Privacy policy: Kayabyte Deal Sync

Last updated: 12 October 2026 (AI handoff summary added)

This policy explains what data the app “Kayabyte Deal Sync” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway, processes when it is installed on a monday.com account and connected to Pipedrive.

What the app does

The app synchronizes Pipedrive deals with items on monday.com boards chosen by the customer, in the directions the customer configures.

Roles

For the data in the customer’s monday.com account and Pipedrive company, the customer is the controller and Kayabyte acts as a processor that handles the data only to provide the sync. monday.com (and the Google Cloud infrastructure monday code runs on) is a sub-processor for hosting and storage.

Services the app uses

• monday.com (monday.com Ltd.): the app runs on monday code, monday.com’s hosting service, and stores its data in monday code storage. monday code runs on Google Cloud in the region monday.com assigns (EU for this app).
• Pipedrive (Pipedrive OÜ): the app reads and updates deals in the customer’s Pipedrive company through Pipedrive’s API (domains oauth.pipedrive.com and <company>.pipedrive.com).
• Anthropic (Anthropic PBC, USA), only if a customer adds their own Anthropic API key and turns on the optional AI handoff summary for a board: when a deal on that board is won, the deal’s fields and notes are sent to Anthropic’s API with the customer’s key to write the summary. This processing happens under the customer’s own agreement with Anthropic (Anthropic’s commercial terms state that API data is not used to train models). The app has no Anthropic account of its own for customer data.

The app does not use any other third-party service, analytics, advertising or tracking. During the “Authorize” and “Connect Pipedrive” steps it sets one short-lived, strictly necessary security cookie (deleted after the sign-in, at most 10 minutes) that protects the sign-in against forgery. It sets no other cookies.

Data the app stores

All stored data stays in monday.com’s monday code storage: - Connection tokens for monday.com and Pipedrive, and the customer’s Anthropic API key if one is added, in monday code secure storage (encrypted). The API key is never shown again after it is saved. - Settings for each synced board: chosen pipelines, group, field mapping and options. - Links between deals and items: the deal ID, the item ID and the last synced values of the mapped fields (for example deal value, stage name, owner email address, organization name). These values are what make two-way sync possible without loops. - Recent activity: up to 80 short messages such as “Created item for deal 42”Acme renewal”“, shown in the app. - The Pipedrive company ID and name and the connecting Pipedrive user’s name. - Import progress and counters (number of linked deals per board and AI summaries per month, used for plan limits). - For deals that got an AI handoff summary: when it was written and a short fingerprint of the text, so the app never overwrites a person’s edits. The summary text itself is stored in the customer’s monday board, not by the app.

The app also reads the account’s app subscription (plan and trial status) from monday.com to apply plan limits; it does not store payment data, which monday.com handles.

Data the app processes but does not store

Deal data received from Pipedrive and item data read from monday.com are processed in memory to perform the sync and are not kept beyond the values listed above. Deal notes are read only to write an AI handoff summary (when that option is on) and are not stored by the app.

Logs

The app writes operational logs through monday.com’s logger (account ID, board ID, deal and item IDs, error messages). Logs never contain tokens. They are kept according to monday code’s log retention.

Retention and deletion

Data is kept while the app is installed. When a customer disconnects Pipedrive, the Pipedrive tokens are revoked and deleted immediately. When the app is uninstalled, the app deletes its webhooks and tokens immediately and all remaining stored data within 10 days. Customers can ask for deletion at any time at support@kayabyte.dev.

Access

Only the app’s own code accesses the data. Kayabyte does not sell, share or use customer data for any other purpose.

Your rights

For questions about this policy, or to exercise your rights under the GDPR, contact support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.