Privacy Policy — Socially

Last updated: January 29, 2026

Welcome to Socially, an application available on the monday.com Marketplace (as defined below), which enables you (the "User", "you") to create, manage and publish Publishable Content directly from monday.com boards (the "Boards") to your Social Media Accounts on Third-Party Platforms in accordance with your configurations and preferences (the "Application"). The Application supports publishing workflows triggered by monday.com Automations and enables the management of multiple connected Social Media Accounts (the Application and the related features and functionalities it provides are referred to collectively as the "Services"). The Application and the Services are operated under the brand Pioneera.io, which is owned and operated by Alayof Digital Ltd. (the "Company", "we", "us").

This document constitutes the privacy policy (the "Policy") which governs the use of the Application and the Services and describes our practices regarding the collection, storage, use, processing, disclosure and securing of the information we collect from and relating to you when you use the Application and the Services. This Policy applies to the Application and the Services, as well as to any related communications exchanged between you and us with respect thereto.

Please read this Policy carefully and make sure that you fully understand it and agree to its contents. By accessing, installing, or using the Application and the Services, you agree to be bound by this Policy. You may not use the Application and the Services if you do not agree to the Policy.

This Policy supplements the Application's general End User Terms of Use (the "Terms of Use") available at: https://www.pioneera.io/apps/socially/terms-of-use. Unless otherwise defined herein, all capitalized terms defined in the Terms of Use shall have the same meaning herein. Please note that, as described in the Terms of Use, your use of the Application, including any access to or use of APIs, services, or functionalities provided by Third-Party Platforms integrated with the Application, is subject to the applicable terms, policies, and conditions of such Third-Party Platforms. We do not control or are responsible for the content, availability, or practices of Third-Party Platforms.

General

We will not collect or use personal data for purposes other than those described in this Policy or as otherwise permitted by applicable law.

You are not legally required to provide us with any personal data and may do so (or avoid doing so) with your own free will. If you do not wish to provide us with your personal data or to have it processed by us or any of our third-party Service Providers (as defined below), please avoid any interaction with us including using our Services. Without providing us with the requested data, you will not be able to use certain features of the Application and the Services, and in some cases, the Services may not function at all.

Note that those aspects of this Policy which are mandated by the EU General Data Protection Regulation (the "GDPR"), in particular any rights (such as Data Subject rights detailed below) and duties conferred by GDPR, will apply only to the extent that the GDPR applies. Capitalized terms not otherwise defined herein take their meaning in GDPR.

For the purposes of this Policy, 'personal data' shall mean any information relating to a natural person who can be identified by reference to such data, or as defined by applicable privacy laws. Such personal data does not include anonymized data kept in such a manner that it may not, under reasonable means, be used to identify its subject(s).

What kind of data do we collect, and how do we collect it?

Information collected during your use of the Application

To enable the Application to function correctly and provide you with the Services, we require access to certain information contained on your monday.com Boards and on your Social Media Accounts, which may contain personal data, as explicitly approved by you when installing and activating the Application through the monday.com Marketplace and when you first authorize the Application to connect to each of your Social Media Accounts through the Third-Party Platforms authorization screen.

When you use the Application to publish Publishable Content from your Boards to your connected Social Media Accounts, and subject to your granting us the requisite authorizations (including the standard authorization flows provided by monday.com and the authorization flow presented by Third-Party Platforms), we access, collect and process the following information from your monday.com Account and Social Media Accounts:

Information accessed from monday.com

• Any data you selected and configure for publication via the Services to Third-Party Platforms (i.e., the Publishable Content) such as task/item descriptions, tags, links, videos, images, files, and any other data in item columns that you explicitly map for publication, including, without limitation, updates and changes to such data.
• Any data about files that were uploaded to your Board that connected with the Application and included in the Publishable Content, such as: file size, file name, file type, thumbnail URL (for videos).
• The names and technical identifiers of the relevant Boards that you selected to connect with the Application, such as board name and ID, workspace name and ID, items name and ID, column identifiers, file identifiers, and other technical identifiers used for connecting the Services to your Boards and executing publication actions.
• Metadata required for linking your Social Media Account with the corresponding Boards and executing the publication, such as Board ID, workspace ID, user ID, and webhook configuration, retrieved from monday.com to establish and maintain the connection between your Social Media Accounts and the selected Board.
• User and account-level information to the extent required to operate the Services, which may include account identifiers and user and account metadata (such as user ID, name, username, account ID, and contact details, including user email), permission and authorization scopes granted to the Application, configuration and onboarding data, subscription and plan-related information, timestamps, and other technical and operational information necessary to operate and maintain the Services and connect the Application with your monday.com workspace.

