Overview
Monday to Sheets is committed to protecting your privacy. We do not keep your monday.com data on our servers. Manual and scheduled syncs run within
Google's infrastructure and communicate directly with monday.com's API. Live sync and two-way live sync
pass change events through our backend, which processes them and deletes them afterwards.
Authentication
You connect with monday.com OAuth 2.0. Your monday.com password is never seen or stored by us. Authentication
tokens are stored securely in Google's PropertiesService (your personal Google account storage) and are only
used to communicate with monday.com's API. When you turn on live sync, an encrypted copy of your monday.com
token and of your Google Sheets authorization is stored on our backend so it can apply changes for you.
monday.com OAuth Scopes
When you connect, the add-on requests the following monday.com scopes:
- me:read - Identify the monday.com account you connected
- boards:read - Read boards, groups, items, and column values you choose to sync
- boards:write - Write back to boards when two-way sync is enabled (Business plan)
- workspaces:read - List your workspaces in the board picker
- users:read - Show names in people columns
- webhooks:write - Register the board webhook that drives live sync
The same scopes are requested on every plan. The add-on only writes to your boards on the Business plan
when two-way sync is enabled.
What Data We Access
The add-on accesses the following data from your monday.com account:
- Items: Item data from the boards and groups you choose to sync
- Columns: Each column's title, type and ID, so it maps to the right sheet column
- Boards: Board and group structure so you can browse and select sync sources
- Users: User names for people column rendering
- Groups: Group names and structure for grouping items in your sheet
Data flows directly from monday.com to your Google Sheet. Live sync change events pass through our backend
briefly and are deleted after processing. We never keep your monday.com data on our servers.
What We Store
- Sync Configuration: Your selected boards, groups, and sync settings
- Authentication Tokens: Encrypted monday.com authentication tokens
- Subscription Status: Your plan tier and subscription ID for feature access
Sync configuration is stored in Google's PropertiesService, associated with your Google account and
spreadsheet. Your subscription status, your email address, and, when you use live sync, your encrypted
tokens are stored on our backend.
Google Workspace Permissions
The add-on requests these Google OAuth scopes and no others:
- .../auth/spreadsheets reads and writes the spreadsheet you chose as the destination for a
sync
- .../auth/script.external_request lets the add-on call monday.com's API and our own backend
- .../auth/script.scriptapp creates the background triggers that run scheduled syncs and
pick up your sheet edits
- .../auth/script.container.ui shows the add-on's sidebar and dialogs
- .../auth/userinfo.email and .../auth/userinfo.profile identify your
installation, your plan and your trial
Live sync opens its own Google window that asks for the spreadsheets scope with offline
access, so our backend can write monday.com changes into your sheet while it's closed.
How We Use Google User Data
"Google user data" means the data the scopes above give us. We use every piece for one purpose and nothing
else:
- Your spreadsheet content is read so a sync can tell which rows already exist, which rows
you edited and where each column belongs. It's written so monday.com items land in the tab you picked, and
so rows you edit go back to monday.com when two-way sync is on.
- Your Google account email identifies your installation, applies your plan and trial, ties
a live sync to the person who set it up, and lets us send you email about your own account, like a trial
ending or a failed payment.
- Your Google authorization for live sync is used only to read and write the spreadsheet
you already picked. It's never used to open, list or search any other file.
We don't sell Google user data. We don't share it with advertisers, data brokers or anyone else for their
own use. We don't use it for advertising, credit or lending decisions, and we don't use it to train any AI
or ML model. The add-on has no AI or ML part. We don't build profiles of you or analyse what's in your
spreadsheets.
How We Protect Your Data
- In transit. We use HTTPS with TLS on every connection: the add-on to Google, the add-on to
monday.com, and the add-on to our backend.
- At rest. We encrypt the OAuth tokens our backend holds, Google and monday.com alike, with
AES-256-GCM using a fresh random IV per token. The key is a server-side secret and is never written to the
database, so a copy of the database alone gives no usable token.
- Tokens never reach a browser. They're decrypted only inside our backend at the moment
they're used, and never appear in a web page or a URL.
- Change notices carry ids, not data. A monday.com change notice only tells us which item
changed. Our backend then reads that item from monday.com with your own token, so a forged notice can't
put made-up values in your sheet.
- Least privilege. Tokens for manual and scheduled syncs stay in storage only your Google
account can read. Our backend keeps only the ids it needs to route a change.
- No human access. Our staff don't read your spreadsheets or your monday.com items.
Production access is limited to the people who run the service, and it's used only to keep it running,
to look into abuse or a security problem, or when the law requires it. We ask before looking at anything
in your account for a support request.
Data Retention and Deletion
We keep no copy of your spreadsheets or your monday.com items. They're read and written in place, and only
Google and monday.com hold them. Here's everything we do keep, and for how long:
- Google refresh token (live sync): kept so live sync can write to your sheet. If you revoke
the add-on's access, the token stops working at once, and we delete it within 30 days of your request.
You can revoke it any time at myaccount.google.com/permissions.
- Google account email: kept while your installation is active, so your plan and trial
work. We delete it if you ask.
- Spreadsheet and sheet ids: kept while the live sync that uses them exists. Turning that
live sync off deletes them.
- Change notices: they hold item and column ids only, never values. A notice is deleted once
it's processed, and an hourly sweep removes any notice older than a day.
- Pending sheet edits and echo records: they hold row numbers and column ids, never cell
values. An edit is deleted once it's pushed to monday.com. Echo records expire 5 minutes after they're
written.
- Sync configuration: kept in Google's PropertiesService for as long as the sync exists.
Deleting a sync deletes it.
You can delete this yourself, without asking us:
- Disconnect in the add-on removes your monday.com connection.
- Uninstalling the add-on removes what it stored in your Google account.
- Revoking access at myaccount.google.com/permissions withdraws the Google authorization directly.
To have everything we hold about you deleted, write to team@upsys-consulting.com. We'll erase it within 30 days and
tell you when it's done. The spreadsheets and tabs the add-on wrote are yours, and we never delete them.
Limited Use of Google User Data
Our use of information we receive from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:
- We use Google user data only to provide and improve the sync features on this page.
- We don't sell it or transfer it to data brokers or advertisers.
- We don't use it for advertising, credit or lending decisions.
- We don't use it to develop, improve or train any AI or ML model, and we don't pass it to any service that
would.
- People don't read your data unless you've allowed it for a support request, security calls for it
(looking into abuse, say), or the law requires it.
Third-Party Services
Monday to Sheets integrates with:
UpSys is not affiliated with monday.com Ltd.
Analytics
Our marketing website uses Umami, a privacy-focused analytics
tool that does not use cookies and does not collect personal information.
The add-on sends usage events, like a sync starting or finishing and how many rows it wrote, to our own Umami
server, tagged with your Google account email so we can help you when you write to support. They never
carry spreadsheet content or monday.com item data.