Privacy Policy

Effective date: 24 June 2026 · Last updated: 9 July 2026

This Privacy Policy explains how Aisly Software and Solutions (OPC) Private Limited ("Aisly", "we", "us", "our") collects, uses, stores, shares, and protects information when you install and use TestBoard - A Test Management app for monday.com (the "App"). It applies only to the App and not to monday.com itself or any other product.

By installing or using the App, you agree to the practices described in this policy.

1. Who we are

The App is provided by Aisly Software and Solutions (OPC) Private Limited, C/O Rajkumar, Anduali Road, Fatehpur 212601, India. For any privacy questions or requests, contact us at [email protected].

If you are in the EEA or UK, Aisly acts as a data processor for the test-management content you create through the App, and as a data controller for the installer contact details we use to communicate with you (see Section 3).

2. Scope

The App runs inside your monday.com account and is built and hosted on monday Code, monday.com's own application hosting and storage infrastructure. We do not operate any separate, developer-controlled database or servers for App data.

3. Information we collect

We collect only the information needed to run the App and to communicate with the person who installs it.

• monday user identity (for attribution and display) - the App reads user identities from the monday API: user ID, display name, and profile avatar. We store only the monday user ID on test records (for example, the fields createdBy, executedBy, and assigneeId). Display names and avatars are fetched live from the monday API when needed and are held only transiently in your browser; we do not store them.
• Installer contact details (for communications) - when the App is installed, we receive an installation notification in our Microsoft Office (Outlook) mailbox containing the installing user's name, email address and monday account ID, along with related install metadata. We use these to record the installation and to send product communications (see Section 4). Because this notification is delivered to and kept in that mailbox, the installing user's name and email address are stored inside our Microsoft Office (Outlook) mailbox.
• Test-management content you create - test cases, test steps, test sets, test cycles, test runs and results, logged bugs, labels, case types, settings, and per-user theme preferences. This content may reference monday board items and user IDs that you choose to associate with it.
• AI feature data (optional) - if you use the optional AI test-case generation feature, the App sends sanitized board and item text to OpenAI (see Section 6). This includes the board name, item name, selected column values, and existing test-case titles. It does not include user IDs, names, emails, or avatars.
• Technical and usage data - limited operational data such as authentication tokens issued by monday (short-lived), and minimal usage logs for the AI feature (account ID, user ID, action, item and board context, and timestamps) used for rate limiting, abuse prevention, and diagnostics.

We do not request or store passwords, payment-card data, or special categories of personal data.

4. How we use information

We use the information described above to:

• Provide the App's core test-management features within your monday account.
• Attribute and display who created, executed, or was assigned test work, and maintain a readable audit trail.
• Link test cases to monday board items and create or update items (for example, creating a bug item when a failed step is reported).
• Generate AI test-case suggestions when you request them.
• Send product communications to the installer from [email protected], such as onboarding, new-feature announcements, newsletters, and service updates. Every newsletter includes an unsubscribe option, and you can opt out at any time by using it or by contacting us.
• Secure, maintain, debug, and improve the App.

Legal bases (EEA/UK): performance of a contract (providing the App), our legitimate interests (securing and improving the App, and informing installers about the product), and consent where required (for example, marketing communications where consent is the applicable basis).

5. Where information is stored

App content is stored exclusively within monday.com's infrastructure (monday Code), using monday-provided databases and storage. All data is strictly scoped to the originating monday account and board, and cannot be accessed across accounts. Installer contact details used for communications are handled by us through our support mailbox ([email protected]).

6. Sharing and third parties

We do not sell or rent personal data, and we do not share it for third-party advertising.

We share information only as follows:

• monday.com - the platform on which the App runs and stores data, under monday.com's own terms and privacy practices.
• OpenAI - if you use AI test-case generation, sanitized board and item text (no user identities) is sent to OpenAI solely to generate suggestions. We send only non-identifying text and no personal data. OpenAI processes this input under its API terms and data usage policies.
• Email service - we use Resend (Resend, Inc.) to deliver transactional product emails, such as install/uninstall notifications and advance notices before scheduled data deletion, sent from [email protected]. Resend processes only the message content and our own support recipient address; it is not sent any monday end-user identities. Resend processes this data under its own terms and privacy policy.
• Uptime monitoring (Healthchecks.io) - our backend sends a periodic "heartbeat" ping to Healthchecks.io to confirm that our scheduled data-maintenance job (daily deletion cron) ran successfully. These pings are operational signals only. They contain no personal data, board content, or user identities, and exist solely to alert us if a background job fails to run.
• Legal and safety - where required by law, regulation, legal process, or to protect rights, safety, and security.

Sub-processors. We rely on the following third-party services to operate the App:

If we ever engage additional sub-processors, we will keep this policy updated to reflect them.

No analytics, advertising, or tracking. The App does not use any analytics, advertising, or tracking technologies. We do not use Google Analytics, Mixpanel, Segment, advertising networks, third-party cookies, or any similar tracking tools in either the frontend or backend. The frontend makes no third-party network requests other than to the monday API via monday's official SDK.

7. Data retention and deletion

App content is retained for the life of the installation. When the App is uninstalled, all associated data, including every monday user-ID reference, test content, and stored preference, is permanently deleted within 7 days, in line with monday.com's data-handling requirements.

Installer contact details used for communications are retained until you unsubscribe or request deletion, after which they are removed from our communications records.

You may request access to, correction of, or deletion of your information at any time by contacting [email protected].

8. Security

We rely on monday.com's hosting, storage, and authentication infrastructure, including short-lived session tokens, account and board scoping, and transport encryption (HTTPS). We restrict access to data to what is necessary to operate the App. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. You can exercise these rights, or opt out of communications, by contacting [email protected]. We will respond within the timeframe required by applicable law.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

10. International transfers

Data may be processed in the regions where monday.com and our service providers operate. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law.

11. Children

The App is intended for workplace use and is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Contact us

Aisly Software and Solutions (OPC) Private Limited
C/O Rajkumar, Anduali Road, Fatehpur 212601, India
Email: [email protected]