Information accessed from Third-Party Platforms

• Any data and metadata connected to the Publishable Content that you select to publish through your Board such as: Publishment ID, publishing status, Publishment URL.
• Your Social Media Accounts profile and user identifiers, such as user ID, username, or display name.
• OAuth tokens issued through your Social Media Accounts that enable the Application to access and publish the Publishable Content you selected and configured for publication via the Services, including, where applicable, refresh tokens, token expiration information, OAuth scopes granted, token user identifiers (such as user ID, username, or display name), avatar URL, status information, and token creation or refresh timestamps.
• Platform-specific publication settings and metadata that you choose to apply (e.g., privacy or visibility settings, comment settings, or similar options supported by the applicable Third-Party Platform).
• Any other general metadata required to link the Application with your Social Media Accounts and provide you with our services.

The information described above is accessed and processed by us solely to enable the Application to execute the Publishable Content to your Social Media Accounts on the Third-Party Platforms and to provide you with the Services, including user and account identifiers, contact details, configuration data, and content selected by you for publication, according to your configuration, Automations, preferences, and instructions.

We may retain certain operational and security logs for a limited period in an anonymized and/or aggregated form that does not contain personal identifiers.

Information collected upon installation

• When you install the Application through the Marketplace, we collect the following personal data from monday.com: your name, email address, monday.com Account URL, and monday.com Account ID, whether or not the user that installed the Application is an admin, your monday.com username, the number of user in the account and the account tier level, account name, plan identifiers (where applicable), and any other general metadata required to link the Application with your monday.com workspace. Additionally, we collect non-personal data such as whether you are an admin on the monday.com Account and, if applicable, the number of users on the admin account and any other general metadata required to link the Application with your Social Media Account.
• When you first connect each of your Social Media Accounts with the Application you will be required to verify your Social Media Account and we will collect the following personal data from your Social Media Account: your account user ID, username or display name, avatar, account status, and any other general metadata required to link the Application with your Social media account. Additionally, we collect technical authentication credentials necessary to operate the integration, such as access tokens and, where applicable, refresh tokens, token expiration dates, and granted scopes, as well as identifiers and metadata associated with the connected account (e.g., account ID, avatar URL, and connection timestamps).

While we have access to monday.com Account information and Social Media Accounts information to enable the Application's functionality, we only process and store the minimal data necessary to operate the Services.

In all cases, our use of Social Media Accounts user data obtained via Third-Party Platforms or related Third-Party Platforms API Services is limited to providing and improving the user-facing features of the Application, as configured by you. We do not sell Third-Party Platforms user data, do not use it for advertising purposes, and do not allow human access to such data except where reasonably necessary for providing support at your request, for security or fraud-prevention purposes, or to comply with applicable law.

Information provided by You

• You may give us personal data about you when you provide us your contact details or when you communicate with us by phone, e-mail, live chat (via our website, available at: https://pioneera.io) (the "Website") or through the Application dedicated tab on monday.com). The information you give us may include your name, address, e-mail address, phone number, occupation, company name, and other personal data you choose to provide. We may monitor and record phone calls, e-mails, live chats, or other communications between you and our representatives.
• You may grant us full access to your Boards or Spreadsheets, including their content, so that we can provide you with Application support. This access is granted solely by your explicit affirmative action through your monday.com Account or Third-Party Platforms.

For the avoidance of doubt, you are not legally required to provide us with this data and may do so (or refrain from doing so) with your own free will. Without providing us with this data, we will not be able to support you.

