Privacy Policy — AllDayIT Apps

for monday.com

Effective date: 19 July 2026 Entity: AllDayIT Ltd. ("AllDayIT", "we", "us", "our"), Israel Contact: service@alldayit.com · www.alldayit.com

This Privacy Policy describes how AllDayIT handles data in connection with the applications we publish on the monday.com marketplace (each an "App"), currently Related Items and Speedometer. It is provided under the entity name AllDayIT Ltd., the same entity that publishes the Apps.

This policy covers the Apps only. Visits to our website www.alldayit.com are covered by the separate Website Privacy Policy.

The short version: any data our Apps store stays inside monday.com's own cloud infrastructure; no customer data is sent to third-party services. Related Items runs entirely on monday.com's application hosting. When you uninstall an App, its stored data for your account is deleted.

1. Roles

For data in your monday.com account, you (the customer) are the data controller and AllDayIT is a processor, processing that data only to provide the App's functionality to you. For our limited administrative records (such as support correspondence), AllDayIT is the controller.

2. What the Apps access, store, and why

Related Items

Related Items reads, from the boards you connect, only the columns needed to do its job: the match-key column, the amount, date, status and other columns you select during setup, and any extra display columns users choose. To deliver fast summaries over very large boards, the App stores in monday.com's application storage (monday "Key-Value" and object storage, hosted by monday.com):

Aggregates — computed totals, counts, averages and date ranges per item;
Compact record projections — the selected fields of related records (which, depending on the columns you choose, may include personal data such as names or account identifiers that you keep on your boards);
Configuration — connection settings, column mappings, Smart Column selections, business-profile details you enter (such as your letterhead, tax ID and document numbering), and usage counters;
Authorization tokens — the monday.com access token for your account, stored encrypted at rest (AES-256-GCM).

Extra display columns fetched at view time are not stored. Generated documents (invoices/statements) are written to a registry board inside your own monday.com account — not to our storage.

Speedometer

Speedometer stores only widget configuration settings via monday.com's storage. It does not store customer data.

Operational telemetry (vendor access)

AllDayIT accesses limited operational metadata about App installations — connection names, board and account identifiers, sync status, and aggregate row and activity counters — for service operation, monitoring and support. Record-level customer data is never included in this telemetry: no names, match keys, transaction records, amounts, or Smart Column values. Connection names are free text typed by you; we recommend not placing sensitive information in them.

3. Where data lives; no third parties

Related Items runs entirely on monday.com's application hosting ("monday code"), and all data stored by our Apps resides in monday.com's cloud infrastructure. Related Items uses monday.com's multi-region hosting: your account is served, and its data stored, in the monday.com data region that hosts your account (US, EU, AU or IL). Accounts installed before regional rollout may be hosted in the US region; contact us if you would like such an account's storage relocated. Speedometer's widget code is currently served from hosting outside monday.com (we are working to migrate it to monday.com hosting); it stores only widget settings, in monday.com's storage, and sends no customer data outside monday.com. No customer data is sent to any third-party service — no external analytics, advertising, tracking or processing services. Our Apps set no cookies.

Because all stored data is inside monday.com's infrastructure, monday.com Ltd. acts as our storage (and, for Related Items, hosting) sub-processor; monday.com's own security and compliance documentation applies to that infrastructure.

4. Access control and security

Each account's data is segregated and served fail-closed: an App connection is only ever served to authenticated sessions of the monday.com account it belongs to.
Every request to our backend is authenticated (monday.com-signed session tokens; webhooks verified before processing).
Access tokens are encrypted at rest; secrets are kept in monday.com's secure environment configuration, never in code repositories.
We request the minimum permission scopes needed for each App's features.
Application logs are minimal, short-lived, and are not used to store secrets or personal data.

5. Retention and deletion

Stored data is retained only while the App is installed and serving your account.
When you uninstall an App (or revoke its authorization), its stored data for your account — aggregates, projections, configuration and tokens — is deleted, and in any event within 10 days, in line with monday.com's marketplace requirements.
You can also remove individual connections at any time from within Related Items, which deletes that connection's stored data.
Support correspondence is retained as long as needed to handle your request and for our legitimate administrative records.

6. What we do NOT do

We do not sell, rent, or share your data with anyone.
We do not use your data for advertising, profiling, or training of any kind.
We do not read boards beyond the ones you connect and the columns the App needs.
We do not process payments — paid plans are billed entirely by monday.com, and we never see your payment details.

7. GDPR (EU/EEA and UK customers)

Where the EU/UK General Data Protection Regulation applies to data on your boards:

We process that data only on your instructions as expressed through your installation and configuration of the App (Article 28 processing). Our legal basis for the limited data we control (e.g., support emails) is legitimate interest in operating and supporting the Apps.
For accounts hosted in monday.com's EU region, storage and processing occur within the EU. Where processing occurs outside your region (for example, an account installed before regional rollout), international transfer safeguards are those maintained by monday.com Ltd. for its infrastructure, including its standard contractual protections. If your organization has strict data-residency requirements, contact us and we will confirm your account's hosting region.
We assist with data-subject rights: because related-record data mirrors what is on your boards, correcting or deleting it at the source flows through automatically; on request we will delete stored projections for specific keys. Requests: service@alldayit.com.
We will notify you without undue delay of any personal-data breach affecting our processing, so you can meet your own notification duties.

8. Children

The Apps are business tools intended for monday.com account holders and are not directed at children under 16. We do not knowingly process children's data except as it may appear in customer board content under your control.

9. Your choices and rights

You control what boards and columns the Apps can see. You may disconnect connections, uninstall an App, or revoke its authorization at any time. Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction, portability and objection regarding personal data we hold — contact us at service@alldayit.com and we will respond promptly. You may also lodge a complaint with your local supervisory authority.

10. Changes to this policy

We may update this policy as the Apps evolve or as legal requirements change; the "Effective date" above reflects the latest version. Material changes will be communicated through the Apps or their marketplace listings.

11. Contact

AllDayIT Ltd., Israel Email: service@alldayit.com Web: www.alldayit.com

Related Items and Speedometer are monday.com applications by AllDayIT Ltd. "monday.com" is a trademark of monday.com Ltd.