Update Mover privacy

Where the application runs

Update Mover runs on monday code, monday.com’s own hosting, in its EU region, and stores data only in monday code storage. Atesen Software operates no other server or database for it. It sends requests only to monday.com’s API; there are no analytics, advertising or other third-party services.

What it stores

• An OAuth access token for each person who authorizes Update Mover, kept in monday code’s encrypted secure storage under the account and user id.
• A record of each copy or move job, kept for 30 days: account, user, item, update and file ids, the ids of the copies, the name and link of the source item (used for the “Moved from” line), counts, status and short error codes. It never contains the text of updates or replies, or file contents.
• The account’s plan, as sent by monday.com’s subscription events, and a monthly count of finished jobs for the Free plan.
• In monday.com’s own app storage for the view: the Rules a Pro user adds to a board (the people and phrases chosen) and whether a person has closed the first-use tip.

What passes through but is not stored

To copy an update, its text, replies and files are read from monday.com and written to the destination item. Files pass through the server’s memory and are never written to disk. Logs contain only ids, counts, status and durations, never text, email addresses or tokens.

Permissions it asks for

• me:read, to know who authorized it; users:read, for the original author’s name.
• boards:read, to find the destination item and link back to the source item.
• updates:read and updates:write, to read the selected updates and replies, write the copies and delete the original after a verified move.
• assets:read, to download attached files so they can be copied.

How long it is kept

Job records are deleted after 30 days. When Update Mover is uninstalled from an account, its tokens, job records, plan and usage count are deleted immediately. To ask for deletion earlier, email support@atesensoftware.com.