Data and security
The short version: answers go straight to your monday.com board. Waypost stores the forms you build and the settings it needs to run them, on monday.com's own hosting, and deletes them when you uninstall.
Where Waypost runs
Waypost runs on monday code, monday.com's hosting for apps. Its data sits in monday code's encrypted storage. The builder inside monday.com and the public forms are served from there too.
What Waypost stores
| Data | Why | Removed when |
|---|---|---|
| Your monday.com access tokens (per user) | To create items with your own access | You uninstall Waypost, or revoke its access |
| Form definitions: board, title, chosen columns and their options, settings, allowed embed sites | To show and check the form | You delete the form, or uninstall |
| A form's logo | To show it above the form | You remove it, delete the form, or uninstall |
| Update links: item, form, your label, expiry, one-time flag, use count | To open, expire and turn off links | You turn the link off, delete its form, or uninstall |
| Response counts (numbers only) | Response limits per form and per month | You delete the form, or uninstall |
| Your Waypost plan, from monday.com's billing events | To know which features apply | You uninstall |
What Waypost doesn't keep
- Submissions. Each answer is checked and sent straight to your board as a new item. It then lives in your monday.com account.
- Files and signatures. They're held in memory only while the submission is sent, then attached to the item's Files column. They're never written to disk.
- Update-link reads. To pre-fill an update link, Waypost reads that one item's answers for the form's questions, and doesn't keep them.
Logs
Waypost's logs hold event names and IDs only: account, user, form and item IDs, counts, status codes and short error messages. They never contain submitted answers, names or emails typed into a form, tokens or request bodies.
Who can do what
- Build and manage forms: monday.com users who have connected Waypost and can edit the board. View-only members can't create forms. Only a form's creator can delete it.
- Fill in a form: anyone with the form's signed link. Links are tied to one board and one form, so they can't be altered to reach anything else.
- Write to the board: each form writes with its creator's own monday.com access, so it can only do what that person could do.
- Change your plan: only monday.com's signed billing events. Nothing a browser sends can change it.
The public form
- Loads no third-party scripts, fonts, analytics or trackers. Most forms run no script at all; forms with signatures, steps, logic or embedding load one small script from Waypost itself.
- Doesn't send the form's address to other sites (no-referrer policy).
- Can't be shown inside other websites, except the ones you allow for embedding.
- Has rate limits (10 submissions and 60 page views a minute per visitor) and a hidden trap field that catches simple spam bots.
- Is served over HTTPS only.
monday.com places a Cloudflare layer in front of monday code, which can set its own cookie for bot protection. Waypost itself sets no cookies on public forms.
Data that leaves Waypost
Only to monday.com: to read your board's columns and tags, create and update items, and attach files. If a form redirects after submitting, the visitor's browser goes to the page you chose; Waypost sends nothing to it. No other third party receives data.
Uninstalling
Uninstalling Waypost deletes everything it stored for your account. Items your forms created stay on your boards.
For more detail, read the privacy policy. Security questions are welcome at the address on Support.
