This Privacy Policy explains how Linkday ("we", "us", or "our") collects, uses and protects information when you use our website (https://linkday.app) and the Linkday app for monday.com.
If you do not agree with this policy, please stop using our services.
1. The Information We Collect
A. Your monday.com account
When you install Linkday and approve access through monday.com's sign-in (OAuth), we receive your monday account ID, user ID, name and email address, and an access token that lets Linkday read and update the boards you choose.
- We use the account ID and user ID to identify you and your team.
- We use your name on the Team page, and your email to contact you about support, your account or billing.
- Your name, email address and access token are encrypted with AES-256 before they are stored.
B. Data from your boards
Linkday only reads the boards and columns you choose during setup. When you enrich rows or add leads, it reads the rows you select (for example a person's name, company, company website and LinkedIn profile address) and writes the results back to your board.
- We keep a record of each enrichment run and each lead added: who started it, which rows it covered and what it found. This record powers the progress screen and the Logs tab, and stops you being charged twice for the same person.
- We do not copy your boards. Everything else stays in monday.com.
C. Settings you enter
We store your board and column choices, your ideal-customer description, your never-contact list and your company rules, so that Linkday works the way you set it up.
D. Business contact details found by Linkday
When you ask Linkday to find an email address or mobile number, we look it up through a third-party business-contact data provider. The results, together with company details such as industry and size, are written to your board and also kept in Linkday's own business-contact database, so that a repeat lookup is faster and does not cost you again.
E. Product analytics and error reports
- Product analytics (PostHog, EU region): we record named events inside Linkday, such as "enrichment started", to understand how the product is used. Events are linked to your monday user ID, name and email, and your account's plan. We do not record keystrokes, screen recordings, or anything outside the Linkday screens.
- Error reports (Sentry): when something breaks, we receive a technical error report so we can fix it. Reports are configured not to include personal information.
F. Cookies and browser storage
Linkday does not use cookies to sign you in. Inside monday.com, sign-in uses a session token that monday.com provides to the app. Linkday sets no cookies. Our analytics tool stores an identifier in your browser's local storage, used only within Linkday. We use no advertising or cross-site tracking.
2. How We Use AI
Linkday uses OpenAI's API for three features: proposing which of your columns holds which field during setup, suggesting a company's website from its name, and scoring leads against your ideal-customer description.
- For setup, we send your column names. For website suggestions, we send company names. For lead scoring, we send your ideal-customer description and, for each lead, the job title, seniority, company name, industry, company size, country, company description and company keywords.
- We never send people's names, email addresses, phone numbers or other board data to the AI model.
- Under OpenAI's API terms, data sent through the API is not used to train their models.
3. How We Use Your Information
- To provide the service: finding leads, enriching rows on your boards, writing results back to monday.com, and showing your usage and credits.
- To support the service: investigating and fixing technical problems.
- To communicate: sending team invitations you request, and messages about your account, billing or support requests.
We do not sell or rent your personal information, or your prospects' information, to anyone.
4. Keeping Your Data Secure
- All traffic to Linkday uses HTTPS with TLS 1.2 or higher, and HSTS is enabled on our domains.
- Access tokens, names and email addresses of monday.com users are encrypted with AES-256 before storage. The encryption key is kept outside the code and the database.
- Our database is hosted by Supabase and is encrypted at rest with AES-256.
- Every request to Linkday is checked against a session signed by monday.com, and each account can only reach its own data.
- Secrets such as API keys are stored as environment settings on our hosting provider, never in our code repository.
5. Logs
- Server logs record which operation ran, whether it succeeded and how long it took. They do not contain the contents of your boards. They are kept for 7 days.
- Error reports are kept by Sentry for no longer than 90 days.
- Activity records shown in the Logs tab are kept until you uninstall Linkday.
- Audit logs record who did what in Linkday (your monday user and account ID, the action, the time, your IP address and browser). They are kept for 90 days for security and incident investigation, including after you uninstall Linkday, and then deleted. We can provide your account's audit logs on request.
6. Third-Party Services
We use the following services to operate Linkday:
| Provider |
Purpose |
| monday.com |
Sign-in (OAuth) and reading and writing the boards you choose. |
| Supabase |
Database hosting. |
| Fly.io |
Hosting for the Linkday app (dash.linkday.app). |
| Cloudflare |
Hosting for our website (linkday.app). |
| OpenAI |
The AI features described in section 2. |
| BetterContact |
Finding email addresses, mobile numbers and company details at your request, and powering the Find leads search. |
| Resend |
Sending team invitation emails. |
| PostHog |
Product analytics (EU region). |
| Sentry |
Error reports. |
7. Data Retention and Deletion
When you uninstall Linkday from monday.com, we delete immediately:
- every user record, including the encrypted access token, name and email address;
- your board and column settings;
- the records of your enrichment runs, your lists and your activity records;
- your never-contact list.
Within 10 days of uninstall, we permanently delete your organization record (your monday account name, your ideal-customer description and your company rules).
We keep:
- your subscription record, with your monday account ID and plan, because uninstalling does not cancel a paid plan. Billing is managed by monday.com, and the record is updated when monday.com tells us the subscription has changed or ended;
- audit logs for 90 days, as described in section 5;
- business contact details in Linkday's own database, as described in section 1D. These are not linked to your account.
Deletion on request: you can ask us to delete your organization record and any other data associated with your account at any time by emailing [email protected]. We will complete the request within 7 working days.
8. Third-Party Platforms
Linkday works with monday.com and with the third-party services listed in section 6, based on actions you start. Linkday is an independent service and is not affiliated with, endorsed by or sponsored by monday.com. Your use of monday.com is governed by its own terms and privacy policy.
9. Contact Us
If you have questions about this Privacy Policy, contact us at [email protected].