Privacy Policy

This Privacy Policy describes how ES TEE MATE COMPANY LIMITED ("we", "us", or "our") collects, uses, and shares information when you use OnboardFlow ("the Service"), a monday.com application for employee onboarding.

Information from monday.com:

• monday.com account ID and user information (name, email) for users who install the app
• OAuth access tokens to integrate with monday.com APIs
• Board and item data related to onboarding workflows

Employee Information (provided by your organization):

• Name and email address of new hires
• Position and department
• Start date
• Documents uploaded by new hires (ID documents, tax forms, etc.)

Mobile App Information:

• Device identifiers for push notifications (FCM tokens)
• App usage data and task completion status

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process onboarding tasks and document submissions
• Send push notifications about task updates and document reviews
• Sync onboarding data with your monday.com boards
• Send invite emails to new hires (when enabled)
• Respond to support requests

We do not sell your personal information. We may share information in the following circumstances:

• With monday.com: To enable integration features and board synchronization
• With service providers: We use AWS for cloud infrastructure and file storage, Firebase for push notifications, and SendGrid/AWS SES for email delivery
• Within your organization: HR administrators can view onboarding data and uploaded documents for employees in their organization
• For legal reasons: When required by law or to protect our rights

We take reasonable measures to protect your information:

• Data is encrypted in transit using TLS 1.2+
• Documents are stored in private AWS S3 buckets with time-limited access URLs
• OAuth tokens are encrypted at rest
• Access to systems is restricted and logged

Data is stored on servers located in Asia Pacific (Singapore) region.

We retain your information for as long as your account is active or as needed to provide the Service. When you uninstall the app from monday.com:

• OAuth tokens are deleted immediately
• Onboarding data is retained for 30 days then deleted
• Uploaded documents are deleted within 30 days

You may request earlier deletion by contacting us.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Export your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at [email protected].

The Service is not intended for use by individuals under 16 years of age. We do not knowingly collect information from children.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us:

ES TEE MATE COMPANY LIMITED
Email: [email protected]
Address: Bangkok, Thailand