Nodwren Approvals Privacy Policy

Effective: November 12, 2026. Publisher: Front Porch Puzzle Press ("we"). This policy covers Nodwren Approvals, the approval-requests app for monday.com.

Nodwren Approvals lets people on a monday.com account ask colleagues to approve an item, attach the item's files for review, record each decision with its comment, notify the people involved and update a status column. It runs inside monday.com as an item view, a board view and an automation action.

What Nodwren reads

• From the item and board you use it on: the item name, the board name, the board's status and file columns, the board owners, and the files in the item's file columns (name, type and link), so you can pick the files approvers should review.
• About people in your account: names, profile pictures, account role and active status of the account's users, and your account's teams, so you can pick approvers. Guests appear only if your account has them.
• Plan information: your account's Nodwren subscription and, on the Team plan, the number of seats in the account, as reported by monday.com.

Everything is read with the permissions of the person using the app (or, for automations, the person who set the automation up). Nodwren can't see boards or items that person can't see.

What Nodwren stores, and where

Approval requests (title, message, approvers, decisions, comments, the names and links of the attached files, dates and the request history), per-board settings, saved request templates and a monthly request count are stored in monday.com's own app storage, on monday.com's infrastructure. monday.com keeps this storage separate for each account and each app, so no other account or app can read it. We do not run a database and we do not keep a copy.

When a decision is made, Nodwren also writes to your monday.com account as you asked it to: it posts an update on the item, sends monday.com notifications (monday.com may email them, following each person's own email settings) and sets the status column you chose.

Optional writing help from monday AI

If someone clicks one of the "monday AI" buttons (draft a request message, brief an approver, tidy a rejection reason), Nodwren sends monday.com's own AI service the text needed for that draft: the item name, board name, the item's column values, its five most recent updates, and the request's title, message, approvers and file names. This goes through monday.com's API with the clicking person's permissions, is processed by monday.com under your agreement with monday.com, and uses your account's monday AI credits. Nodwren does not send this text to any other AI provider, does not store the draft anywhere except the text box you see, and nothing runs unless someone clicks. Board owners can turn the buttons off in Nodwren's settings.

Our server

The app's pages are served from our hosting provider, Vercel. The automation action ("request approval when a status changes") runs on a small Vercel function. When monday.com runs that automation, it sends the function a signed request with a short-lived access token. The function checks the signature, creates the request through monday.com's API and storage, and then forgets everything: the token is never saved, and request content is never written to logs. Vercel keeps standard request logs (time, address, status code) for a short period.

Cookies, tracking and analytics

None. Nodwren sets no cookies, uses no analytics or advertising tools, and makes no requests to any service other than monday.com and its own hosting.

Third parties

• monday.com: the platform the app runs in, its API, notifications, app storage and (only when someone clicks a writing-help button) its AI service.
• Vercel Inc.: hosts the app's files and the automation function.

We don't sell, rent or share any data with anyone else.

Keeping and deleting data

Approval history stays in monday.com app storage while you use the app, so your record of who decided what is not lost, and it is still there if you reinstall. If you uninstall and want it removed, or want it removed at any other time, email hello@frontporchpuzzlepress.com from an address on the account and we will delete the account's Nodwren data within 10 days. Updates and status labels that Nodwren posted to your boards are ordinary monday.com content and stay on your boards until you delete them.

Security

All traffic uses HTTPS (TLS 1.2 or newer). Automation requests are accepted only when signed by monday.com with the app's signing secret. Everything people type is checked, length-limited and HTML-escaped before it is stored or posted.

Your rights

You can ask what we hold about you, ask for a copy, or ask for deletion at any time by emailing hello@frontporchpuzzlepress.com. Because the data lives in your own monday.com account's app storage, we will usually be able to answer within a few days.

Changes

If this policy changes, we will post the new version here with a new effective date.

Contact: hello@frontporchpuzzlepress.com

monday.com is a trademark of monday.com Ltd. Nodwren Approvals is not affiliated with or endorsed by monday.com.