At a glance (Word Templates to PDF & DOCX)
| Generated documents | Not stored. Uploaded straight to the item’s file column on monday.com. |
| Previews | Held in memory for 10 minutes, visible only to your account. |
| Templates and tokens | Encrypted at rest with AES-256-GCM. |
| Board data | Read when a document is made, used to fill it, not kept afterwards. |
| Uninstall | All account data deleted immediately when monday notifies us, and in any case within 10 days. |
| Transport | HTTPS only (TLS 1.2 or newer). |
| Cookies | None. The app authenticates every call with monday’s signed session token. |
| AI | None. Your data is not used to train any model. |
Data we hold (Word Templates to PDF & DOCX)
Per monday.com account, and only while the app is installed:
- Templates you upload (.docx files), encrypted.
- Access token from connecting monday (OAuth), encrypted. It lets the app read the board you work on and add files to it.
- Usage counters: number of documents generated per month, to apply your plan.
- Automation run records: the ids of recent automation runs (the last 500), so that a retried run never creates a duplicate file.
- Plan: your current plan as reported by monday.com.
We do not store item contents, generated documents, people’s e-mail addresses or file contents beyond the templates above. Server logs record only technical error messages, without document or board contents.
Other apps
Board to PDF & Excel Reports and Required Fields & Approvals are described in the privacy policy. The four apps below follow the same rules: every request is authenticated with monday’s signed session token or a signed automation call, data is scoped to the account in the token, nothing is sent to AI services, and all data of an account is deleted when monday.com notifies us of the uninstall (in any case within 10 days).
| App | What it keeps | Scopes |
|---|---|---|
| Recurring Tasks & Templates | Templates and schedules, run logs (last 100 per schedule), records of recent runs, usage, token. Creates items and subitems; never deletes yours. | me:read, boards:read, boards:write |
| Paste from Excel & Bulk Edit | Records of the last 50 pastes (cells before and after, for undo; undo is available for 30 days), usage, token. A pasted table is held in memory for up to 30 minutes. | me:read, boards:read, boards:write, users:read (to match people by name or e-mail) |
| Dashboard Formulas & Pivot | Widget settings, snapshot links (frozen numbers; only a hash of the link secret), usage, token. Board reads are cached in memory for 5 minutes. The app makes no changes to your boards. | me:read, boards:read |
| Inventory with QR Codes | A journal of stock movements per products board, settings, scanner links (only a hash of the link secret), usage, token. Writes a Movements board and the Stock column in your account. | me:read, boards:read, boards:write, notifications:write (low-stock notifications) |
Phone scanner links of Inventory with QR Codes carry a secret in the part of the address after “#”, which is not sent to servers in the request or in logs; only its hash is stored, and a link expires and can be revoked. A link can record movements for one board only. Snapshot links of Dashboard Formulas & Pivot work the same way and show only what the creator chose to include.
Encryption
- At rest: Word templates and the monday access tokens of every app are sealed with AES-256-GCM. Each app uses a master key kept outside the code repository and outside the data directory.
- In transit: all traffic between your browser, monday.com and the app uses HTTPS (TLS 1.2+), with HSTS.
- The other data of the apps (settings, run logs, paste records, widget settings, stock journals) is stored in files with restricted permissions on our server and is not separately encrypted by the apps.
- Secrets (client secret, signing secret, master key) live in environment variables on the server, never in source code or logs.
Authentication
- App views: every API call carries monday’s signed session token. We verify the signature, expiry and app id on every request and scope all data to the account in the token.
- Automations and lists: monday signs each call with the app’s signing secret; we verify the signature and audience before doing anything, and runs are idempotent.
- Connecting monday (OAuth): the authorization state is bound to your account with a one-time value, and the returned token must belong to the same account. Redirects go only to our fixed callback address.
- Roles: viewers and guests cannot generate documents or change templates.
Permissions (scopes)
| Scope | Why |
|---|---|
boards:read | Read the columns, items and subitems that fill your template. |
boards:write | Upload the generated file to the item’s file column. The app never edits or deletes items. |
me:read | Confirm which account and user connected the app. |
Retention & deletion
- Previews: deleted after 10 minutes.
- Templates: until you delete them in the app, or until uninstall.
- Paste records: the last 50 pastes. Run logs: the last 100 runs per schedule. Stock journal: until uninstall. Snapshot links: until expiry (1 to 90 days) or revocation.
- Everything for an account: deleted when monday.com sends the uninstall notification, and in any case within 10 days of uninstall.
- Want data deleted sooner or without uninstalling? Write to contact@crimsonfern.com.
Infrastructure
The apps run at docs.crimsonfern.com, reports.crimsonfern.com, guard.crimsonfern.com, recurring.crimsonfern.com, paste.crimsonfern.com, dashboards.crimsonfern.com, inventory.crimsonfern.com on servers we operate in the European Union (Poland), behind Cloudflare’s network for TLS and protection against abuse. Code changes go through automated tests, security linting and secret scanning before release.
Third parties
| Provider | Purpose | Data |
|---|---|---|
| monday.com Ltd. | Platform, app hosting frame, billing | Your board data (it is your monday account) |
| Cloudflare, Inc. | Network, TLS termination, DDoS protection | Encrypted traffic in transit; no storage |
The PDF and DOCX engine runs on our own servers; documents are not sent to any external conversion service.
Report an issue
Found a vulnerability? Please write to contact@crimsonfern.com with “Security” in the subject. We reply within 2 business days and fix confirmed issues as a priority.