Privacy Policy
Last Updated: May 20, 2026
Your privacy is important to us. This policy explains how Apollo Integration collects, uses, and protects your information.
1. Introduction
Onespace Tech ("Company," "we," "our," or "us") operates the Apollo Integration service ("Service") — a monday.com marketplace app that syncs Apollo.io contacts and companies into monday.com CRM. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Authentication Credentials
- Apollo.io OAuth access and refresh tokens — stored encrypted in monday.com SecureStorage per account. Used to make authorized API calls to Apollo.io on your behalf. No raw Apollo password or static API key is ever collected or stored — you authorize access through Apollo's own OAuth consent screen, and the connection can be revoked from your Apollo account at any time.
- monday.com OAuth access token — stored encrypted in monday.com SecureStorage per account. Used to make authorized API calls to monday.com on your behalf.
2.2 Apollo.io OAuth Permissions
When you authorize Apollo access, the app requests master-level access to your Apollo.io account — required for the People Search used by the Prospect feature (Apollo restricts that endpoint to master-level connections). We request the following permission categories, matching what Apollo's own authorization screen shows you before you approve the connection.
| Category | Why it is needed |
|---|---|
| People | Search Apollo's global people database and view specific people for the Prospect feature. |
| Contacts | Search, create, and update contacts already in your Apollo account, and read contact stages — used by Sync and Enrichment. |
| Organizations | Search Apollo's global company database and view specific organizations for the Prospect feature. |
| Accounts | Search, create, and update companies already in your Apollo account, and read account stages — used by Sync and Enrichment. |
| Opportunities | Create, view, and update deal records for deal sync between Apollo and monday.com. |
| User Profile & User | Identify the authorizing Apollo account and look up workspace users, for OAuth login and record-owner mapping. |
| Miscellaneous | Read lists, tags, and custom fields, and view your Apollo API/credit usage statistics — used for field mapping and credit-cost previews. |
We do not request access to your Apollo billing information or team/seat management settings.
2.3 monday.com OAuth Permissions
When you authorize monday.com access, the app requests the following OAuth scopes. We request only the minimum permissions required for the service to function.
| Scope | Why it is needed |
|---|---|
| me:read | Identify the authorizing account and user (account ID, user ID) during OAuth login and session setup. |
| boards:read | Read your board structure and existing items to check for duplicate contacts before creating new records (deduplication). |
| boards:write | Create and update contact, company, and deal items in your monday.com boards during sync operations. |
| users:read | Look up your workspace users by email to resolve Apollo contact/deal owners to the matching monday.com user, so the "Owner" column can be populated during sync. |
| webhooks:write | Register webhooks that fire when Apollo contacts reach a configured stage, enabling monday.com automations (Growth and Scale plans only). |
| notifications:write | Send in-app bell notifications for sync quota warnings and subscription lifecycle events (trial ending, plan changed, etc.). |
The full list of requested scopes is shown above. We do not request access to your account settings, billing information, or boards outside your configured sync boards.
2.4 Sync Operational Data
- Deduplication index — Apollo contact/company IDs mapped to monday.com item IDs. Used to detect existing records before creating new ones. No contact PII (names, emails, phone numbers) is stored — only platform IDs.
- Sync run summaries — aggregate counts per sync cycle: contacts created, contacts updated, companies created, companies updated, errors. No PII stored.
- Sync configuration — board ID, field mappings, sync frequency, and filter preferences set by the user.
2.5 Third-Party Data Processed
The Service reads contact and company data from Apollo.io (with your authorization) and writes it to your monday.com CRM board (with your authorization). This data is transferred directly between the two platforms and is not stored in our database beyond the deduplication index described above.
Third-party services used by this Service:
- Apollo.io — source of contact and company data
- monday.com — destination CRM platform
- Google Fonts — used to load the app's typography (UI fonts only). No personal data is exchanged; only a standard font-file request is made by your browser.
3. How We Use Your Information
- To authenticate with Apollo.io and monday.com on your behalf
- To perform scheduled sync operations between Apollo.io and monday.com CRM
- To deduplicate records before creating new items in monday.com
- To display sync history and run summaries in the app dashboard
- To enforce your subscription plan quota limits
We do not sell, rent, or share your data with third parties for marketing purposes. We do not contact you for marketing purposes unless you have explicitly opted in.
4. Data Storage and Security
- Your data is stored on monday.com's Document DB in the same geographic region as your monday.com account (US, EU, or AU), inheriting monday Code's regional compliance posture for that region.
- OAuth access and refresh tokens are encrypted at rest using monday.com SecureStorage — a managed encrypted key-value store provided by the monday.com platform.
- All data in transit between our servers, monday.com, and Apollo.io is encrypted using TLS 1.2 or higher.
- Sync run summaries and error logs are retained until you uninstall the app or request deletion (see Section 5).
5. Data Deletion
When you uninstall the Apollo Integration app from monday.com, all of your data is permanently deleted within 10 days. This includes:
- Your Apollo.io OAuth tokens (wiped from SecureStorage)
- Your monday.com OAuth token (wiped from SecureStorage)
- All board configurations and field mappings
- All sync run summaries and error logs
- All deduplication index records
You may also request deletion of your data at any time by contacting us at the support address below. Requests are fulfilled within 10 business days.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — request that we limit how we use your data
- Right to data portability — request your data in a portable format
To exercise any of these rights, contact us at the address below.
7. Contact
For privacy-related questions or data deletion requests, contact:
Onespace Tech
Email: [email protected]
Website: onespacetech.com