Information we collect about You

• We use cookies in connection with the Application and the Services. For more information, please see the "Cookies" section below and our Cookie Policy.
• We may process limited service-related usage data that may include account or user identifiers described above (such as account ID or user ID), for internal operational purposes, such as authentication events, feature usage, troubleshooting, and service improvement. This data is not used for advertising or profiling unrelated to the operation of the Services.
• We may collect, anonymize and aggregate technical and statistical data that does not identify you, for purposes such as service analytics, performance monitoring, security, and improvement of the Services.
• We may collect and temporarily store limited technical and operational data on your device or within your browser environment and/or our servers (such as temporary client-side storage or server-side storage) to support authentication processes, session continuity, and user-initiated support interactions. Such data is used solely for the operation of the Services and does not include tracking or advertising functionality.
• Sensitive personal data: We do not intentionally collect sensitive personal data (for example, information revealing race, ethnic origin, political opinions, religion, medical data, etc.), and we require our customers not to provide us with such information. In particular, as further specified in the Terms of Use, you are prohibited from uploading, transferring, or processing any Protected Health Information ("PHI") subject to the Health Insurance Portability and Accountability Act, as amended ("HIPAA"), through the Application and the Services, unless you first obtain our prior written consent.

Limitation of Personal Data Collection

The personal data we collect in connection with the Application and the Services is strictly limited to the information described above. We do not access or collect personal data beyond what is explicitly outlined herein.

However, you hereby acknowledge and understand that your personal data is also collected, stored, and processed by monday.com on which our Application operates, and by Third-Party Platforms, which operates your Social Media Accounts and Third-Party Platforms APIs. The collection, use, and storage of personal information by monday.com and Third-Party Platforms are not under our control or responsibility and are subject to monday.com's and Third-Party Platform's privacy policy and any other relevant policies of monday.com or Third-Party Platforms. We expressly disclaim any responsibility for the collection, use, or storage of personal information by monday.com or Third-Party Platforms beyond the scope of the Services provided by our Application.

This list is provided for convenience only and may not be exhaustive. Additional or updated privacy policies of Third-Party Platforms may apply, and you are responsible for reviewing all applicable and most current versions.

We do not sell any personal data or any Third-Party Platforms user data. We do not share Third-Party Platforms user data with third parties for advertising, profiling, or similar purposes. Our use of Third-Party Platforms user data obtained via Third-Party Platforms API Services is limited to providing and improving user-facing features that you configure. We do not build independent user profiles. We do not allow human access to Third-Party Platforms user data except (i) when strictly necessary to provide support at your request, (ii) to investigate security issues, or (iii) to comply with applicable law.

The Legal Bases for Data Processing

We process personal data on different legal bases:

• Consent: e.g., by using the Application and the Services, you consent to the collection and processing of your personal data by us.
• Legitimate interest: Where we have a legitimate interest, e.g., managing our business, or defending ourselves from claims, subject to such processing not overriding your own rights and freedoms;
• Public interest: Exceptionally, when necessary, in the public interest, for example, when law enforcement agencies request information to investigate a crime.

For what purpose do we collect data?

We collect and process your data for the following purposes:

• To facilitate, operate, and provide you with the Services and use of the Services, and to carry out our obligations arising from any contracts entered into between you and us.
• To communicate with you for the purpose of allowing you to use the Application and/or Services or in connection therewith.
• To technically facilitate and execute the publication of the Publishable Content to Third-Party Platforms, as per your configuration and instructions.
• To operate the Services and provide the Services and guarantee their use and improvement, including responding to support requests and other inquiries about our Services, sending notifications about changes to our Services and providing information that is relevant to the use of the Services.
• To develop, improve the performance of, and secure our Services.
• To detect, prevent, and otherwise thwart any malfeasance to the Services.
• As necessary to comply with legal obligations that we or you are or may be subject to under any applicable law.
• Make statistics on users of the Services.
• Protect and enforce our rights, privacy, and security, safety, systems, and property, or those of other persons, and resolve disputes.
• To notify you about changes to our Services and provide information that is relevant to their use of the Services.
• To support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity.
• Notifications and Promotional Communications: We may send you notifications, messages, and other promotional updates about new services, features, and offerings, or any other information we think you may find valuable. We may provide such notices via pop-up messages through the Application or via email. If you do not wish to receive such promotional communications, you may notify us at any time by sending an e-mail to support@pioneera.io, or by following the "unsubscribe" instructions contained in the promotional communications you receive. You hereby confirm and agree that in the event of your unsubscribing as described herein, we may send you additional notifications, solely for the purpose of requesting feedback regarding your use of the Application.
• In order to exercise our rights, and to defend ourselves from claims, and to comply with laws and regulations that apply to us or third parties with whom we work.

