through the Apps or by email before they take effect. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]

Website: Appstorm