Monday.com
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Work data stays yours, but they track usage for ads, auto-renew paid plans.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, device and usage data, cookies, and sometimes call or video recordings.
Read the exact line
Privacy policy
“Usage and device information concerning our Users, Prospects and Technology Partners: Connectivity, technical and usage data, such as IP addresses and approximate general locations derived from such IP addresses”
Training
They run the product, personalize it, market it, and run interest-based ads.
Read the exact line
Privacy policy
“This includes contextual, behavioral and interests-based advertising based on User, Prospect and Technology Partner activities, preferences or other data available to us or to our Services Providers”
Sharing
Vendors, partners, your company admin, and ad or analytics companies can see data.
Read the exact line
Privacy policy
“We engage selected third-party companies and individuals as “Service Providers”, to perform services on our behalf or complementary to our own.”
Kept
They keep personal data as long as they decide they still need it.
Read the exact line
Privacy policy
“We may retain your personal data for as long as it is reasonably needed to maintain and expand our relationship and provide you with our Services and offerings”
Controls
Email privacy@monday.com for user-data rights; your admin controls workspace content.
Read the exact line
Privacy policy
“please contact us by email at [email protected].”
Fine print
Plans auto-renew, fees are mostly non-refundable.
Read the exact line
Terms of service
“Customer’s Subscription includes an automatic renewal option by default.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Cancel auto-renew before the term ends
Account settings or Customer Success; annual plans need at least 30 days’ notice
Ask to delete or access your user data
Email privacy@monday.com
Opt out of promotional emails
User Profile settings or unsubscribe links, or email privacy@monday.com
Export boards before leaving
Export Customer Data yourself before termination; they may offer a short read-only mode
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues them because of your content or how you used the product, you may have to pay their legal costs.
Read the exact line
Terms of service
“Customer hereby agrees to , monday.com and its affiliates, officers, directors, employees and agents from and against any and all claims”
For example, if a teammate uploads copyrighted files and monday.com is sued, your company could owe their defense costs.
After a short first-purchase window, you usually cannot get money back if you cancel mid-term.
Read the exact line
Terms of service
“Unless expressly set forth herein, the Fees are non-cancelable and non-refundable.”
For example, if you cancel an annual plan after two months, they keep the rest of the year’s fee.
They use what you do on their sites and product to target ads, including with partners.
Read the exact line
Privacy policy
“This includes contextual, behavioral and interests-based advertising based on User, Prospect and Technology Partner activities, preferences or other data available to us or to our Services Providers”
For example, visiting pricing pages can lead to monday.com ads following you on other websites.
Support and sales calls, screens, and chats can be recorded and used for quality and training.
Read the exact line
Privacy policy
“sensory information including phone call and video conference recordings (e.g., with our customer experience or product consultants), as well as written correspondences, screen recordings”
For example, a Zoom with a sales consultant may be recorded, transcribed, and reviewed later.
If the account ends, you must download your boards yourself; they do not promise to keep a long export window.
Read the exact line
Terms of service
“It is Customer’s sole to export the Customer Data prior to such termination or expiration.”
For example, if they close the account, a read-only period may end without notice and the boards can be deleted.
If they change the privacy rules and you keep using the product, they treat that as you agreeing.
Read the exact line
Privacy policy
“Your continued use of the Services after the changes have been implemented will constitute your acceptance of the changes.”
For example, a new sharing practice can apply after an email notice even if you never click accept.
Your company still owns the files and text you put on boards.
Read the exact line
Terms of service
“Customer retains all right, title, interest and control, in and to the Customer Data, in the form submitted to the Services.”
For example, a project plan you upload does not become monday.com’s property.
You must be 16 or older; they can ask for proof of age.
Read the exact line
Terms of service
“If you access and use the Sites and/or the Services, you represent and warrant that you are at least sixteen (16) years old.”
For example, a 15-year-old should not create an account even if the form lets them.
They say they encrypt and use standard security, but they do not guarantee no breaches.
Read the exact line
Privacy policy
“we use industry-standard physical, procedural and technical security measures, including encryption as appropriate.”
For example, data in transit may be encrypted, yet they still warn they cannot promise absolute protection.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- auto-renewal
- Your subscription keeps charging you at the end of each period until you cancel it. For example, a free trial turns into a paid monthly plan unless you cancel before it ends.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade D · score 39/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account and profile details plus device IDs, IP-based location, cookies, logs, and usage of the product.
Does it record your voice, face or body, and what happens to that?
They record some phone and video calls and screen sessions and say they may analyze them for training and quality.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They say support and sales recordings and screen captures may be reviewed for quality, analytics, and staff training, with no opt-out described.
Are you profiled or tracked for advertising?
They run behavioral and interest-based ads using their data and service providers, plus cookies and pixels.
Do they sell or share your data, and can you opt out?
They share with vendors and business partners and mention a CCPA right to tell them not to sell personal data.
What rights do they take over what you type and what the AI makes?
You keep ownership of Customer Data; they take a limited license only to run, secure, and legally process the service.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as they think they need it; user-data deletion is by emailing them, not a stated in-app 30-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe industry-standard security and encryption and point to a Trust Center, without naming an independent audit here.
Is there a real age gate, and are teens protected?
You must be at least 16; they may ask for proof of age but it is mainly a self-stated rule.
Will they tell you when the rules change, and is the policy specific?
The terms are dated; they say they will notice material changes, but continued use counts as acceptance.
Can they close your account without warning, and can you get your data out first?
They can suspend accounts without notice for security, unpaid bills, or policy issues; you must export data yourself.
If something goes wrong, who pays?
The service is as-is, liability is capped at about a year of fees, and you must indemnify them for your content and use.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew by default; after a 30-day first-purchase refund window, fees are non-refundable.
The privacy policy is 6,421 words at a professional or legal expert level (Flesch reading ease 23.5); the terms are 12,413 words at a professional or legal expert level.
