Privacy Policy

Last updated: April 6, 2026

Inteli-K LLC ("we", "us", or "our") operates EasyFlow, a monday.com marketplace application that automates approval workflows. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use EasyFlow.

1. Information We Collect

EasyFlow collects and processes the following categories of data:

• monday.com Board Data: Item names, board names, column values (as selected by you for approval context), and status column values. This data is read from your monday.com board to power approval workflows.
• User Information: monday.com user IDs and display names of users who configure or interact with approval chains.
• Email Addresses: Approver email addresses stored in your board columns. These are used solely to send approval notification emails.
• Approval Actions: Records of approvals, rejections, and comments made by approvers, stored as updates on your monday.com items.
• Configuration Data: Your approval chain settings (trigger status, approved/rejected statuses, approval steps, context columns, token expiry) stored via the monday.com Storage SDK.
• Portal Session Data: For users of the external approval portal, we generate temporary session tokens associated with an email address. Sessions expire after 30 minutes.

2. How We Use Your Information

We use the collected information exclusively to provide and operate the EasyFlow service:

• Routing approval requests through your configured approval chains
• Sending email notifications to approvers with relevant item context
• Updating item statuses on your monday.com board based on approval outcomes
• Logging approval actions as item updates for your audit trail
• Authenticating external approvers via the approval portal
• Enforcing subscription plan limits (approval counts, step limits)

3. Data Storage

EasyFlow stores data using the monday.com Storage SDK, which means your data resides within monday.com's infrastructure. We do not maintain a separate external database for your board data, approval configurations, or approval history.

Temporary approval tokens and portal sessions are stored in monday.com Storage with automatic expiration. Approval tokens are encrypted using AES-256-CBC and signed using HMAC-SHA256.

4. Third-Party Services

EasyFlow integrates with the following third-party services. We do not use any analytics, advertising, or user-tracking services.

Service	Domain(s)	Purpose
monday.com	api.monday.com	Core platform. EasyFlow runs on monday.com and uses its GraphQL API to read board/item data, update statuses, and manage approval workflows. Data storage uses the monday.com Storage SDK. See monday.com's Privacy Policy.
Resend	api.resend.com	Email delivery. Used to send approval notification emails, magic-link authentication emails for the portal, and contact-form messages. Resend processes approver email addresses and email content on our behalf. See Resend's Privacy Policy.
Google Fonts	fonts.googleapis.com, fonts.gstatic.com	Typography. The website loads the Plus Jakarta Sans and Inter font families from Google Fonts. Google may log standard request metadata (IP address, user agent) when fonts are fetched. No cookies are set. See Google Fonts Privacy FAQ.
monday.com App Hosting	*.monday.app, *.cdn2.monday.app	App runtime. The EasyFlow backend and React client are hosted on monday.com's infrastructure (monday code). These domains serve the app's API and frontend within monday.com board views.

EasyFlow does not use any analytics platforms, advertising networks, tracking pixels, or monitoring services beyond the services listed above.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only as necessary to provide the service (e.g., sending email addresses to Resend for email delivery) and as described in this policy.

6. Data Retention and Deletion

Approval configurations and approval history are stored via the monday.com Storage SDK and persist as long as the app is installed on your board. Temporary tokens expire according to your configured expiry time (default: 48 hours). Portal sessions expire after 30 minutes.

Upon uninstalling EasyFlow from your monday.com account, data stored via the monday.com Storage SDK is handled according to monday.com's data retention policies. Approval actions logged as item updates on your monday.com board remain as part of your board history.

7. Data Security

We implement appropriate technical measures to protect your data:

• All communications use HTTPS/TLS encryption in transit
• Approval tokens are encrypted with AES-256-CBC and signed with HMAC-SHA256
• Tokens are single-use and expire after the configured period
• Portal sessions have a 30-minute time-to-live
• All API requests from monday.com are authenticated via JWT verification
• Application secrets are stored as environment variables, never in source code

8. Cookies and Tracking

The EasyFlow board views within monday.com do not set cookies. The external approval portal uses browser localStorage (not cookies) to maintain session state. We do not use tracking cookies, analytics, or advertising pixels.

9. Children's Privacy

EasyFlow is a business application and is not directed at children under 13. We do not knowingly collect personal information from children.

10. User Communication

We may contact you via the email address associated with your monday.com account for:

• Critical service notifications (security incidents, breaking changes)
• Responses to your support inquiries

We will not send marketing emails unless you explicitly opt in.

11. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. As EasyFlow data is stored within monday.com's infrastructure, you can also manage your data directly through monday.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

Inteli-K LLC
Email: contacto@inteli-k.com
Website: easyflow.day