Privacy Policy: Dupplicates for monday

Last updated: July 26, 2026

This Privacy Policy describes how ETHANOLLE (« we », « us ») collects, uses and protects data when you use the Dupplicates application (formerly « Duplicate Detector ») for monday.com (the « App »).

Key point: the App runs entirely on monday code, monday.com’s own application infrastructure. All data the App handles — scan results, settings, tokens — is stored on monday.com’s servers, never on servers operated by ETHANOLLE. Your data never leaves the monday.com infrastructure and we keep no copy of it anywhere else.

1. Who we are

ETHANOLLE, a French société par actions simplifiée (SAS) with a share capital of €1,000, registered with the Paris Trade and Companies Register (RCS Paris) under SIREN 931 764 567, having its registered office at 58 rue de Monceau, 75008 Paris, France.

Contact: admin@ethanolle.com

For the data contained in your monday.com boards, your organization remains the data controller; ETHANOLLE acts as a processor strictly to provide the App’s features.

2. Scope

This policy covers only the Dupplicates App available on the monday.com marketplace. It does not cover monday.com itself (see the monday.com privacy policy) or the ethanolle.com website.

3. Data we access and store

Account and authentication data

• Your monday.com account ID and user ID (from the session token monday provides).
• An OAuth access token granted by your monday.com account when you connect the App. This token is encrypted at rest with AES-256-GCM; it is never stored or logged in plain text.

Board data

• When you run a scan, the App reads the items of the board (item names and the values of the columns you configured) to detect duplicates. This read happens in memory.
• Scan results (duplicate groups) are stored temporarily so you can review and resolve them: only the last 3 scans per board are kept, display text is truncated, and raw column values are not persisted.
• Your per-board settings (detection rules, displayed columns), the pairs you mark as « not a duplicate », and an audit log of resolutions (item IDs, action, author, timestamp) are stored for the App to function.

What we do NOT do

• No passwords are ever collected (authentication is monday’s OAuth).
• No analytics trackers, no advertising, no cookies of our own inside the App.
• We never sell, rent or share your data with third parties for marketing purposes.

4. How we use the data

To provide the App’s features — scanning boards for duplicates, displaying results, and performing the merge / archive / delete / ignore actions that you explicitly trigger (scanning itself never modifies your board) — and to communicate with you as described in section 9.

5. Hosting and sub-processors

The App runs entirely on monday code, monday.com’s own application infrastructure (hosted in the United States), including its managed MongoDB storage. No data leaves the monday.com infrastructure to reach servers operated by ETHANOLLE.

If you choose to book a call through the optional Calendly link displayed in the App, Calendly’s own privacy policy applies to the information you submit there.

6. Data retention and deletion

• Scan results: automatically pruned (only the last 3 scans per board are retained).
• All other App data (encrypted token, settings, ignored pairs, audit log): retained while the App is installed on your account.
• When you uninstall the App or revoke its authorization, all data associated with your account is permanently deleted automatically within 10 days.
• You may also request deletion at any time by writing to admin@ethanolle.com; we will comply within 10 days.

7. Security

• OAuth tokens encrypted at rest (AES-256-GCM, dedicated 256-bit key stored as an encrypted environment variable, separate from any other secret).
• All traffic encrypted in transit (TLS).
• OAuth scopes limited to what the App needs; every request is isolated per monday.com account.
• No personal data is written to application logs.

8. Your rights (GDPR)

If you are in the European Economic Area, you have the rights of access, rectification, erasure, restriction, portability and objection regarding your personal data. Write to admin@ethanolle.com to exercise them; we answer within 30 days. You may also lodge a complaint with the French supervisory authority (CNIL, cnil.fr) or your local authority.

9. Communications

We may contact App users: to answer support requests, to send service notices about the App, and to share updates and offers about the App or about Ethanolle’s other products and services. For this purpose, we may use your business contact details (name, email address, account information) for our own marketing communications, on the basis of our legitimate interest in developing our business. These details are never sold, rented or shared with third parties: they are used by Ethanolle only. The data in your boards is never used for marketing purposes. You can opt out of non-essential communications at any time by writing to admin@ethanolle.com or by using the unsubscribe link included in our emails.

10. Changes to this policy

We may update this policy from time to time. The « Last updated » date above reflects the latest version; material changes will be announced in the App’s listing or release notes.

11. Contact

ETHANOLLE — 58 rue de Monceau, 75008 Paris, France — admin@ethanolle.com