DevRokPrivacy Policy
Event Day for monday.com · Last updated: October 16, 2026
This policy explains what data the Event Day app (“the app”) processes, why, where it is stored and for how long. The app is provided by Aleksandr Vorontsov, trading as DevRok (“we”, “us”). Contact: support@devrok.com.
Our role
The app works on data in your monday.com account, including data about your guests. For that data, your organization (the event organizer) decides what is processed and is responsible for having a lawful basis to invite and contact its guests. We process it on your behalf, only to provide the app. Guests who want to access, correct or delete their data should contact the organizer who invited them; we will help the organizer with such requests.
What we process and why
| Data | Why |
|---|---|
| monday.com account ID and slug, board, item and column IDs, user IDs | To know which event belongs to which account and board, to check who may see or change it, and to build links. |
| Event details you enter: name, date and times, time zone, venue, address, organizer’s name and email, invitation text, capacity | To show them to guests, in invitations, on the check-in page and in the run of show. |
| Guest data on your board: name (item name), email address, RSVP answer, plus-one, note (for example dietary or accessibility needs), check-in mark | To send invitations and reminders, show each guest their personal page, record their answer and check them in at the door. The app reads and writes this data in your board’s columns. |
| Run-of-show segments on your board: names, durations, owners, notes | To work out start times and show the programme, including on the live crew screen. |
| The account’s OAuth access token for monday.com | To read and write the board on your behalf when guests and door staff use their links, and to send monday.com notifications. |
| The account’s subscription plan (from monday.com) | To enable the features and limits of your plan. |
| When a user asks for an AI draft: the event details and the brief the user types. When a user asks for an AI guest summary: the guest counts, guests’ first names, RSVP answers and notes | To create the draft or summary with monday AI. Sent only when a user asks; no email addresses or last names are sent. The result is shown to that user and is not stored by the app (a confirmed draft becomes items on your board). |
We do not sell data, do not use it for advertising and do not use it to train AI models. The app sets no cookies and uses no tracking or analytics — neither in monday.com nor on guest, check-in and crew pages.
Camera at check-in: the check-in page uses the phone’s camera only to read QR codes. The camera image is processed on the phone and is never uploaded or stored. Only the code that was read is sent to the app.
QR codes and links contain a signed reference to the account, board and guest — no names or email addresses. Guest links are personal; check-in and crew links can be replaced by a board owner at any time.
Where data is stored
- Your monday.com account holds guests, their answers, check-in marks and the run of show — on your boards. The app does not keep its own copy of the guest list; at check-in it holds the list in memory for at most 15 seconds to answer several phones quickly.
- monday code (monday.com) hosts the app’s server in the EU region. Event settings are kept in monday.com’s app storage, separated per account, and are encrypted by the app with AES-256-GCM before they are stored; the key is kept as a secret on the app’s server. The OAuth token is kept in monday.com’s secure storage, separated per app.
- Resend (Plus Five Five, Inc., USA) sends invitations and reminders. To send an email it receives the guest’s address and the email content (guest name, event details and the guest’s personal link). Resend stores email data in the United States and keeps it for 30 days. Transfers are covered by the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework (Resend DPA).
- monday AI (monday.com) creates AI drafts and summaries through monday.com’s own AI gateway, using your account’s monday AI credits under monday.com’s AI terms. The app does not send data to any other AI service.
- Cloudflare (Cloudflare, Inc., USA) hosts this website and the how-to-use page shown inside monday.com, and forwards email sent to support@devrok.com. The app itself does not send your account data to Cloudflare.
- Google (Gmail) is the mailbox where support emails are received and answered. It holds only what you write to support@devrok.com.
- monday.com itself processes your account data under its own privacy policy.
How long we keep data
- Event settings are kept while the app is installed, or until a board owner deletes the event in the app. Guests and their answers stay on your board under your control.
- Answers on a guest’s page close two days after the event date. Links stop working when the app is uninstalled, when the event is deleted, or — for check-in and crew links — when a board owner replaces them.
- When the app is uninstalled, we delete the account’s access token right away. Without it we can no longer read or change data in your account or in its app storage.
- Server logs contain technical information (for example account, board and item IDs and error messages) and are kept by monday code for a limited time. We do not log guest names, email addresses, notes or email content.
Security
- Every request from monday.com is verified with tokens signed with the app’s secrets. Guest, check-in, crew and QR links are signed with separate keys, so one kind of link can never be used as another.
- The app reads with the installing account’s token, so it checks that the person using the view can see the board before showing event or guest data.
- All connections use HTTPS. Secrets are kept in monday code’s secret storage, never in code. Guest, check-in and crew pages cannot be embedded in other sites and do not pass their links to other sites.
- Data of one account is never accessible to another account.
Your choices and rights
Account admins can uninstall the app at any time. To access, correct or delete data processed by the app, or for any privacy question, email support@devrok.com. Depending on where you live (for example under the GDPR) you may have further rights, including the right to complain to a data protection authority.
Contacting you and your guests
We do not send marketing emails. The app sends invitations and reminders only when a user of your account asks for them, and only to guests on your board. We may contact the account admin who installed the app about important changes to the app, security or this policy.
Changes
We will post changes to this page and update the date above. Significant changes will be announced to account admins in advance.