1. Who We Are

This Privacy Policy applies to all monday.com marketplace apps developed and operated by Astro Digital Ltd. This includes (but is not limited to) SimplyApprove and SimplyTrigger, and any future apps published by Astro Digital Ltd in the monday.com marketplace.

Astro Digital Ltd is a company registered in England and Wales. If you have any questions about this Privacy Policy, please contact us at support@astrodigital.ai.

2. Our Approach to Privacy

Our apps are designed with privacy at their core. They operate entirely within the monday.com platform infrastructure. We do not operate our own external servers, databases, or data storage systems. All app data is stored using monday.com's native Secure Storage, and where email communication occurs, it is handled via monday.com's native email integration.

This means we do not collect, store, transmit, or process your data outside of monday.com's own infrastructure.

3. What Data Our Apps Handle

Our apps handle the following types of data solely within the monday.com platform. The specific data handled depends on which app you are using.

Common data types handled across our apps:

Board column values selected for use within app automations (e.g. dates, numbers, status values)
Status column configurations used to update item status upon trigger or action
Configuration data for automations created by you within the monday.com automation builder

Additional data handled by specific apps:

SimplyApprove — email addresses stored in your monday.com board columns (used to send approval request emails); secure approval tokens stored in monday.com Secure Storage that map approval actions to board items and status columns
SimplyTrigger — numeric formula column values used to evaluate threshold-based triggers

None of this data is transmitted to, stored by, or accessible by Astro Digital Ltd or any third party outside of monday.com's infrastructure.

4. Apps That Send Email (Applies to SimplyApprove)

This section applies only to Astro Digital apps that send email notifications. SimplyApprove is currently the only such app.

When an approval request email is sent, the approver receives an email containing secure Approve and Decline links. These links are generated and stored within monday.com's Secure Storage. When clicked, the approver is directed to a response page hosted on monday Code — monday.com's own hosting infrastructure. No personal data about the approver is collected, stored, or processed beyond what is necessary to action the approval request within monday.com.

5. Data We Do Not Collect

Across all our apps, we do not:

Collect or store personal data on external servers
Use cookies or tracking technologies
Share data with third parties
Use data for analytics or marketing purposes
Store logs containing personally identifiable information
Transmit any data outside of monday.com's infrastructure

6. monday.com's Role

As our apps operate entirely within the monday.com platform, monday.com's own Privacy Policy and Terms of Service apply to the storage and processing of data within their infrastructure. We encourage you to review monday.com's Privacy Policy at monday.com/l/privacy.

7. Data Retention

Where Astro Digital apps store data within monday.com Secure Storage, retention periods depend on the app:

SimplyApprove — approval tokens stored in monday.com Secure Storage are automatically invalidated after 7 days
SimplyTrigger — does not store persistent tokens or session data

No data is retained by Astro Digital Ltd beyond what monday.com manages within its own infrastructure.

8. Your Rights

As a UK-based company, Astro Digital Ltd complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As our apps do not collect or store personal data outside of monday.com, the primary data controller for your data is monday.com. For requests relating to your personal data, please contact monday.com directly or reach out to us at support@astrodigital.ai and we will assist where possible.

9. Security

Our apps use monday.com's native Secure Storage for all token and configuration management. Where applicable (e.g. SimplyApprove), approval links are cryptographically secured, single-use, and expire after 7 days. All data remains within monday.com's security infrastructure, which is ISO 27001 certified and GDPR compliant.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated through monday.com's standard partner communication channels. Continued use of our apps after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or concerns, please contact us at support@astrodigital.ai.