This Privacy Policy explains how Credifly (“Credifly,” “we,” “us,” or “our”) collects, uses, stores, and protects information when you use OpsAtlas, our website, and related services.
1. Information we collect
Account information
When you create an OpsAtlas account, we collect your name, email address, password hash, organization information, account role, preferences, and plan information. We do not store your password in plain text.
monday.com integration data
When you connect monday.com, we receive OAuth credentials and supported account metadata needed to provide the service. Depending on your permissions and plan, this may include account, workspace, board, column, ownership, relationship, and configuration metadata. OpsAtlas is designed as a read-only, metadata-first service and does not intentionally retrieve item content unless a future feature clearly requires it and you authorize the necessary access.
Technical and usage data
We may collect security logs, request information, browser and device details, feature usage, error data, and approximate location derived from IP address to operate, secure, and improve the service.
2. How we use information
- Provide environment inventory, architecture mapping, health analysis, criticality scoring, and change history.
- Authenticate users and maintain account and integration settings.
- Protect OpsAtlas, investigate errors, prevent abuse, and comply with law.
- Communicate service updates and respond to support requests.
- Improve product performance and develop new features.
3. Legal bases
Where applicable, we process information to perform our contract with you, pursue legitimate interests such as service security and improvement, comply with legal obligations, and act on consent where required.
4. How we share information
We do not sell personal information. We may share limited information with infrastructure, database, authentication, monitoring, communication, and payment providers acting on our behalf; with monday.com as necessary for the integration; during a corporate transaction; or when required by law. Providers are permitted to use information only to deliver their services to us.
5. Storage and security
We use reasonable administrative and technical safeguards, including encrypted transport, restricted access, hashed passwords, and encryption of monday OAuth credentials. No method of storage or transmission is completely secure.
6. Retention
We retain account information while your account is active and as needed for legitimate business, security, tax, and legal purposes. Integration credentials are deleted or disabled when the integration is disconnected or uninstalled, subject to limited backup retention. You may request account deletion by contacting us.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or export your personal information, or object to certain processing. You may disconnect monday.com at any time from your OpsAtlas account page. To exercise a right, contact us at the address below.
8. International transfers
OpsAtlas and its providers may process information outside your country. Where required, we use appropriate safeguards for international transfers.
9. Children
OpsAtlas is a business service and is not intended for children under 16. We do not knowingly collect personal information from children.
10. Changes
We may update this policy as OpsAtlas evolves. We will post the updated policy here and change the effective date. Material changes may also be communicated through the service or by email.
11. Contact
For privacy questions or requests, contact privacy@credifly.co.