Privacy Policy

Last updated: 30 May 2026

This Privacy Policy ("Policy") explains how ZenPrism ("ZenPrism," "we," "us," or "our") handles your information when you use our monday.com marketplace applications ("Applications") or visit our website at zenprism.dev ("Website"), referred to collectively as the "Services."

If you have any questions about this Policy, please contact us at contact@zenprism.dev.

1. What We Collect and Why

When you use our Applications

  • Credentials you provide: API credentials for third-party services (such as ShipStation) that you enter when configuring an Application, which allow us to connect to those services on your behalf.
  • Information from monday.com: Your monday.com account and user identifiers, provided to us through signed tokens when an Application runs. We use these to route data to the correct account and to verify your subscription.
  • Data we process to perform the sync: When prompted by events in a connected third-party service, the Application retrieves the relevant data and writes it to your monday.com board. We do not retain this synchronized data — once it has been written to your board, it is discarded from our processing. Certain non-sensitive identifiers (such as order or record IDs) may appear transiently in our operational logs.

When you browse our Website

Our Website is informational. We do not use tracking or advertising cookies, and we do not run marketing analytics. The Website is served through Cloudflare, which may process limited technical data (such as IP addresses) and set functional cookies for security purposes. Cloudflare's own privacy terms govern that processing.

2. How We Use Information

We use the information described above solely to:

  • Connect to third-party services and perform data syncs on your behalf;
  • Route data to the correct monday.com account;
  • Verify your subscription and apply plan limits;
  • Operate and secure our Website; and
  • Provide customer support.

We do not sell, rent, or share your information for advertising purposes.

3. Data Storage and Security

We store only the data necessary to operate the Applications — such as the API credentials for your connected services and the configuration needed to route and process events. All persistent data is stored on monday.com's infrastructure using encrypted storage, and we use no external databases or external application hosting.

We apply industry-standard security measures, including encryption in transit and at rest, verification of inbound requests, and rate limiting. That said, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

4. Data Retention and Deletion

We retain your data only for as long as it is needed to operate the Applications. When you uninstall or deactivate an Application, the data we store — including any API credentials and configuration — is deleted, and any webhooks registered with third-party services on your behalf are removed.

Items that an Application created on your monday.com board remain your data and are unaffected by uninstallation.

5. Sharing Your Information

We do not share your information with third parties, except:

  • With the third-party services you choose to connect, using the credentials you provide, solely to perform the integrations you have configured;
  • Where required by law or in response to a binding request from a competent authority; or
  • In connection with a merger, acquisition, or sale of assets.

6. Our Role Under Data Protection Law

For the data the Applications process on your behalf, your organization decides what is processed and why, and therefore acts as the data controller; ZenPrism acts as a data processor, handling that data solely in accordance with your configuration. For information collected through our Website, ZenPrism acts as the data controller.

Where required by applicable law, we will make a data processing agreement (DPA) available to customers on request.

7. Your Rights

Depending on your location, you may have rights under applicable data protection laws — such as the GDPR, India's DPDP Act, or the CCPA — to access, correct, delete, or export your personal data, and to object to or restrict its processing. To exercise any of these rights, please contact us at contact@zenprism.dev, and we will respond within the time required by applicable law.

Data synchronized to your monday.com board is your data and can be exported using monday.com's native features.

We do not sell personal information, and we do not use it for automated decision-making or profiling.

8. Changes to This Policy

We may update this Policy from time to time. Where changes are material, we will post the updated Policy on this page with a revised "Last updated" date. Your continued use of the Services after the changes take effect constitutes your acceptance of the revised Policy.

9. Contact

For questions about this Policy, contact us at contact@zenprism.dev.