With respect to data obtained through Third-Party Platforms API Services, our use is further limited to providing and improving the specific user-facing features of the Application that you configure (such as publish your Publishable Content on your Social Media Accounts directly from monday.com). We do not use such data for advertising, profiling, or independent analytics unrelated to your use of the Application.

Recipients of personal data

We may disclose certain personal data to the following recipients:

• Third party service providers for operational and business purposes with respect to the Application or the Services, to enable the operation of the Application or Services, and with other service providers who provide functions such as: customer management applications, hosting service providers, analytics partners and security. Such service providers will be bound by law or contract to protect the personal data and only use it in accordance with our instructions.
• Other third parties, when it is required to satisfy applicable laws or to respond to a lawful request for information, such as in response to a subpoena, including to law enforcement agencies and courts.
• Our affiliated companies, which may use it only for the purposes listed in this Policy.
• In the event that we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of the Company's assets, your personal data may be among the assets transferred, subject to restrictions similar to those contained herein or as otherwise required by applicable law.
• Where needed to support external auditing, compliance, and corporate governance functions.

We may also use and disclose information that is not personal data. For example, we may publish reports that contain aggregated and statistical data about our Services. These reports also will not contain any identifiable information. We may also use third-party analytics tools regarding such non-personal data in order to create analytics and reports and examine our customers' usage patterns.

To the extent we use or store any Third-Party Platforms user data obtained via Third-Party Platform API Services, we will not make that data available to third parties who do not also abide by equivalent data protection and data portability obligations.

Data Storage and Retention

We may retain communications with you in order to process your inquiries, respond to your requests, and improve the Services. We will retain your personal data only for as long as is reasonably necessary to fulfil the purposes outlined in this Policy, including, to maintain and expand our relationship, providing you the Services, complying with our legal and contractual obligations, and protecting ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use).

Please note that we do not store or retain any content from your monday.com Boards or Publishable Content beyond what is reasonably required to operate the Services and perform the publication actions requested by you. Such data stored using appropriate technical and organizational security measures and are used solely to operate the Services in accordance with this Policy and the Terms of Use.

Upon uninstallation or deletion of the Application, personal data associated with your account is deleted without undue delay, except for the following limited data which may be retained:

• Account identifiers and uninstall timestamps;
• Aggregated or anonymized usage metrics; and
• Operational or security logs retained for a limited period.

Such retained data does not include content published on your behalf and is not used to identify individual users.

In addition, we may retain certain information to the extent necessary to comply with applicable legal obligations, enforce our agreements, or establish, exercise, or defend legal claims.

Regarding YouTube only: You may at any time revoke the Application's access to your YouTube APIs via the Google LLC security settings page currently available at: https://security.google.com/settings/security/permissions. Revoking access in Google's security settings will prevent the Application from further accessing the YouTube APIs. Data obtained through YouTube APIs is handled and deleted in accordance with our data retention and deletion practices, including as part of the Application removal process.

With respect to other Third-Party Platforms, you may have options to manage, modify, or revoke the Application's access to your accounts through the interfaces, settings, or permission management tools made available by such Third-Party Platforms. Any such options, if available, are determined solely by the applicable Third-Party Platform, are subject to its terms, policies, and technical implementation, and may change from time to time. Without limiting the foregoing, we do not control, and are not responsible for, the availability, scope, or effect of any permission management or revocation mechanisms offered by Third-Party Platforms, including Google and YouTube, nor for their impact on the availability of the Services or the handling of data following such actions. Please note that revoking or modifying such access may result in certain features of the Services becoming unavailable.

