Effective 6 August 2026 ยท Controller/service provider: VENTURE VD LLC
Approval Ledger processes monday account, board, item, selected column, approver identity, decision, comment, subscription, and audit-event data only to provide version-bound approval records, notifications, exports, reconciliation, support, and security. We do not sell this data or use it for advertising or model training.
Records are held in an encrypted-at-rest PostgreSQL database in United States (Fly.io Chicago region), reachable only over the hosting provider's private, encrypted network and not exposed to the public internet. Transport to our own services uses TLS. OAuth tokens use AES-256-GCM field encryption. Access is scoped by monday account and signed user identity; decision and audit rows are append-only for the application role. Operational logs are retained for up to 30 days.
Fly.io (application hosting and PostgreSQL database), Tigris (encrypted U.S. multi-region logical-backup object storage), Sentry (error monitoring), Resend (transactional email), and OpenAI (generates the optional advisory AI request-summary text from the item name and the account's own watched-column values). monday.com provides platform identity, billing, API, and notification delivery.
Records remain until an account retention rule or verified administrator deletion request applies. Connection records explicit consent for a recovery/export window of up to 30 days after uninstall; a legacy account without consent is deleted within 10 days. OAuth credentials are removed on uninstall. JSON and CSV exports are available while installed and through the time-bounded uninstall export credential. Daily logical-backup objects are configured to expire after 30 days, and daily database volume snapshots are retained for 14 days; there is no point-in-time recovery.
For access, deletion, security, or privacy requests, email support@venturevd.com. Website: https://approvals.venturevd.com/.