Privacy Policy

Account information. When you register, we collect your name and email address. This is used to create and manage your account.

Notion data. When you connect your Notion workspace via OAuth, we access the Notion databases you select. This includes database schemas (property names, types, and options) and row content (the actual data in your databases). We also access Notion metadata such as database names, icons, and URLs.

Usage data. We collect information about how you use the Service, including dashboards you create, widgets you configure, features you interact with, and actions you take. This helps us improve the Service.

Technical data. We automatically collect your IP address, browser type, device information, and access times when you use the Service.

Payment data. Payment information is processed by our payment provider, Stripe. We do not store your full credit card number. We may receive the last four digits of your card, card brand, and billing address for account management purposes.

We use your information to:

• Provide, maintain, and improve the Service;
• Generate dashboards and AI-assisted widget suggestions from your Notion data;
• Sync and display your Notion data in your dashboards;
• Process payments and manage your subscription;
• Communicate with you about your account, updates, and support;
• Monitor for fraud, abuse, and security threats;
• Comply with legal obligations;
• Analyze and develop new features using aggregated or anonymized data.

We do not sell your personal data to third parties.

We access your Notion data through OAuth authorization that you grant when connecting your workspace. You choose which databases to connect, and we only access the data within those databases.

To provide the Service, we:

• Read your database schemas and row content to generate and render dashboards;
• Store snapshots of your synced data so dashboards remain viewable, including when embedded in Notion pages;
• Periodically sync your data to keep dashboards current, fetching rows that were created or edited since the last sync;
• Send your database schemas and a sample of your row data to our AI provider to generate dashboard suggestions and widget configurations.

We do not modify, create, or delete any data in your Notion databases. The integration is read-only. You can revoke our access at any time through your Notion settings or within monoboard, and we will stop syncing your data.

With respect to your Notion data, you are the data controller and we act as a data processor. We process your data only as necessary to provide the Service and in accordance with this Privacy Policy.

We retain your data for as long as your account is active. Specifically:

• Notion snapshots: Retained while your dashboards exist. When you delete a dashboard, its associated data snapshot is removed. When you delete your account, all snapshots are removed.
• Account data: Retained while your account is active. Upon account deletion, your personal data is removed within thirty (30) days.
• Backup copies: Residual copies may exist in backup systems for up to ninety (90) days before permanent deletion.
• Legal obligations: We may retain certain data longer if required by law or to protect our legal rights.

We take reasonable measures to protect your data, including:

• Encrypting data in transit using TLS (Transport Layer Security);
• Encrypting data at rest in our database and storage systems;
• Restricting access to your data to authorized personnel who need it to operate the Service;
• Using OAuth for Notion access, so we never store your Notion password;
• Regularly reviewing and updating our security practices.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we strive to protect your data using industry-standard safeguards. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

We rely on third-party services to operate the Service. Your data may be processed by:

• Notion: Your data source. Notion's privacy policy governs your Notion data on their platform.
• Stripe: Payment processing. Stripe is PCI-DSS compliant and handles your card data. See Stripe's privacy policy for details.
• Cloud hosting provider: We store your data on secure cloud infrastructure.
• AI providers: We use large language model providers to generate dashboard suggestions. We send your database schemas and a sample of your row data to these providers to generate widgets and insights. We do not send your full datasets.
• Analytics: We may use analytics tools to understand Service usage.

Each third-party service has its own privacy policy governing how they handle data. We encourage you to review their policies.

We use cookies and similar tracking technologies to operate and secure the Service:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled if you want to use the Service.
• Analytics cookies: Help us understand how the Service is used so we can improve it. You can manage these through your browser settings.

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (the "right to be forgotten").
• Restriction: Request that we limit the processing of your data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of processing.
• Withdraw consent: Revoke your Notion OAuth authorization at any time.

GDPR (EU/UK residents): You have the rights listed above. To exercise them, contact us at admin@monoboard.app. We will respond within one (1) month. You may also lodge a complaint with your local data protection authority.

CCPA (California residents): You have the right to know what personal data is collected, request deletion, opt out of the sale of personal data (we do not sell data), and not be discriminated against for exercising your rights. To exercise these rights, contact us at admin@monoboard.app. We will respond within forty-five (45) days.

Your data may be processed and stored in countries other than your own, including the United States and Israel, where our servers and service providers are located. When we transfer your data internationally, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions where available.

By using the Service, you acknowledge that your data may be transferred to and processed in these countries, which may have different data protection laws than your jurisdiction.

The Service is not intended for children under the age of sixteen (16), or the age of digital consent in the applicable jurisdiction. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will take steps to delete it as soon as possible. If you believe a child has provided us with personal data, please contact us at admin@monoboard.app.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will provide notice through the Service or via email before the changes take effect.

Your continued use of the Service after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or your personal data, please contact us at admin@monoboard.app. For EU/UK residents, you may also contact our data protection representative at the same address.