Privacy Policy
Last updated: 15 August 2026
This Privacy Policy ("Policy") explains how ZenPrism ("ZenPrism", "we", "us" or "our"), a software developer established in India, handles information in connection with the applications we make available through the monday.com marketplace ("Applications") and our website at zenprism.dev ("Website"), together the "Services".
We are not a monday.com entity, partner or affiliate. Your use of the monday.com platform is governed by monday.com's own terms and privacy policy, which are separate from this Policy.
Questions about this Policy may be sent to contact@zenprism.dev.
1. Our Applications
This Policy covers all Applications published by ZenPrism, including those listed in section 3 and any other Application we may make available from time to time.
Applications operate within a customer's monday.com account. There is no separate ZenPrism login, and we do not create user accounts.
The Applications differ in what they process. Section 3 sets out, for each Application, the data it handles and the processing applied to it, what is stored, and which third party services it uses. Where a section below states that something varies by Application, that table governs.
2. What we collect and why
When you use our Applications
Information from monday.com. When an Application runs, monday.com transmits a signed request containing identifiers such as those for the account, user, board, item and columns concerned, together with data from the item on which the Application was triggered. The identifiers are issued by monday.com and do not themselves contain names, email addresses or contact details; the item data may contain personal data, according to what the customer holds on the board. We use those identifiers to route the operation to the correct account and to verify the subscription. The scope of that data, and the processing applied to it, is set out for each Application in section 3.
Subscription information. monday.com provides subscription information for each customer, including the plan identifier, trial status, billing period, renewal date and usage counter. We use this to apply plan limits and to operate the subscription.
Data processed during an operation. An Application reads the data it needs to perform the operation the customer has configured, produces the result, and writes it back to the customer's own monday.com account. This data is held only for the duration of the operation and is not retained afterwards. What each Application reads is described in section 3.
Special categories of personal data. The Applications are not intended for special categories of personal data, including data revealing health, biometric, racial or ethnic origin, political opinions, religious beliefs or trade union membership. Under our Terms of Service, customers agree not to process such data through the Applications.
Credentials for connected services. Some Applications may connect to a third party service that the customer chooses to authorise. Where an Application does so, it is identified in section 3 and the credentials involved are described there. Applications not identified in section 3 as connecting to a third party service do not collect or hold any such credentials.
Operational data. We keep records of Application runs, including technical details such as timings, outcome and the reason for any failure, together with the identifiers described above. These records do not include board content, file content, or the values produced by an operation.
Notifications. Some Applications send notifications through monday.com to the user who configured an operation, for example to report a failure or that a usage threshold has been reached. These are delivered using the monday.com user identifier supplied with the request.
Support communications. Where you contact us, we process the contact details and message content you provide in order to respond.
When you browse our Website
The Website is informational. We do not use tracking or advertising cookies, and we do not run marketing analytics. The Website is served through a content delivery and security provider, which may process limited technical data such as IP addresses and may set functional cookies for security purposes. That provider's own privacy terms govern its processing.
3. Application details
| Application | Data handled, and the processing applied | Stored by ZenPrism | Third party services |
|---|---|---|---|
| Barcode and QR Code Scanner | The Application receives the values of the item on which it is triggered, reads the file column designated by the customer, decodes the image in memory, and writes the decoded value to the column designated by the customer. Values other than those required to perform that operation are not processed further and are discarded on completion of the run. Both the item values and the decoded value may contain personal data, according to the content the customer submits. | None | None beyond monday.com, which hosts the Application |
Applications not listed above process data only as described in the general sections of this Policy.
We will update this table before any new Application begins processing, and before an existing Application begins using a third party service.
4. How we use information
We use the information described above only to:
- perform the operations customers configure in their monday.com accounts;
- route data to the correct account and verify subscriptions;
- operate, maintain and secure the Services;
- diagnose and resolve faults, and respond to support requests;
- detect and prevent misuse; and
- comply with legal obligations.
We rely on the performance of our agreement with the customer and on our legitimate interests in providing and securing the Services. Where we rely on consent, you may withdraw it at any time.
We do not sell or rent information, and we do not use it for advertising, profiling or automated decision making.
5. Storage and security
We store only what is necessary to operate the Applications. What each Application stores is set out in section 3.
Where an Application stores data, that data is held on the infrastructure identified in section 3, using encrypted storage. Access tokens issued by monday.com are held in memory for the duration of a request and are not written to our records.
We apply security measures appropriate to the processing described in this Policy, including transmission over HTTPS, verification of every inbound request against a signed token, and rejection of requests that fail verification. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
If a personal data breach occurs that is likely to result in a risk to the rights of affected individuals, we will give the notifications required of us without undue delay and in accordance with applicable law.
6. Retention and deletion
We retain information only for as long as necessary for the purposes described in this Policy, and to comply with legal obligations, resolve disputes and enforce our agreements.
Data processed during an operation is not retained after that operation completes.
Records of Application runs are held within monday code and are retained in accordance with monday.com's retention practices for that service.
When you uninstall or deactivate an Application, any data we hold for it is deleted, and where an Application has registered anything with a third party service on your behalf, we take reasonable steps to remove it. Items an Application created on your monday.com board remain your data and are unaffected.
7. Sharing information
We do not share information with third parties, except:
- with the third party services a customer chooses to connect, using the credentials that customer provides, and only to perform the integration the customer has configured;
- with providers that host or support the Services, as identified in section 3 and in section 2 in respect of the Website;
- where required by law or in response to a binding request from a competent authority; or
- in connection with a merger, acquisition or sale of assets.
8. Our role under data protection law
For data an Application processes on a customer's behalf, the customer decides what is processed and why, and acts as the data controller. ZenPrism acts as a data processor and handles that data in accordance with the customer's configuration.
For operational data and for information collected through the Website, ZenPrism acts as the data controller.
monday.com Ltd hosts the Applications and accordingly acts as a sub-processor in respect of data an Application processes on a customer's behalf.
9. Where data is processed, and international access
The Applications are hosted on monday code, the application hosting service operated by monday.com Ltd, and run on monday.com's infrastructure. Processing takes place in the region or regions to which the relevant Application is deployed on that service. ZenPrism may access operational data from India.
Where this involves access to personal data originating in the European Economic Area or the United Kingdom, we will put appropriate safeguards in place where required by applicable law.
10. Your rights
Depending on your location, you may have rights under applicable data protection laws to access, correct, delete or export your personal data, and to object to or restrict its processing.
Where ZenPrism acts as a processor, requests about data held in a monday.com account should be directed to the customer operating that account, and we will assist that customer in responding. Where ZenPrism acts as a controller, requests may be sent to contact@zenprism.dev. We will respond within the period required by applicable law.
Data written to a monday.com board is the customer's data and can be exported using monday.com's own features.
If you believe we have not handled your personal data properly, you may complain to a supervisory authority. In the European Economic Area or the United Kingdom this is the authority in your country of residence or place of work. In India this is the Data Protection Board of India.
11. Children
The Applications are business tools made available to organisations through the monday.com marketplace. They are not directed at children, and we do not knowingly collect personal data relating to children.
12. Changes to this Policy
We may update this Policy from time to time. The updated Policy will be posted on this page with a revised date above. Where a change materially affects how personal data is handled, we will give notice before it takes effect.
13. Contact
For questions about this Policy, contact us at contact@zenprism.dev.