APP – Privacy Policy
This Privacy Policy explains how Inception Software
1. About the App
Quick Copy & Move Files is a monday.com integration that copies, moves, or syncs files between file columns, items, and boards within your monday.com account, based on the recipes you configure. The App runs as a backend service that responds to triggers you set up in monday.com. This policy applies to all users of the App worldwide.
2. Data We Process
To perform a file transfer you have configured, the App processes:
- File contents — the files stored in the monday.com file columns involved in a transfer.
- Board and item data — the board ID, item ID, column IDs, and asset IDs needed to locate the source file and the destination.
- Authentication data — a short-lived access token issued by monday.com to authorize each request. We do not store your monday.com password or long-lived credentials.
- User identifiers — the monday.com user/account identifiers associated with a triggered action, used to operate the service.
We do not collect or process this data for advertising, profiling, or any purpose other than performing the file operations you request.
3. How Files Are Handled (Transient Processing)
When a recipe runs, the App reads the relevant file from monday.com, briefly processes it on our server solely to re-upload it to the destination location within monday.com, and then deletes it immediately. File contents are not retained after the transfer completes.
The only data we retain is transfer metadata (item, column, and asset identifiers with a status), which is stored within monday.com’s SecureStorage to prevent duplicate transfers. We do not operate a separate database containing your files or personal data.
4. Where Data Is Processed (Hosting & International Transfers)
Our backend service is hosted on a dedicated server provided by Hostinger International Ltd., located in the United States (Boston). Because file processing occurs on this server, file contents are transiently processed outside the European Economic Area (EEA).
Where personal data of individuals in the EEA/UK is transferred outside the EEA, such transfers are governed by the European Commission’s Standard Contractual Clauses (SCCs), incorporated through our data processing agreement with our hosting provider and through monday.com’s own data processing terms.
5. Sub-processors
We use the following sub-processors to provide the App:
| Sub-processor | Purpose | Location |
|---|---|---|
| monday.com (monday.com Ltd.) | Platform, API, and SecureStorage for transfer metadata | Per monday.com’s terms |
| Hostinger International Ltd. | Backend server hosting and processing | United States |
We will update this list before adding or changing a sub-processor.
6. Data Retention and Deletion
- File contents: deleted immediately after each transfer; not retained.
- Transfer metadata: stored in monday.com SecureStorage only as long as needed to operate the service and prevent duplicate transfers.
- On uninstall / de-authorization: when the App is uninstalled or otherwise de-authorized, all associated data collected or stored by the App is permanently deleted within 10 days.
7. Data Security
We access monday.com data only via monday.com’s authenticated API using short-lived tokens. All communication with monday.com occurs over encrypted (HTTPS/TLS) connections. We apply appropriate technical and organizational measures to protect the limited data we process.
8. Legal Basis for Processing (GDPR)
Where GDPR applies, we process data as a processor acting on the instructions of your organization (the controller), to perform the file-transfer service you have configured. Our processing is based on the performance of that service and your organization’s legitimate interests in operating its monday.com workflows.
9. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, to data portability, and to lodge a complaint with a data protection authority. These rights vary by jurisdiction (for example, under the EU/UK GDPR, California’s CCPA/CPRA, and similar laws). As the App processes data on behalf of your organization, please direct such requests to your organization’s monday.com administrator, or contact us and we will assist the controller in responding.
10. Data Processing Agreement
A Data Processing Agreement (DPA) covering our processing of personal data on your behalf is available on request at the contact below.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, notifying users.
12. Contact
Inception Software
Privacy & support: support@inceptionsoftware.org
Last updated: April 20, 2022