← Back to StatusTrail

Privacy Policy

App: StatusTrail  ·  Effective date: May 12, 2026  ·  Controller: Md. Mohibur Rahman

1. Who We Are

StatusTrail is a monday.com marketplace application developed and operated by Md. Mohibur Rahman ("we", "us", or "our"), an individual developer. Contact: open a support issue.

StatusTrail monitors board item status columns, tracks SLA timers, and delivers in-app notifications when breach thresholds are exceeded. It runs entirely on monday-code infrastructure — monday.com's own managed hosting environment — with no external servers, external databases, or third-party cloud providers operated by us.

2. Data We Collect and Why

We collect only the data necessary to deliver SLA monitoring and breach alerting. The table below lists every category of data stored by StatusTrail.

Data Example Purpose Source
account_id Numeric monday account identifier Isolate data per monday account (multi-tenancy) monday OAuth token / account:read
board_id Numeric board identifier Identify which boards are monitored monday API / boards:read
item_id Numeric item identifier Track SLA state per item monday API / boards:read
column_id Status column identifier Know which column to watch monday API / boards:read
user_id Numeric monday user identifier Scope data to requesting user; display in audit trail monday OAuth / me:read, users:read
Status value "In Progress", "Done" (label only) Detect status transitions for SLA timer events monday API / boards:read
Timestamps ISO-8601 datetime of status change Calculate SLA elapsed time and breach thresholds monday API / boards:read

What we do NOT collect or store:

3. Legal Basis for Processing (GDPR)

We process the data identified in Section 2 on the basis of contract performance (GDPR Article 6(1)(b)) — the processing is necessary to deliver the SLA monitoring service you installed from the monday marketplace. Where we collect user_id to attribute audit events, we rely on our legitimate interest (GDPR Article 6(1)(f)) in providing accurate, per-user operational logs.

4. OAuth Permissions We Request

ScopeReason
me:readIdentify the current user to scope stored data per account
account:readRead account metadata for multi-tenant data isolation
boards:readRead board structure, status columns, and item events
notifications:writeDeliver in-app monday notifications when an SLA breach is detected
users:readResolve user names for display in audit trail views

We do not request write access to boards, items, or any data beyond what is listed above.

5. Sub-Processors

StatusTrail relies on a single sub-processor. No data is transmitted to any other third-party service.

Sub-processorRoleLocation
monday.com Ltd. Platform host, compute (monday-code), and key-value storage Israel / EU (per monday.com's DPA)

All data processed by StatusTrail is stored exclusively in monday-code storage infrastructure operated by monday.com Ltd. We do not operate any additional servers, databases, or cloud infrastructure.

6. Cookies and Tracking

StatusTrail uses no tracking cookies, no analytics SDKs, and no third-party scripts in its frontend. No behavioral or usage data is collected for advertising or profiling purposes. The app does not set any persistent cookies in the user's browser.

7. Data Retention

SLA event records (board_id, item_id, column_id, status values, timestamps) are retained for as long as the app is installed in your monday account. Records tied to a specific item are removed automatically when the board or item is deleted on monday.

On app uninstall: all data associated with your account_id is permanently deleted within 10 business days of the uninstall event, consistent with monday marketplace requirements.

8. Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights:

9. Right to Erasure — How to Request (GDPR Article 17)

You may request deletion of all data StatusTrail holds about your monday account at any time by:

Because StatusTrail stores only opaque numeric IDs (no names, no email addresses, no PII), deletion means permanently removing records keyed to your account_id, board_id, and item_id from monday-code storage.

10. Data Security

All data is stored within monday-code's managed infrastructure, which provides encryption at rest and in transit. Access to stored data is authenticated via monday's signed JWT tokens on every request. We do not hold long-lived credentials that could expose data outside the monday platform.

11. International Data Transfers

Data is stored on infrastructure operated by monday.com Ltd., which publishes its own Data Processing Addendum (DPA) and Standard Contractual Clauses for international transfers. We do not independently transfer data outside monday's infrastructure.

12. Children's Privacy

StatusTrail is a business productivity tool intended for use by adults in a professional context. We do not knowingly collect data from individuals under the age of 16.

13. Changes to This Policy

We may update this Privacy Policy when the app's data practices change. Material changes will be communicated via a monday in-app notification or by updating the effective date above. Continued use of StatusTrail after the effective date constitutes acceptance of the revised policy.

14. Contact

For questions, access requests, or erasure requests, contact:
Md. Mohibur Rahman
open a support issue