top of page
monday.com free trial badge

Privacy Policy — AllDayIT Apps for monday.com

Effective date: 10 November 2026
Entity: AllDayIT Ltd. ("AllDayIT", "we", "us", "our"), Israel
Contact: service@alldayit.com · www.alldayit.com


This Privacy Policy describes how AllDayIT handles data in connection with the applications we publish on the monday.com marketplace (each an "App"), currently Related Items and Speedometer. It is provided under the entity name AllDayIT Ltd., the same entity that publishes the Apps.


This policy covers the Apps only. Visits to our website www.alldayit.com are covered by the separate Website Privacy Policy.


The short version: the data our Apps store is held in monday.com's own application storage or, for an account whose admin moves its Related Items data to the account's own cloud, in that cloud (section 3). Related Items runs on monday.com's application hosting, with a small number of supporting services on Amazon Web Services and two optional features that call public data sources: Yahoo Finance for share prices, and central banks for exchange rates; section 3 lists each one and what it receives. When you uninstall an App, its stored data for your account is deleted.


1. Roles

For data in your monday.com account, you (the customer) are the data controller and AllDayIT is a processor, processing that data only to provide the App's functionality to you. For our limited administrative records (such as support correspondence), AllDayIT is the controller.


2. What the Apps access, store, and why

Related Items

Related Items reads, from the boards you connect, the columns needed to do its job: the match-key column, the amount, date, status and other columns you select during setup, and any extra display columns users choose. To deliver fast summaries over very large boards, the App stores in monday.com's application storage (monday "Key-Value" and object storage, hosted by monday.com):


  • Aggregates — computed totals, counts, averages and date ranges per item;
  • Compact item projections — the selected fields of related items (which, depending on the columns you choose, may include personal data such as names or account identifiers that you keep on your boards);
  • Configuration — connection settings, column mappings, Smart Column selections, business-profile details you enter (such as your letterhead, tax ID and document numbering), and usage counters;
  • Authorization tokens: the monday.com access and refresh tokens of each person who authorizes the App, stored with that person's monday.com user ID so that your admins can see whose authorization the App acts under. The App reads the person's name from monday.com when it shows it. Tokens are stored encrypted at rest (AES-256-GCM).


Data kept in your own cloud. If your account runs its Related Items app engine in its own cloud account and an account admin moves the account's Related Items data there, the aggregates and compact item projections are kept in that cloud account, in the storage the engine created, instead of in monday.com's application storage. Configuration and authorization tokens stay in monday.com's application storage. When a booking form's items are kept in your own cloud, the booker's browser sends the booking straight to your Related Items app engine, which creates the booking item with your account's login.


Generated documents (invoices/statements) are written to a registry board inside your own monday.com account.


AI features. When a user asks for an AI briefing, asks BoardRoom a question, or an automation runs the "Get item summary" action with an AI-written briefing, the App sends the computed figures for that request, with the item details needed to describe them, to monday.com's own AI service, on your account's AI allotment. An account admin can switch every AI feature off for the account.


In your browser. The App keeps your view preferences and a short-lived copy of data you have already loaded in your browser's own storage, so that views open faster.


Personal data Related Items stores, and how it is handled


Types of personal data


  • Personal data on your boards. The App stores and encrypts the columns you map and the display columns your users choose. Depending on those columns, this can include names, email addresses, phone numbers, postal addresses, customer or account numbers, and the dates, amounts and notes of transactions. Columns titled as card numbers or card security codes are refused.
  • Identifiers of the people who use the App. monday.com user IDs and account IDs, kept with each person's authorization, in the list of people who have allowed the App, with your admins' choice of operating user, and in usage counters. The App reads people's names from monday.com when it shows them.
  • Authorization tokens of each person who authorizes the App.
  • Business-profile details you enter, such as your letterhead and tax ID.
  • Related Items app engine pairing. If your account pairs a Related Items app engine, the network address the pairing request came from.


