Privacy policy
Last updated: 13 October 2026
This policy explains what personal data Waypost handles, why, where it goes and how long it's kept. It covers the Waypost app for monday.com, the public forms and update links it serves, and this website.
Who we are
Waypost is built and run by Devansh Tiwari, an individual developer based in India ("we", "us"). You can reach us at devanshtiwari365@gmail.com.
Two kinds of people
- Users: people who install Waypost in a monday.com account and build forms or update links.
- Respondents: people who fill in a Waypost form or open an update link. They don't need a monday.com account.
For the answers respondents submit, the team that shared the form decides what to collect and what to do with it. Waypost handles those answers only to deliver them to that team's monday.com board, on the team's behalf. If you're a respondent, the team that shared the form is the right contact for questions about your answers.
What we collect and why
From users
| Data | Why we need it |
|---|---|
| Your monday.com user ID and account ID | To know who built each form and which account it belongs to |
| monday.com access tokens for your user, given when you click Connect | To read your board's columns and create or update items with your own access |
| The forms you build: board ID, title, chosen columns and their options, settings, logo, allowed websites | To show the form and check answers |
| Update links you create: the item, form, your label, expiry and usage count | To open, expire and turn off those links |
| Response counts per form and per month (numbers only) | To apply form limits and your plan's monthly limit |
| Your Waypost plan, from monday.com's billing events: plan, trial status, renewal date and billing period | To know which features apply to your account |
We don't receive your payment details. monday.com handles billing.
From respondents
- Answers, files and signatures are checked and sent straight to the form owner's monday.com board as a new item, or as changes to an existing item for an update link. We don't store them. Files and signatures are held in memory only while they're sent, and never written to disk or app storage.
- To pre-fill an update link, Waypost reads that item's answers to the form's questions, with the link creator's access. It doesn't keep what it reads.
- To limit abuse, Waypost counts requests per visitor for a minute at a time. These counts are kept briefly in memory and not stored.
Logs
Our logs record event names and identifiers: account, user, form and item IDs, counts, status codes and short error messages. They never record submitted answers, names or emails typed into a form, access tokens or request bodies. Logs are kept by monday code for the period its logging service keeps them.
Where data is stored
Waypost runs on monday code, monday.com's hosting for apps, and stores its data in monday code's encrypted storage. monday.com Ltd provides this hosting. Its region for Waypost is Australia. Respondents' answers are stored in the form owner's monday.com account, under that account's agreement with monday.com.
Who receives data
- monday.com, to read board columns and tags, create and update items, attach files, authorize your account and run our hosting. monday.com places Cloudflare in front of monday code, which may set its own cookie for bot protection.
- A page the form owner chose: if a form redirects after submitting, the respondent's browser goes to that page. We send nothing to it.
- A website the form owner allowed to embed the form: after a submission, that page receives a "submitted" message with the form's ID, its height and the redirect address. Never any answers.
We don't sell personal data, use it for advertising, or share it with anyone else. We don't use form answers to train AI models.
Cookies and tracking
Waypost's public forms load no third-party scripts, fonts, analytics or trackers, and Waypost sets no cookies on them. This website uses no cookies or analytics. Its hosting provider may keep standard server logs, such as IP addresses and pages requested, for security and operations.
How long we keep data
| Data | Deleted when |
|---|---|
| Access tokens | You uninstall Waypost, or revoke its access |
| Forms, logos and their settings | You delete the form, or uninstall |
| Update links | You turn the link off, delete its form, or uninstall. Links expired for more than 30 days are cleared out the next time your account creates a link |
| Response counts and plan details | You uninstall |
When Waypost is uninstalled from an account, we delete everything we stored for that account. Items Waypost created stay on your boards: they're part of your monday.com account.
Security
Public form links are signed and tied to one board and one form. Each form writes with its creator's own monday.com access. Answers are checked against the board's real columns, uploads are limited by size and type, and public pages use a strict content security policy, rate limits and a spam trap. All traffic uses HTTPS. No system is perfectly secure, but we work to keep the data we handle safe and to keep as little of it as possible.
Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and, for people in the EU or UK, the GDPR, you may have the right to:
- ask what personal data we hold about you and get a copy,
- ask us to correct or delete it,
- withdraw your consent, for example by revoking Waypost's access or uninstalling it,
- complain to a data protection authority.
Email devanshtiwari365@gmail.com and we'll respond within 30 days. If you're a respondent, your answers are in the form owner's monday.com account, so we'll point you to them.
Children
Waypost is a business tool and isn't meant for children. We don't knowingly collect data from children under 18.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll also tell users in the app or by email before they take effect.
Contact
Devansh Tiwari, India. Email: devanshtiwari365@gmail.com.
