Roles and international scope
Unbilled Work Recovery is provided by Omar Khandji, Montréal, Canada. For customer content (selected boards, contracts, PDFs, extracted terms and workflow records), the customer determines purposes and acts as controller; Omar acts as processor / service provider under documented customer instructions. For his own account administration, subscription, support and security records, Omar acts as controller to the extent he determines their purposes. This notice uses an international, GDPR-style processing framework without claiming certified compliance or imposing Québec law on foreign customers.
Information and purposes
We process monday account/user identifiers, roles and plan state; selected board/item/column/date/time evidence; customer-entered settings and uploaded PDFs; candidate extractions, human decisions, generated change-order files and manually entered invoice/payment references; usage, audit and bounded operational metadata. We use them to provide requested reviews, isolate accounts, enforce access and usage limits, support the service and investigate security issues. The app does not process card/bank credentials, initiate payments, send invoices or contact clients. Do not place credentials in uploaded files or notes. For our own controller records, processing is based on providing the service, legitimate interests in security and support where applicable, and applicable legal obligations. Where consent is required, it is obtained before the relevant processing.
Optional AI processing
AI extraction is optional and occurs only when an authorised user requests it. Extracted PDF text is sent through OpenRouter to a configured model endpoint; manual entry calls no AI provider. Planned primary model: anthropic/claude-sonnet-5.5. Optional fallbacks: openai/gpt-6-luna, then google/gemini-3.8-flash, disabled by default and subject to approval. Requests require zero-data-retention endpoint routing and deny provider data collection. This is a routing control, not a certification of GDPR compliance, a region guarantee or a promise to erase app-side records. Actual endpoints, processing locations and supplier contracts must be verified before activation. Human confirmation remains mandatory.
Hosting, subprocessors and transfers
Application records use monday Code Document DB, files use Object Storage and OAuth credentials use SecureStorage. The frontend uses limited monday SDK telemetry. Processing may take place in the United States and other countries through platform and optional AI services; no geographic residency guarantee is made. Exact service regions, serving entities and supplier terms are verified before enabling processing that requires them. Where international transfer safeguards are required, the applicable mechanism and any supplementary measures must be in place before that processing begins. This notice does not claim that an unverified transfer agreement has already been executed. See the Subprocessor List and Data Processing Addendum.
Retention and deletion
We delete app-held active customer content within ten calendar days after uninstall, deauthorisation or termination. Deletion starts through a durable job that revokes access, cancels pending work and removes application records, uploaded/generated objects and credentials. Failed attempts retain retry state for follow-up; the ten-day commitment remains applicable. A minimal installation lifecycle marker and opaque identity tombstone may remain solely to reject stale events and credentials, without contract content or reusable credentials. This active-content commitment does not assert a verified backup erasure schedule: platform backups, operational logs and platform-owned records follow the applicable service terms and legal obligations. We confirm those retention and deletion arrangements with the platform rather than promising instantaneous erasure of every copy.
Rights and assistance
Customers remain responsible for responding to rights requests concerning their content; we reasonably assist through the verified support channel and forward requests to the relevant customer, subject to identity verification and applicable law. For our own controller records, contact us for access, correction, deletion, restriction, objection or portability where applicable, and to discuss complaints or a competent supervisory authority. No self-service export or automatic rights fulfilment is promised; restitution is coordinated through support and must be scoped to available records.
Security and incidents
Controls include scoped authorisation, tenant checks, credential storage separated from content, guarded processing and audit records. No service is risk-free. We notify the affected customer of a personal-data breach without undue delay and no later than 72 hours after becoming aware of it. Initial notice may be supplemented as facts become known. The customer remains responsible for its own regulatory notification duties. Security reports may be sent to hello@silentcoretech.com.
Contacts and changes
Privacy, support and security requests: hello@silentcoretech.com. Omar Khandji is the contact responsible for privacy matters. Material changes are announced on this page and through the notification means made available by monday. They take effect 30 days after notice, unless a legal obligation requires an earlier date. This notice supplements monday’s own privacy information.