Kayabyte

Privacy policy: Kayabyte Burnrate

Last updated: 15 October 2026

This policy explains what data the app “Kayabyte Burnrate” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway, processes when it is installed on a monday.com account.

What the app does

The app reads the time a team logs on monday.com boards, prices it with the team’s rate card, and shows budgets, retainers, margins and reports. It can send monday notifications when a budget reaches its warning level, and write item costs into numbers columns the team chooses.

Roles

For the data in the customer’s monday.com account, the customer is the controller and Kayabyte acts as a processor that handles the data only to provide the app. monday.com (and the Google Cloud infrastructure monday code runs on) is a sub-processor for hosting and storage.

Services the app uses

The app uses no other services, and no analytics, advertising or tracking.

Data the app stores

All stored data stays in monday code storage: - Connection token for monday.com, in monday code secure storage (encrypted), and the name of the admin who authorized the app. - Settings: currency, time zone, how many months of history to read, and the monday user IDs of the app’s managers. - Rate card: role names, monday user IDs of people with their own rates or roles, and the cost and billing rates with their start dates. - Budgets: name, which boards, groups or items they cover, amounts, hours, periods, billing options, and the monday user IDs of watchers. - Board settings: which columns hold time, hours, billable flags and estimates, and which columns receive costs. - Invoicing marks: period, amount, date, an optional note, and the name of the user who marked it. - Alert state and recent activity: which alerts were sent, and up to 200 short messages such as ‘“Acme retainer” has used 82% of its budget’. - Write-back values: the last cost and billable amount written to each item, so unchanged values are not written again (30 days). - Job records: the time and outcome of the last hourly run (account IDs and error messages), used to operate the service.

Data the app processes but does not store

Time tracking sessions, hours, people and column values are read from monday.com when a budget or report is opened, or by the hourly check, and kept in memory for up to 24 hours (normally 10 minutes). Reports and CSV files are built on request and not stored.

Cookies

The app sets one strictly necessary cookie, br_oauth, only during the admin’s authorization step (at most 10 minutes).

Logs

The app writes operational logs through monday.com’s logger (account, board, budget and item IDs, error messages). Logs never contain tokens, rates or time data.

Retention and deletion

Data is kept while the app is installed. When the app is uninstalled, all stored data is deleted at once. If monday.com’s storage is unavailable at that moment, the app keeps only the encrypted token to retry the deletion every hour, and deletes the token as soon as the data is gone. If the data still can’t be deleted after 10 days, the token is deleted anyway; the remaining records can then no longer be read by the app, and you can ask us to follow up with monday.com. Customers can ask for deletion at any time at support@kayabyte.dev.

Access

Only the app’s own code accesses the data. Kayabyte does not sell, share or use customer data for any other purpose.

Your rights

For questions about this policy, or to exercise your rights under the GDPR, contact support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.