DedupeGuard — Privacy Policy

Last updated: 30 September 2026. DedupeGuard is an app for monday.com, not currently listed on the monday.com marketplace, operated by Basis Gova Binyan Veyazamut Ltd. (Israel). Contact: support@basis-s.co.il.

What the app does

DedupeGuard finds duplicate records on your monday.com boards and, only when you approve, performs a non-destructive, reversible merge. It runs inside monday.com.

What we access

With the permissions you grant during installation (OAuth), DedupeGuard accesses the board data needed to work: boards:read to scan items for duplicates, boards:write to carry out a merge you have approved, and me:read to identify the signed-in user. If you click AI Match Review on a borderline pair, ai:consume lets that one comparison run on monday's own Models API — nothing is sent unless you click it. It only accesses boards where you open the app.

What we store

DedupeGuard performs matching in-session and does not copy your records to any external database. Where the updates:write scope has been granted, information about a completed merge (which record absorbed which) is also written back into your own board as an update note — it stays inside monday.com, owned by you. The app's own secrets (the signing secret and the AI token) are kept as environment variables on our relay host (Render, Inc.), never in the app's code or its source repository.

AI Match Review

The optional AI Match Review runs only when you click it, one candidate pair at a time. When you do, the pair's identity fields — id, name, email, phone, company (length-capped) — are sent over TLS to our stateless adjudication relay at dedupeguard-ai-proxy.onrender.com (hosted by Render, Inc.), which verifies your monday session, stores no record content, logs only account id/status/latency, and forwards a single request to monday's own Models API (monday's AI gateway, operated under monday's Zero Data Retention terms). The AI returns an advisory verdict; a merge happens only when you approve it.

What we do not do

We do not sell, rent, or share your data with third parties. We do not use your data for advertising. Outside the AI Match Review flow described above, no record data leaves monday.com — and even there, nothing is stored outside monday.

Data retention and deletion

Because we do not maintain an external copy of your records, there is nothing for us to retain. Uninstalling the app removes its access to your account; your board data remains untouched and yours. Merge notes written into your boards are deleted by you like any other board content.

Sub-processors

The board view is served from monday.com's infrastructure (monday CDN), and monday.com processes the data as the platform host under its own terms — including the Models API that powers AI Match Review. Our AI adjudication relay is hosted by Render, Inc. (US) and processes AI-review requests in transit only; it keeps no record content at rest.

Your rights

You control your monday.com data at all times. For any privacy question or request, contact support@basis-s.co.il.

Changes

We may update this policy; material changes will be reflected here with a new date.