Privacy Policy
Effective date: March 1, 2026
Conduit ("we", "us", or "our") is a Monday.com marketplace application that syncs board data into external databases. This Privacy Policy explains what information we collect, how we use it, and how we protect it.
By installing or using Conduit, you agree to the practices described in this policy.
1. Information We Collect
1.1 Monday.com Account Information
When you install Conduit through the Monday.com marketplace, we receive and store:
- Account ID — your Monday.com organisation's unique identifier
- User ID — the ID of the user who authorised the installation
- OAuth access token — a token that allows Conduit to read your boards, items, and column data on your behalf
We do not receive or store your Monday.com password.
1.2 Database Connection Credentials
To connect to your external database, you provide:
- Database host, port, and database name
- A database username and password (or connection string)
- The database type (PostgreSQL, MySQL/MariaDB, or MongoDB)
- A friendly name for the connection
How credentials are stored: All database passwords and connection strings are encrypted at rest using AES-256 symmetric encryption before being written to our application database. The encryption key is stored separately from the encrypted data and is never logged or transmitted. Credentials are decrypted only in memory at the moment a database connection is established, and are never exposed in API responses, logs, or error messages.
1.3 Sync Configuration
When you set up a sync, we store the configuration you define:
- The Monday.com board ID and (for subitems boards) the parent board ID
- The target database table name
- Column mappings — which Monday columns map to which database columns, including any value transformations you configure
- Sync direction, mode (real-time, scheduled, or manual), cron schedule, and conflict resolution strategy
1.4 Sync Logs
For each sync operation we record:
- Start and end timestamps
- Number of rows processed, inserted, updated, and deleted
- Any error messages produced during the sync
Sync logs do not contain the contents of your Monday.com items or database rows. They contain only operational metadata.
1.5 Usage Data
We track a count of sync operations performed per billing period per account. This data is used solely to enforce plan limits and is not shared externally.
2. How We Use Your Information
We use the information described above exclusively to operate the Conduit service:
- To authenticate API requests to Monday.com on your behalf
- To establish connections to your databases and read/write data as configured
- To display your boards, columns, and database tables in the setup wizard
- To register and manage Monday.com webhooks for real-time sync
- To schedule and execute sync jobs
- To display sync logs and usage statistics in the app
We do not use your data for advertising, analytics profiling, or any purpose unrelated to the sync service you have configured.
3. Data Sharing
We do not sell, rent, or share your personal information or database contents with third parties, except in the following limited circumstances:
- Monday.com — we interact with the Monday.com API using your OAuth token to read board data. This interaction is governed by Monday.com's own privacy policy.
- Infrastructure providers — our application runs on cloud infrastructure. These providers process data on our behalf and are contractually bound to maintain confidentiality.
- Legal obligations — we may disclose information if required to do so by law or in response to a valid legal process.
4. Data Retention
| Data type | Retention period |
|---|---|
| Account and OAuth token | Until you uninstall the app |
| Database connection credentials | Until you delete the connection |
| Sync configurations and column mappings | Until you delete the configuration |
| Sync logs | 90 days from creation |
| Usage counters | Retained for the current and previous billing period |
When you uninstall Conduit from Monday.com, we receive a lifecycle event and delete your account record along with all associated connections, configurations, and logs within 30 days.
5. Data Security
We take the security of your data seriously:
- Encryption at rest — database credentials are encrypted with AES-256 before storage.
- Encryption in transit — all communication between your browser, our servers, and the Monday.com API uses TLS 1.2 or higher.
- Least privilege — each sync job is given only the decrypted credentials it needs for that specific operation.
- No credential logging — database passwords are never written to log files or error messages.
Despite these measures, no method of electronic transmission or storage is 100% secure. We encourage you to use dedicated database users with the minimum permissions required for Conduit to operate.
6. Your Rights
Depending on your location, you may have certain rights regarding your personal data, including:
- Access — request a copy of the personal data we hold about you
- Correction — request that inaccurate data be corrected
- Deletion — request that your data be deleted (you may also achieve this by uninstalling the app)
- Portability — request your data in a machine-readable format
To exercise any of these rights, please contact us at contact@craftedinfra.dev.
7. Children's Privacy
Conduit is a business productivity tool and is not directed at children under the age of 16. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of Conduit after changes are posted constitutes your acceptance of the revised policy.
9. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: contact@craftedinfra.dev
We aim to respond to all enquiries within 5 business days.