Privacy Policy

Last updated: July 17, 2026

Introduction

Innova Apps ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Email to monday Outlook add-in and its companion monday.com marketplace app ("Service").

Information We Process

When you use Email to monday, the Service processes:

• Your monday.com profile: Your name and email address, read once after you connect so we can confirm the connection and show who is signed in.
• Your monday.com workspace data: Workspace, board, group, column, and user information belonging to your account, read to populate the pickers you choose from when creating an item.
• The email you select: The subject, body, and attachments of the email you explicitly choose to convert. This content can include personal data of third parties, such as the names and email addresses of senders and recipients.
• Your monday.com OAuth access token: Held so the Service can act on your behalf. It is stored only in your own Outlook client (browser localStorage on your device) and is never stored on our servers.

Information We Do NOT Collect

• Email content or attachments are never retained on our servers — they are processed in transit only while your item is being created.
• Your monday.com password or personal API tokens (we use OAuth 2.0; we never see your credentials).
• Payment or card data — payment is handled entirely by monday.com's native billing and never reaches the Service.
• Personal information beyond what is required to perform the action you request.

How We Use Your Information

• Turn an Outlook email you select into a monday.com item, on the board and group you choose.
• Attach the original email (.eml) and its files to that item, and post its description as an update.
• Show the originating email inside monday.com through the "Email context" item view.
• Confirm your subscription status and respond to your support requests.

We do not build user profiles, do not track usage for advertising, and do not use your data to train AI models.

AI Processing

When the optional AI summary is enabled:

• The content of the email you selected is sent to Google (Gemini, via Firebase AI Logic) to generate a suggested title, description, and action items.
• You review and edit the result before anything is created.
• You can turn AI off for any email, in which case the raw email content is used instead.
• AI processing is transient — content is not stored by the AI service — and is not used to train models.

Where Data Is Stored

• Your access token is stored only in your Outlook client on your device, never on our servers.
• Email content is processed in transit only: it passes through our backend while the item is created and files are attached to monday.com, and is not retained afterward.
• Our backend runs on monday code (monday.com's hosting), and our proxy endpoints are stateless — they hold no per-user data. In the configuration published to the monday marketplace, the Service stores no personal data on its servers.

Sharing, Transfer, and Disclosure of User Data

We are transparent about how your data may be shared with the service providers ("subprocessors") that make the Service work:

• monday.com: Hosts our backend and stores the item you create. When you click "Create Item," the item title, description, the original email (.eml), and its attachments are transferred to your monday.com workspace. This transfer only occurs when you explicitly create an item.
• Google: The selected email's content is sent to Google (Gemini, via Firebase AI Logic) for summarization, only when AI is enabled. Processing is transient and content is not stored by the AI service.
• Microsoft: The add-in runs inside Outlook / Microsoft 365 and uses Microsoft identity to sign you in.
• Sentry: Optional error diagnostics. When enabled, access tokens and OAuth authorization codes are redacted before any report is sent, and email body content is not included.

We do NOT share, sell, rent, or disclose your data to:

• Advertisers or ad networks
• Data brokers
• Information resellers
• Any other third parties for their own marketing purposes

Third-Party Services

Our Service integrates with:

• Microsoft Office 365: For Outlook integration and identity. Microsoft Privacy Policy
• monday.com: For workspace integration, hosting, and billing. monday.com Privacy Policy
• Google: For AI processing (Gemini via Firebase AI Logic). Google Privacy Policy
• Sentry: For optional error diagnostics. Sentry Privacy Policy

Data Security

• All traffic uses TLS 1.2+ with HSTS; our backend and static assets are served from monday code (*.monday.app).
• Authentication uses OAuth 2.0 — we never see your monday.com password.
• Your access token lives on your own device, never server-side; our backend proxies are stateless and hold no per-user data.
• We request the minimum OAuth scopes needed — read scopes only for the pickers and the item view, write scopes only for creating the item and its update and attachments — with no account-wide or destructive scopes.
• User-supplied values are sent to the monday.com API as query variables and validated inputs rather than string-interpolated, to prevent injection.

Data Retention and Deletion

Because the published configuration stores no personal data on our servers, there is nothing to retain after use — email content is transient and your access token stays on your device. When you uninstall the monday.com app, we additionally purge the single account-scoped storage key the app reserves. You can disconnect at any time from within the add-in, which clears the stored token from your device. You may also contact us to request deletion of any data associated with your account.

Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Disconnect your monday.com account at any time

Contact Us

For questions about this Privacy Policy:

• Email: support@innovaapps.ai