Privacy Policy

1. Who we are

Elevate (“we”, “us”, “our”) builds productivity apps for monday.com. Our first app is Calendar Sync, which syncs monday.com board items to Google Calendar.

App name: Calendar Sync by Elevate
Contact email: privacy@getelevate.work

Website: https://getelevate.work

2. What data we collect and why

2.1 Google data

Calendar Sync requests the following Google OAuth scopes:

• userinfo.email — to identify your Google account
• calendar.calendarlist.readonly — to list your calendars so you can choose which one to sync to
• calendar.events — to create, update, and delete calendar events on your behalf

We access your Google Calendar data solely to create, update, and delete calendar events that correspond to items on your monday.com board. We do not read, analyze, or store the contents of your existing calendar events.

2.2 monday.com data

Calendar Sync reads item names, column values (dates, text, people, status), and group information from the monday.com boards you choose to connect. This data is used only to generate the corresponding Google Calendar events.

2.3 Authentication tokens

We store OAuth tokens for both Google and monday.com so the app can operate on your behalf. All tokens are encrypted at rest using AES-256-GCM.

2.4 Sync records

We maintain a mapping between monday.com item IDs and Google Calendar event IDs so we can update or delete the correct event when an item changes. We also store a hash of each synced event to avoid unnecessary API calls.

3. How we use your data

Your data is used exclusively to:

• Create, update, and delete Google Calendar events based on your monday.com board items
• Authenticate your identity and maintain your session
• Enforce plan limits (free vs. pro)
• Display sync status and activity logs within the app

We do not use your data for advertising, analytics profiling, AI/ML training, or any purpose other than providing the Calendar Sync service.

4. Data sharing and selling

We do not sell, rent, lease, or share your personal data or Google data with any third parties.

Your data is transmitted only between your browser, our server (hosted on Railway), the monday.com API, and the Google Calendar API. No other third parties receive your data.

5. Data storage and security

• All data is stored in a PostgreSQL database hosted on Railway with SSL/TLS encryption in transit
• OAuth tokens are encrypted at rest with AES-256-GCM
• All API communication uses HTTPS
• Webhooks from monday.com are verified using HMAC-SHA256 signatures
• We do not store your monday.com board data beyond what is needed to maintain sync records

6. Data retention and deletion

We retain your data only as long as your Calendar Sync connection is active. When you delete a connection within the app, all associated sync records are deleted. You can optionally delete the corresponding Google Calendar events at the same time.

If you uninstall Calendar Sync from monday.com, all of your data — including connections, OAuth tokens (both Google and monday.com), sync records, and plan information — is permanently deleted within 10 days, in accordance with monday.com's marketplace requirements. Google OAuth refresh tokens are also revoked at the time of uninstall.

7. How to revoke access and delete your data

You can revoke Calendar Sync's access to your data at any time using any of the following methods:

• Within the app: Delete your connection from the Calendar Sync dashboard in monday.com. This removes all sync records and optionally deletes Google Calendar events.
• Uninstall the app: Remove Calendar Sync from your monday.com workspace. All data is deleted and Google tokens are revoked automatically.
• Google account settings: Revoke Calendar Sync's access at myaccount.google.com/permissions.
• Email us: Contact privacy@getelevate.work to request deletion of all data associated with your account.

8. Cookies

The getelevate.work website does not use cookies for tracking or advertising. We may use essential cookies for session management if you sign in to a support or account area in the future.

9. Children's privacy

Calendar Sync is not intended for use by children under the age of 16. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

privacy@getelevate.work