Monday.com

monday.com Terms of Service — Key User Takeaways

*This summary is based only on the Terms of Service provided. The separate Privacy Policy, Data Processing Addendum (DPA), monday AI Terms, Acceptable Use Policy, and other referenced documents may materially add to these terms.*

1. Data Collection & Usage

• monday.com may collect, access, use, and share “Personal Data” about users, but the Terms do not specify the categories of data collected. The Privacy Policy is incorporated by reference and should be reviewed for details such as account, device, usage, payment, and communications data.
• “Customer Data” includes anything uploaded or submitted through the service, including files, text, images, reports, and personal data.
• The customer retains ownership and control of Customer Data. However, monday.com receives a worldwide, royalty-free license to access, use, process, copy, distribute, display, export, and reformat it as necessary to:
• Provide and maintain the Services;
• Address technical, fraud, security, or support issues;
• Investigate alleged violations; and
• Comply with lawful requests.
• monday.com may collect, use, publish, and disclose “Anonymous Information”—such as aggregated, de-identified, or analytics information—for operating, improving, publicizing, and developing its products. monday.com owns this information.
• Public submissions are treated more broadly: by posting content publicly, users grant monday.com a license to use, adapt, publish, host, display, and promote it for any lawful business purpose. Moral rights are waived or assigned where legally permitted.

Practical risk: Do not upload highly sensitive information unless the applicable plan and agreements expressly support it. The Terms prohibit special-category data, HIPAA information, and payment-card data unless specific conditions and agreements apply.

2. User Rights

• Customers retain rights and control over Customer Data.
• The Terms do not list specific individual privacy rights—such as access, correction, deletion, portability, or objection rights. Those rights, if available, are governed primarily by the Privacy Policy, DPA, and applicable law.
• Customers are responsible for exporting data before termination. After termination, monday.com may delete Customer Data, and any read-only/export period may end without notice.
• Account administrators can access, modify, remove, share, and control Customer Data and user permissions. An account may also become managed by the organization controlling the account’s email domain.

3. Third-Party Sharing

• monday.com may use affiliates, subcontractors, vendors, payment processors, and service providers to provide the Services and process payments.
• Integrations and third-party applications may exchange, transmit, modify, or delete Customer Data. Their data practices are governed by separate third-party agreements and privacy policies.
• monday.com disclaims responsibility for third parties’ security, privacy, accuracy, reliability, and handling of data.
• monday.com may disclose information when legally required, including pursuant to subpoenas or other lawful processes.

Practical risk: Enabling an integration can permit broad data flows and possible deletion or modification of data. Review each provider’s terms and permissions before connecting it.

4. AI/ML Training

• The Terms do not expressly state that Customer Data is used to train AI models.
• Customer Data may be processed to provide Services, including monday AI, subject to separate monday AI Terms.
• monday.com may use Anonymous Information for improving and publicizing products. Because this information is defined as non-identifying, the Terms do not clearly authorize use of identifiable Customer Data for general model training.
• AI-generated features and functionality are monday.com intellectual property, excluding Customer Data.

Action: Review the monday AI Terms and Privacy Policy for explicit model-training, retention, human-review, and input/output provisions.

5. Key Obligations and Restrictions

• Users must be at least 16 and provide accurate registration information.
• Users must protect passwords, report unauthorized access promptly, and are responsible for activity under their account.
• Customers are responsible for all users, administrators, automated agents, permissions, invitations, integrations, and charges.
• Users may not reverse engineer, copy, resell, circumvent security, overload the infrastructure, interfere with the service, or use it to develop a competing product.
• Customers warrant that their data is lawful and that they possess all necessary rights and consents.

6. Liability & Disputes

• Services are provided “as is,” “with all faults,” and “as available.” No guarantee is made of uninterrupted service, security, accuracy, error-free operation, or prevention of data loss.
• Neither party is generally liable for indirect, consequential, punitive, special, lost-profit, reputational, or data-loss damages.
• Except for specified exceptions, monday.com’s aggregate liability is capped at fees paid during the preceding 12 months. Trial and pre-release services have a $100 maximum liability.
• Customers must indemnify monday.com for claims arising from their legal/terms violations or Customer Data.
• Disputes are generally subject to confidential, binding ICC arbitration in English in Tel Aviv-Jaffa, under Israeli law, with a two-year claim deadline. Class actions are waived where permitted. Courts may still be used for injunctions, and monday.com may sue over intellectual-property infringement.

7. Changes and Notices

• monday.com may change the Terms. Material changes may be announced through the Services, a prominent website notice, or email.
• Continued use after changes take effect constitutes acceptance.
• Service features may be changed or discontinued without notice, although material adverse changes to core functionality will be announced.
• Users should monitor account notices, email, and the Terms page; the document also offers subscription notifications for material changes.