Kayabyte

Privacy policy: Kayabyte Sign Sync for DocuSign

Last updated: 13 October 2026

This policy explains what data the app “Kayabyte Sign Sync for DocuSign” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway, processes when it is installed on a monday.com account and connected to DocuSign.

What the app does

The app sends DocuSign envelopes for items on monday.com boards chosen by the customer, and writes the envelope status, signer progress, the signed document and (optionally) AI-extracted contract terms back to those items.

Roles

For the data in the customer’s monday.com account and DocuSign account, the customer is the controller and Kayabyte acts as a processor that handles the data only to provide the app. monday.com (and the Google Cloud infrastructure monday code runs on) is a sub-processor for hosting and storage.

Services the app uses

The app does not use any other third-party service, analytics, advertising or tracking. During the “Authorize” and “Connect DocuSign” steps it sets one short-lived, strictly necessary security cookie (deleted after the sign-in, at most 10 minutes). It sets no other cookies.

Data the app stores

All stored data stays in monday code storage: - Connection tokens for monday.com and DocuSign, and the customer’s Anthropic API key if one is added, in monday code secure storage (encrypted). The API key is never shown again after it is saved. - Settings for each board: the chosen template, which columns hold signer names and emails, prefill and write-back columns, the send trigger and AI options. - Envelope records: the envelope ID, the item ID and name, status and dates, for envelopes the app sent. - Recent activity: up to 80 short messages such as “Sent”Please sign: Acme” for “Acme AS”“, shown in the app. - The DocuSign account name and the connecting DocuSign user’s name and email. - Counters for plan limits (envelopes and AI reads per month).

Data the app processes but does not store

Signer names, email addresses and prefilled values are read from the item and sent to DocuSign when an envelope is sent; the app does not keep them. Signed documents are downloaded from DocuSign and uploaded straight to the customer’s monday file column; the app does not keep a copy. AI-extracted values are written to the customer’s columns and an update on the item.

Logs

The app writes operational logs through monday.com’s logger (account ID, board ID, item and envelope IDs, error messages). Logs never contain tokens or document contents. They are kept according to monday code’s log retention.

Retention and deletion

Data is kept while the app is installed. When a customer disconnects DocuSign, the DocuSign tokens are deleted immediately. When the app is uninstalled, the app deletes its webhooks and tokens immediately and all remaining stored data within 10 days. Customers can ask for deletion at any time at support@kayabyte.dev.

Access

Only the app’s own code accesses the data. Kayabyte does not sell, share or use customer data for any other purpose.

Your rights

For questions about this policy, or to exercise your rights under the GDPR, contact support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.