Privacy Policy

Last updated: October 3, 2026

Variance Tracker ("we," "our," "the app") is a monday.com app that helps you track and explain changes in your board data over time. This policy explains what information we access, how we use it, and how we protect it.

What we access

When you connect Variance Tracker to your monday.com account, we request the following permissions:

• Read your account information — to identify your monday.com organization
• Read your boards — to pull the item and column data needed to track changes over time
• Read user information on your account — to show you who made specific changes (where available)

We do not request write access to your boards, and we cannot create, edit, or delete anything in your monday.com account.

What we store

To provide the core functionality of the app, we store:

• Your monday.com account ID and account name, so we know which data belongs to your account and can show you which account you connected
• Your access token, so we can continue reading your board data on your behalf (this token is encrypted at rest in our database)
• The configuration you choose — which columns you've selected to track (e.g., which column represents value, status, or date)
• Snapshots of your board data over time — periodic copies of the item data on the boards you choose to track, so we can compare states and show you what changed. This may include the business data contained in your board (e.g., deal values, company names, statuses, dates), depending on what you track.
• Reconstructed historical data, built from monday.com's own Activity Log, where available for your plan, to give you useful history from the moment you connect a board

We do not store data from boards you have not explicitly chosen to track.

Cookies

We use two strictly functional cookies, both limited to the few minutes it takes to connect your monday.com account:

• monday_oauth_state — a security nonce that protects the connection process from cross-site request forgery.
• monday_oauth_expected_account_id — helps us detect and warn you if you authorize a different monday.com account than expected, when connecting from an embedded board.

Both cookies are deleted automatically once the connection process completes, are never used to track you, and are not shared with any third party. We do not use tracking, analytics, or advertising cookies of any kind.

AI-generated summaries

Variance Tracker includes an optional feature that generates a short, plain-language summary of what changed in your data, using Anthropic's Claude AI model. This feature does not send your full board data. Each request contains:

• Figures we have already calculated: totals, counts, the change between two dates, and how many items are overdue or have been pushed back.
• Item names: the names of the few largest-moving items (and, on the Timeline, one highlighted item). Item names are content your team has written, so they can contain whatever you put in them.
• User names: the display names of the monday.com users who made those changes.
• Day counts derived from your due dates (for example, "47 days overdue"), not the dates themselves.

We do not send full item lists, board names, account names or identifiers, status or group labels, email addresses, other column contents, or your monday.com credentials. Under Anthropic's published API terms, data sent through the API is not used to train their models by default and is deleted from their systems within 30 days (see anthropic.com/privacy).

Generated summaries are cached to avoid unnecessary repeat processing. This feature is a narrative aid only; it does not affect or override the underlying reconciled calculations shown elsewhere in the app.

How we use your data

We use the data described above solely to provide the app's functionality: comparing your board's state across time, showing you what changed and why, and surfacing upcoming or overdue items. We do not use your data for advertising, and we do not sell or rent your data to third parties.

Data sharing

We do not share your data with third parties, except:

• monday.com, as necessary to operate within their platform via their official API
• Anthropic, the provider of the AI model used to generate optional plain-language summaries. When you use this feature, calculated figures together with the names of the largest-moving items and the users who changed them are sent to Anthropic's API to generate the summary text. See "AI-generated summaries" above for exactly what is and isn't sent. Anthropic's own privacy practices govern their handling of this data; see their privacy policy at anthropic.com/privacy.
• Our infrastructure providers (currently Render for application hosting, and Neon for database hosting), who process data on our behalf under their own standard security and confidentiality practices, solely to provide the technical infrastructure the app runs on

We do not sell your data to anyone, under any circumstances.

Third-party services we use

None of these services are used for analytics, advertising, or tracking. We do not use any analytics, monitoring, or advertising tools of any kind.

Data retention

We keep your data while the app is installed on your monday.com account. If you uninstall the app, monday.com notifies us and we permanently delete all of that account's stored data (account information, tracked board configuration, snapshots and cached summaries) immediately. You can also delete your data at any time without uninstalling (see below).

Security

We take reasonable technical measures to protect your data. Access tokens are encrypted at rest using industry-standard encryption before being stored in our database, and our infrastructure providers apply their own additional security measures. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Your rights

You can delete your data yourself at any time — go to Settings within the app and use the "Delete my data" option. This permanently removes your account information, tracked board configuration, and all stored snapshot history.

If you have any trouble with this, or have other questions about your data, contact us at the email below.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact us

If you have questions about this privacy policy or how we handle your data, contact us at:

hello@variancetracker.com