How it is handled


  • Purpose: to provide the App's features to your account: related-item summaries, Smart Column values, documents, and the AI answers your users ask for (see AI features above).
  • Encryption: tokens and board data are encrypted with AES-256-GCM when they are saved. The name of a storage entry can contain an item's match value, such as a customer number. In your own cloud account, the Related Items data an account admin moved there (section 2) is encrypted with AES-256-GCM by your Related Items app engine before it is saved, with a key held in your cloud account's secret store (AWS Parameter Store or Azure Key Vault). The storage the engine's installation creates is encrypted at rest (AES-256) and accepts encrypted connections; the engine's working data there (item keys and its item index, computed summaries, the search files Find items uses, sync state and logs) is protected by that storage encryption.
  • Access: data is served to authenticated sessions of your own monday.com account. Members who are not admins see a connection's data when they can open its boards in monday.com. An item view of data kept in your own cloud reads it from your Related Items app engine's address, with a short-lived ticket the App issues to an authenticated session of your account.
  • Location: monday.com's application storage, or your own cloud account when the account's data has been moved there (section 3).
  • Retention: kept while the item and its connection exist. An item deleted on its board is removed from storage, a removed connection's data is deleted, and an uninstall deletes your account's data within 10 days (section 5).


Speedometer

Speedometer stores its widget configuration settings in monday.com's storage.


Operational telemetry (vendor access)

AllDayIT accesses limited operational metadata about App installations — connection names, board and account identifiers, sync status, and aggregate item and activity counters — for service operation, monitoring and support. Connection names are free text typed by you; we recommend not placing sensitive information in them.


3. Where data lives; sub-processors

Related Items runs on monday.com's application hosting ("monday code"), in all four of monday.com's regions. The data the App stores about your boards (the configured projection of the columns you map and the totals computed from them) is held in monday.com's application storage. Today that storage is a single store in monday.com's US region for all accounts, whichever region hosts your monday.com account. We are moving each account's stored data to storage in the account's own region, and we will update this policy when that move is complete. If your account runs its Related Items app engine in its own cloud account and an account admin moves its Related Items data there, that data is held in your cloud account, in the region you chose for the engine, and item views read it from the engine's address. monday.com Ltd. is our storage and hosting sub-processor for that data, and monday.com's own security and compliance documentation applies to it. Speedometer's widget code is currently served from hosting outside monday.com (we are working to migrate it to monday.com hosting); it stores only widget settings, in monday.com's storage, and sends no customer data outside monday.com.


In addition, AllDayIT operates a small number of supporting services on Amazon Web Services (AWS), in the EU (Frankfurt) and Israel (Tel Aviv) regions:


  • A change-notification queue. When an item on a connected board changes, monday.com sends the App a notification, and the queue passes it to the App at a controlled pace. The queue keeps the kind of change, the identifiers of the board, the item and the column, and the monday user ID of the person or automation that made the change. The App uses that user ID to count each person's changes over the last 24 hours, so that a very high volume from one person is processed in larger batches, and, the first time a person's volume is very high, to send them one monday.com notification; those counts are kept for about 24 hours. Entries are encrypted at rest, normally held for minutes (up to an hour during a very high volume of changes), and for at most four days if delivery is interrupted, then deleted.
  • Service monitoring. Health checks and counters about the App itself: whether each region answers and how many minutes of processing were used, with account names, connection names and board identifiers so that a problem can be traced to the installation it affects.
  • A Related Items app engine hosted by AllDayIT, by one-off agreement. On a one-off basis, AllDayIT has agreed to run a Related Items app engine for a customer in AllDayIT's AWS account, in a region agreed with that customer. The engine's working data for that customer (item keys and its item index, computed summaries, sync state and logs), the customer's monday.com authorization and, if moved there, its Related Items data (section 2) are then held in that account, encrypted at rest; the Related Items data is encrypted with AES-256-GCM by the engine.


Amazon Web Services EMEA SARL is our sub-processor for these services. If you run your Related Items app engine in your own cloud account, that account is yours: the engine processes your data there and, when an account admin moves your Related Items data there, stores it there, under your own cloud provider's terms.


Share prices (Investment Portfolio workflow). If you use the Investment Portfolio workflow with a prices board, the App asks Yahoo Finance for the daily closing price of the ticker symbols listed on that board. The request contains the ticker symbol.


Exchange rates (currency conversion). On the free trial and the paid plans, Related Items converts amounts into your home currency using the daily reference rates published by the European Central Bank and, for amounts in Israeli shekels, the representative rates published by the Bank of Israel. Each request names the currencies and the date of the rate it needs. Your browser fetches the European Central Bank's rates from api.frankfurter.dev, which, like any website, receives your browser's IP address with the request. Related Items fetches the Bank of Israel's rates from edge.boi.org.il. The rates are public figures. Your browser keeps the rates it has fetched; Related Items keeps the Bank of Israel's rates in its own storage. Converted figures show the date and the source of the rates used.