Please note that, except as required by applicable law or our specific agreements with you, we are not obligated to retain your data for any particular period, and we reserve the right to securely delete it or restrict access to it for any reason and at any time, with or without notice to you.

Cross-Territorial Data Transfers

We may store and process information in various locations worldwide, including through cloud services. The laws in such other countries may provide different data protection rights than the laws of your own country. In such cases, we will take steps to ensure a proper level of protection of personal data as required by applicable law. You agree to the transfer of your personal data to such other countries for the purpose of the processing as described in this Policy, including through cloud services.

Cookies

We use "cookies" to operate and secure the Application and to enable certain services explicitly requested by users.

"Cookies" are small text files that a website stores on your computer or mobile device when you visit the Application. Cookies are sent to your web browser and then returned to the server each time the browser accesses the server.

We only use necessary cookies in connection with the Application for purposes required to operate and secure the Application, or to provide services explicitly requested by users, including bot traffic regulation and user-initiated customer support chat. Such cookies do not require prior user consent under applicable law.

In connection with the user-initiated customer support chat, a unique identifier may be stored on the user's device (including through local storage) solely to maintain the continuity of the support conversation.

All cookies used by the Application are placed by third-party service providers acting on our behalf.

Please note that as the Application uses only strictly necessary cookies, blocking or deleting cookies through your browser settings may affect the availability, security, or functionality of the Application.

To learn more regarding our use of cookies, including the specific cookies we use, their purpose, provider, duration, and how to manage your preferences, please visit our Cookie Policy.

Information Security

We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. These measures do not provide absolute information security. We therefore cannot guarantee, and you may not expect, that the Application and the Services will be immune to information security risks.

Your Privacy Rights

Where applicable under the provisions of the applicable privacy protection laws, you may have certain rights in connection with your personal data and how we handle it. Some of these rights may be subject to certain exceptions or limitations in accordance with applicable law. The following is a non-exhaustive list of certain privacy rights you may exercise:

• Right to access your information - a right to obtain a copy of your personal data retained with the Company. You may contact the Company as provided below, and request access to the personal data we hold about you.
• Rectification - a right to rectify inaccurate or incomplete personal data or erase it, where applicable.
• Deleting or restricting access to your personal data. You may request to delete or restrict access to your personal data. We may postpone or deny your request if your personal data is in current use for providing services or for other legitimate purposes, in which case we will let you know if we are unable to do so and why.
• Right to data portability.
• Right to object to processing.
• Right to lodge a complaint with a supervisory authority.

If you have any concerns and/or question about how we process your data, you are welcome to email us at support@pioneera.io. We will look into your request and endeavor, as reasonable, to resolve any concerns you may have.

Children

The Services and the Application are not intended for or directed towards children ("Minors", the definition of which may vary depending on applicable law). We do not knowingly collect personal data from Minors. If a parent or guardian believes that his or her child has provided us with personal data, they should contact us using the details provided hereunder.

Regarding YouTube only: You shall not use the Application to publish Publishable Content that is considered "Made for Kids" content (as defined by YouTube) according to YouTube policy and instruction, currently available at: https://support.google.com/youtube/topic/9689353

Changes to the Policy

This Policy may be amended from time to time. In such a case, we will notify you and publish the amended Policy in all official locations where this Policy appears, including: (i) the listing page of the Application in monday.com Marketplace; (ii) our Website; and (iii) the Third-Party Platforms authorization screen presented when you connect the Application. Your continued use of the Services and the Application after the effective date of the amended Policy constitutes your consent to the amended Policy. Upon the effective date of the amended Policy, the previous version of this Policy will cease to apply. If you do not accept the amended Policy, you may not continue to use the Application and the Services.

Without derogating from the generality of the foregoing, if we make any material changes to the way we access, use, store, or share Third-Party Platforms user data obtained through your Social Media Accounts or related Third-Party Platforms API Services, we will provide you with clear notice of such changes and, where required under applicable law or Third-Party Platform Terms, obtain your affirmative consent before applying them.

Contact Us