Privacy Policy | Fortimus

At Fortimus, your privacy is paramount. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you interact with our app on the monday.com marketplace.

1. Information We Collect

We collect only the following information, which is provided by monday.com upon installation of our app:

Name
Email Address
Company
Number of Users
Account ID/User ID
Region

No additional data or metadata is processed or stored by Fortimus.

2. How We Use Your Information

We use the collected information solely for the purposes of:

Operating and improving our app functionality.
Providing customer support and responding to inquiries.
Enhancing our services based on user needs.

Fortimus does not sell, lease, or otherwise share your personal information with any third parties.

3. Data Storage and Security

Your data is stored securely using Netlify’s infrastructure. Netlify employs advanced security measures , including encryption in transit and at rest, regular security audits, and adherence to industry recognized standards such as SOC2 Type II, to protect your information. While our app’s data is hosted on Netlify's secure servers, we do not transfer or share your information with any other parties.

4. Data Retention

We retain your personal information only for as long as is necessary to provide our services or as required by applicable laws. When your data is no longer needed, we ensure that it is securely deleted.

5. Your Rights and Deletion Requests

You have the right to request the deletion of your personal information at any time. To initiate a deletion request, please contact us at: support@fortimus.co. Upon receiving your request, we will respond promptly and take the necessary steps to remove your data in accordance with applicable legal requirements.

6. Regulatory Compliance

While Fortimus is not explicitly certified under GDPR, CCPA, or other regulatory frameworks, we strive to align our data handling practices with applicable privacy laws and industry best practices. We continuously assess and update our processes to ensure the protection and privacy of your personal data.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. The effective date of the policy will be updated accordingly, and the revised version will be posted on our website. We encourage you to review this policy periodically.

8. Third-Party Cookies and Integrations

Fortimus may redirect you to certain third-party services, such as Google, YouTube, Figma, Canva, and Sprout Social within our app. When you use these integrations, these services may place and use cookies or similar technologies on your device to collect information about your interactions with their content. These cookies are governed by the respective privacy policies, not by Fortimus. We encourage you to review their policies to understand how they handle data collected through cookies.

Fortimus does not control, store, or access any cookies that these third-party services set. Any data collected via those cookies is managed solely by those services in accordance with their respective privacy practices.

9. Google API Services and Gmail Data

Our PDF Docs, Invoices + eSignatures app for monday.com lets you optionally connect a Google (Gmail) account so that documents — such as quotes, invoices, and signature requests — can be emailed directly from your own email address. If you choose to connect Gmail, we request only the following Google OAuth scopes:

Send email on your behalf (gmail.send) — used exclusively to send the emails you compose or trigger in the app: generated documents, signature requests, and any automated sends you explicitly configure (for example, “when the due date arrives, email the invoice”). We cannot and do not read, receive, or delete your email with this permission.
See your email address (userinfo.email) — used only to identify which Gmail account is connected and display it to you inside the app.

We do not request access to, and never access, your inbox, message content, drafts, labels, contacts, or any other Gmail data. Message content for outgoing emails comes solely from the templates you create and the monday.com board data you choose to include.

Storage and protection. The OAuth tokens Google issues (and the connected email address) are stored in monday.com’s encrypted secure storage, scoped to your monday.com account, and transmitted only over encrypted (TLS) connections. We do not copy your Google data to any other datastore, and we do not sell it, use it for advertising, or use it to train artificial-intelligence or machine-learning models. No human at Fortimus reads this data except with your explicit permission (for example, when resolving a support request you raise), where necessary for security purposes, or where required by law.

Fortimus’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Where our other apps integrate with Google services (for example, the Google Drive Integration app), the same commitments apply to any data received from Google APIs.

Revoking access. You can revoke our access to your Gmail account at any time from your Google Account permissions page; revocation immediately invalidates the tokens we hold. You may also email support@fortimus.co to have the stored connection and tokens deleted from our systems.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: support@fortimus.co