Uptime checks. GitHub and UptimeRobot check on a schedule whether the App is answering. They call the App's public health-check addresses.


The Apps use no third-party analytics, advertising or tracking services, and set no cookies.


4. Access control and security

  • Each account's data is segregated and served fail-closed: an App connection is served to authenticated sessions of the monday.com account it belongs to.
  • Every request to our backend is authenticated: requests from the App's views carry monday.com-signed session tokens, and notifications from monday.com are checked against the App's own secrets.
  • Access tokens are encrypted at rest. Board data the App saves in monday.com's app storage is encrypted (AES-256-GCM) when it is saved. Secrets are kept in monday.com's secure environment configuration.
  • We request the minimum permission scopes needed for each App's features.
  • Application logs are minimal and short-lived.


5. Retention and deletion

  • Stored data is retained while the App is installed and serving your account.
  • When you uninstall an App, its stored data for your account (aggregates, projections, configuration and tokens) is deleted, and in any event within 10 days, in line with monday.com's marketplace requirements.
  • If your account's Related Items data is kept in your own cloud account, your Related Items app engine and its backup delete the files they stored there when they confirm the uninstall (see the engine record below). The storage the engine's installation created stays in your cloud account for you to remove.
  • If a Related Items trial ends without a paid plan, the App stops updating your account and keeps its stored data for 30 days from the day the trial ended. If a paid plan ends and is not renewed while the App is still installed, the App stops updating your account and keeps its stored data for 60 days from the day the plan ended. Choosing a plan within that period resumes the App with the stored data; a large dataset may need to be loaded again. After that period, the stored data is deleted as it is when you uninstall.
  • Operational records about each installation (the usage counters and monitoring files described in sections 2 and 3) are kept for up to 13 months, then deleted. When you uninstall an App, your account's entries in them are deleted within 10 days, together with its other stored data.
  • If your account ran a Related Items app engine, the App keeps a record of that engine (its identifier, your monday.com account ID, the dates it was connected and removed, and a one-way code that confirms the engine's identity) for up to 60 days after you uninstall, so the engine can confirm the uninstall and delete the data it stores in your cloud.
  • You can also remove individual connections at any time from within Related Items, which deletes that connection's stored data.
  • Support correspondence is retained as long as needed to handle your request and for our legitimate administrative records.


6. Sale of data, profiling and AI training

  • We do not sell your personal information or share it for cross-context behavioral advertising.
  • We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
  • We do not use your data to train AI models.


7. GDPR (EU/EEA and UK customers)

Where the EU/UK General Data Protection Regulation applies to data on your boards:


  • We process that data only on your instructions as expressed through your installation and configuration of the App (Article 28 processing). Our legal basis for the limited data we control (e.g., support emails) is legitimate interest in operating and supporting the Apps.
  • The App's stored data is currently held in monday.com's US region (section 3), so for accounts outside the US this is processing outside your account's region. The international transfer safeguards are those maintained by monday.com Ltd. for its infrastructure, including its standard contractual protections. The supporting services on AWS run in the EU and Israel. If your organization has strict data-residency requirements, contact us before installing.
  • We assist with data-subject rights: because related-item data mirrors what is on your boards, correcting or deleting it at the source flows through automatically; on request we will delete stored projections for specific keys. Requests: service@alldayit.com.
  • We will notify you without undue delay of any personal-data breach affecting our processing, so you can meet your own notification duties.


8. Children

The Apps are business tools intended for monday.com account holders and are not directed at children under 16. We do not knowingly process children's data except as it may appear in customer board content under your control.


9. Your choices and rights

You control what boards and columns the Apps can see. You may disconnect connections, uninstall an App, or revoke its authorization at any time. Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction, portability and objection regarding personal data we hold — contact us at service@alldayit.com and we will respond promptly. You may also lodge a complaint with your local supervisory authority.


10. Changes to this policy

We may update this policy as the Apps evolve or as legal requirements change; the "Effective date" above reflects the latest version. Material changes will be communicated through the Apps or their marketplace listings.


11. Contact

AllDayIT Ltd., Israel
Email: service@alldayit.com
Web: www.alldayit.com


Related Items and Speedometer are monday.com applications by AllDayIT Ltd. "monday.com" is a trademark of monday.com Ltd.


bottom of page