Privacy Policy
Last updated: July 29, 2026
This Privacy Policy applies to Clara at clara.quinsy.app and the Clara monday.com automation app. It does not govern other Quinsy websites.
This Privacy Policy describes how Quinsy UG (haftungsbeschränkt) ("we", "us") processes personal data when you use Clara.
Data controller
Quinsy UG (haftungsbeschränkt)
Schönhausenstraße 41
28355 Bremen
Germany
Commercial register: HRB 42890
Managing director: Helmut Albers
privacy@quinsy.app · contact@quinsy.app · support@quinsy.app
Roles and responsibilities
When Clara runs as part of your monday.com automation, monday.com workspace administrators and their organisations typically decide why and how board data is processed in their accounts. Quinsy processes cell values only to perform the formatting action you configured and acts as a data processor for that automation processing. monday.com remains the platform provider through which automations are triggered, authenticated, and billed.
What we process
When your monday.com automation runs, we receive and process the following data sent by monday:
- Board ID (
boardId) - Item ID (
itemId) - Column ID (
columnId) - Cell content (
columnValue) - Selected format type (
formatType) - Account, workspace, and user identifiers included in monday.com automation payloads (such as account or user IDs needed to execute the action)
We use short-lived monday API tokens provided during each automation run to read the current cell value and write back the formatted result.
Website visitors
When you visit clara.quinsy.app, our hosting provider processes technical data required to deliver the site, including IP address, browser type, requested pages, timestamps, and referrer information. We use this data to operate, secure, and troubleshoot the website. We do not use this information for advertising profiles.
What we do not do
- We do not store cell content persistently.
- We do not sell your data.
- We do not use your data for advertising.
- We do not build user profiles from board data.
Legal basis
We process data on the following bases under the GDPR:
- Contract (Art. 6(1)(b)): to deliver the formatting automation you configured.
- Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve Clara, prevent abuse, enforce plan limits, and maintain service reliability. You may object to processing based on legitimate interests where applicable.
Third parties
Clara contacts a small set of third-party domains for core functionality only. We do not use analytics, advertising, tracking pixels, monitoring SaaS, social trackers, or third-party cookies on the marketing site.
Backend (https://quinsyclara.vercel.app)
- api.monday.com — every automation run. Clara calls monday GraphQL with the per-run short-lived token to read column values, write formatted results, and check subscription/usage. Required for the app to work.
Hosting (sub-processor, not tracking)
- Vercel — hosts our API and website. Request data passes through Vercel infrastructure. We do not use Vercel Analytics or similar add-ons.
Frontend (https://clara.quinsy.app)
- auth.monday.com — OAuth install flow only when a user clicks Install on our marketing site.
- cdn.jsdelivr.net — how-to page only (https://clara.quinsy.app/how-to/). Loads the monday SDK script so the guide can run inside the monday Developer Center iframe. Functional integration only; no tracking.
Main site fonts are self-hosted on clara.quinsy.app (no Google Fonts or other font CDNs on landing or legal pages).
Not used
Google Analytics, Meta Pixel, Hotjar, Sentry, ad networks, social trackers, or any third-party cookies on the marketing site.
First-party domains
The following are our own domains, not third parties: quinsyclara.vercel.app, clara.quinsy.app. Footer links to quinsy.app are manual user navigation only.
Sub-processors
We use the following sub-processors to operate Clara:
- Vercel (hosting): our API and website run on Vercel infrastructure.
- monday.com (platform): sends automation payloads, provides API access for read/write operations via api.monday.com and auth.monday.com, and handles marketplace billing and metering where applicable.
- jsDelivr (cdn.jsdelivr.net): delivers the monday SDK script used only on the how-to page for Developer Center embedding.
International transfers
Some sub-processors may process data outside the European Economic Area, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and supplementary measures offered by our providers.
Retention
Cell data is processed in real time during each automation run and is not retained in our application database. Server logs on Vercel may temporarily contain request metadata. Log retention follows Vercel's default policies (typically up to 30 days for runtime logs).
Usage and billing
Clara tracks how many automation transformations you use through monday.com's app_subscription_operations API (operation kind: transform). monday.com hosts the monthly counter; Clara enforces your plan's limit (50 / 150 / 10,000 / 25,000 per month for Free / Basic / Pro / Team) before each automation run. Each run also consumes one monday.com automation action from your account quota. We do not maintain a separate usage database or store cell content for metering. Payment and invoicing are handled by monday.com.
Children
Clara is a business tool for monday.com workspaces and is not directed at children under 16. We do not knowingly collect personal data from children.
Your rights
Under GDPR, you may have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability where applicable. To exercise these rights, contact us at privacy@quinsy.app.
You may lodge a complaint with a supervisory authority. Our lead supervisory authority is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Bremen (LfDI Bremen)
Arndtstraße 1, 27570 Bremerhaven, Germany
www.datenschutz.bremen.de
Changes
We may update this policy from time to time. The "Last updated" date at the top will reflect any changes.