Privacy Policy
This policy explains how Signoff Labs ("we", "us") handles information when you use Client Approvals, an app for monday.com (the "App"). It applies to monday.com users who install or use the App and to external approvers ("Clients") who open an approval link.
What we collect and why
- Approval requests: the request title, note, due date, selected item files, approvers, decisions, comments and history. We need these to run the approval flow.
- monday.com user details: user IDs, names and profile pictures of the requester and approvers, read from monday.com to show who needs to approve.
- Client approver details: the name and email address the requester enters for each Client. We use them only to label the approval and to let the requester email the link. We do not email Clients ourselves.
- Access token: an OAuth token for your monday.com account so the App can post updates and notifications and show item files on the Client page.
- Technical logs: request errors and timestamps for debugging. Logs contain no file contents. They are kept for up to 30 days.
We do not sell personal data, do not use it for advertising, and do not use tracking or advertising cookies.
Where data is stored
The App runs entirely on monday.com's infrastructure (monday code). Approval data is kept in monday.com app storage. Access tokens and approval-link records are kept in monday.com secure storage, which is encrypted. Files stay in your monday.com account. The Client page shows them through monday.com's own file links. We do not copy them.
Third parties
The App uses no third-party services besides monday.com (hosting, storage, API and authentication). The App's pages load no external scripts, fonts or analytics.
Approval links
Each Client receives a long, random, unguessable link. Anyone who has the link can view that request and decide on behalf of that Client, so share it only with the intended person.
Retention and deletion
Data stays while the App is installed so your approval history remains available. When the App is uninstalled, we permanently delete the account's access token and approval-link records within 10 days. Data held in monday.com app storage is removed by monday.com according to its policies. You can ask us to delete your data at any time by emailing support@signofflabs.eu.org.
Security
All traffic uses HTTPS (TLS 1.2+). Every request to our API is verified with a signed monday.com session token. Client pages escape all user content, and only the approver a link was created for can decide through it.
Your rights
Depending on where you live (for example under the GDPR), you may have the right to access, correct, export or delete your personal data, or to object to processing. Email us and we'll respond within 30 days. Clients may contact us directly or through the requester.
Children
The App is a business tool and is not directed at children under 16.
Changes
If we make material changes, we'll update this page and the date above.
Contact
Signoff Labs · support@signofflabs.eu.org