Privacy Policy

Last updated: December 21, 2024

1. Introduction

Velo ("we," "our," or "us") operates applications on the monday.com marketplace, including SubItems Pro. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our applications.

By using our applications, you consent to the data practices described in this policy. If you do not agree with the terms of this privacy policy, please do not access our applications.

2. Information We Collect

2.1 Data Accessed Through monday.com

Our applications access the following data through monday.com's API with your authorization:

  • Board Data: Board names, item names, subitem names, and column values necessary to provide bulk subitem operations.
  • User Information: Your monday.com user ID and account ID to identify your workspace and manage subscriptions.
  • Account Information: Subscription status and plan information for licensing purposes.

2.2 Data We Do NOT Collect

  • We do NOT store your board data, items, or subitems on our servers.
  • We do NOT collect passwords or authentication credentials.
  • We do NOT access data from boards you haven't explicitly opened the app on.
  • We do NOT use cookies or tracking technologies.

2.3 Contact Information

If you contact us for support, we may collect your name, email address, and the content of your message to respond to your inquiry.

3. How We Use Your Information

We use the information we access solely to:

  • Provide Services: Execute bulk subitem creation, cloning, and column inheritance operations you request.
  • Manage Subscriptions: Verify your subscription status and plan tier.
  • Provide Support: Respond to your questions and troubleshoot issues.
  • Improve Our Apps: Understand how our applications are used to improve functionality (aggregated, anonymous data only).
  • Legal Compliance: Comply with applicable laws and regulations.

4. Data Storage and Security

4.1 Client-Side Application

SubItems Pro is a client-side application hosted entirely on monday.com's infrastructure. This means:

  • Your data is processed directly in your browser.
  • Data is transmitted directly between your browser and monday.com's servers.
  • We do not operate our own servers that store or process your monday.com data.

4.2 monday.com Security

Your data is protected by monday.com's enterprise-grade security infrastructure:

  • SOC 2 Type II certified
  • ISO 27001 certified
  • GDPR compliant
  • HIPAA compliant
  • TLS 1.2+ encryption for all data in transit
  • AES-256 encryption for data at rest

5. Data Sharing and Disclosure

We do NOT sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:

  • monday.com: Your data is processed through monday.com's API as required for app functionality.
  • Legal Requirements: We may disclose information if required by law, court order, or government request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

Since we do not store your monday.com data on our servers:

  • Board, item, and subitem data is not retained after your session ends.
  • Support correspondence may be retained for up to 2 years to improve our services.
  • Subscription records are retained as required for accounting and legal compliance.

7. Your Rights

7.1 GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate personal data.
  • Erasure: Request deletion of your personal data.
  • Restriction: Request restriction of processing of your personal data.
  • Portability: Request transfer of your data to another service.
  • Objection: Object to processing of your personal data.

7.2 CCPA Rights (California Users)

California residents have the right to:

  • Know what personal information is collected and how it's used.
  • Request deletion of personal information.
  • Opt-out of the sale of personal information (we do not sell personal information).
  • Non-discrimination for exercising privacy rights.

7.3 Revoking Access

You can revoke our app's access to your monday.com data at any time through your monday.com account settings under Admin > Apps > Installed apps.

8. Children's Privacy

Our applications are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your data is processed through monday.com's infrastructure. monday.com may transfer and process data in countries outside your residence. monday.com maintains appropriate safeguards for international transfers in compliance with applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Material changes will be communicated through monday.com's notification system where possible.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

We aim to respond to all privacy-related inquiries within 30 days.