Privacy Policy

1. Who we are

This privacy policy explains how Asplund Software AB (“Asplund Software”, “we”, “us”) handles information when you use the Column Groups for monday.com app (“the App”).

Asplund Software AB is a company established in Sweden. For the limited personal data described in this policy, we act as a data controller under the EU General Data Protection Regulation (“GDPR”).

If you have questions, you can contact us at support@asplundsoftware.com.

2. How the App works with your data

The App runs entirely in your browser and interacts with monday.com using monday.com's official APIs. All operational data (such as board structure, item values and column settings) is exchanged directly between your browser and monday.com.

Asplund Software does not receive, collect, store, or transmit any of your monday.com board or item data to our own servers.

Within your browser, the App may temporarily read board configuration (for example, column IDs, names and types) so it can group, show/hide and colorize columns. This processing happens locally in the client and is governed by your agreements with monday.com.

3. Data we receive from monday.com

When you install or uninstall the App, monday.com automatically sends app developers a small set of administrative information. This is the only personal data Asplund Software receives in connection with the App.

This may include:

• Admin user name
• Admin user email address
• Account or team name
• Basic installation and uninstallation metadata

We do not receive your monday.com board content, item data, or other user data through these events.

4. Roles under GDPR

For your usage of monday.com itself, monday.com is an independent controller and you should refer to monday.com's own privacy and data protection documentation.

For the installation metadata that monday.com sends to us (admin name, email, account name, etc.), Asplund Software acts as an independent data controller. We do not act as a processor for your monday.com board or item data, because we never receive that data.

5. Legal basis for processing (GDPR)

For individuals in the EU/EEA, we rely on the following legal bases under Article 6 GDPR for processing the limited installation-related personal data we receive:

• Article 6(1)(b) ' performance of a contract: when processing is necessary to provide the App to your organisation.
• Article 6(1)(f) ' legitimate interests: when processing is necessary for our legitimate interest in keeping the App secure and functional, and in communicating with administrators about important updates, in a way that respects your rights.

6. How we use installation data

We use the installation metadata described above only for the following purposes:

• Confirming installs and uninstalls of the App
• Contacting the admin about important changes, issues, or security information
• Providing support when requested
• Occasionally asking for feedback or informing you about new features (see also Section 8)

We do not combine this data with monday.com board or item data, and we do not build profiles based on your monday.com usage.

7. Sharing, sub-processors and international transfers

We do not sell your personal data and we do not use third-party sub-processors for the installation metadata we receive from monday.com.

For support and feedback, we provide a Crisp.chat widget. If you use it, you may be asked to share your email address within the chat widget, which would then be sent through Crisp's servers along with the message content so we can follow up. This information is processed by Crisp as our support service provider. You can read Crisp's privacy policy at https://crisp.chat/en/privacy/.

Installation metadata is stored and handled in systems under our direct control. At the time of this policy, we do not transfer this data outside the EU/EEA.

If this changes in the future (for example, if we introduce an external email delivery service), we will:

• Update this policy to clearly list any processors used, and
• Ensure appropriate safeguards for any transfers outside the EU/EEA, as required by GDPR.

8. Communication and product updates

We may occasionally contact the admin user associated with an installation to:

• Provide important updates or security notices
• Inform you about new or improved features
• Request optional feedback on the App

You can opt out of non-essential messages at any time by emailing support@asplundsoftware.com. We may still send service-critical communications where they are necessary for the safe and lawful operation of the App.

9. Data retention

We retain installation metadata for as long as reasonably necessary to:

• Maintain records of active and past installations
• Provide support and handle any disputes
• Meet basic legal and accounting requirements

As a general guideline, we do not keep installation metadata for more than three (3) years after an uninstall, unless a longer period is required by law or necessary in connection with a legal claim.

10. Your rights under GDPR

Depending on where you are located, you may have the following rights in relation to the personal data we hold about you:

• Right of access (to know what data we hold about you)
• Right to rectification (to correct inaccurate or incomplete data)
• Right to erasure (to request deletion of data, in certain circumstances)
• Right to restriction of processing (in certain circumstances)
• Right to data portability (for data you provided to us, where processing is based on consent or contract and is carried out by automated means)
• Right to object (particularly where we rely on legitimate interests)

To exercise these rights, please contact us at support@asplundsoftware.com. We may need to verify your identity and may also need to coordinate with your monday.com account owner or administrator.

You also have the right to lodge a complaint with your local data protection authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY).

11. Changes to this policy

We may update this policy from time to time. The most recent version is always available at this URL, with the “Last updated” date shown at the top. If we make material changes, we will take reasonable steps to inform administrators (for example, by email or through monday.com where appropriate).