Privacy Policy

1. Overview

UserSentry values your privacy and complies with applicable privacy laws. This Privacy Policy explains what data is processed and how it is used when you use our apps: UserSentry for monday.com, AuditSentry SIEM, Seats Management for Jira, and CrowdStrike for Jira.

2. Data We Access

Our apps only access data necessary to provide their features:

monday.com Apps

• UserSentry: User IDs, activity timestamps, and account status for inactive user management.
• AuditSentry SIEM: Security events, login activity, audit logs, and user data for security monitoring and threat detection.

Atlassian Apps

• Seats Management: User account data, activity timestamps, and group memberships via the Atlassian API — used solely for inactive user detection and deactivation.
• CrowdStrike for Jira: CrowdStrike detection data (severity, device information, MITRE tactics/techniques) via the CrowdStrike Falcon API, and creates Jira issues to represent detections. CrowdStrike API credentials are stored in Forge encrypted storage and never exposed in plaintext.

We do not share data with third parties for advertising or profiling purposes.

3. How We Use Data

We use the accessed data solely to provide the functionality of our apps:

• UserSentry: To identify inactive users and perform automated or manual deactivation processes.
• AuditSentry SIEM: To monitor security events, analyze login patterns, detect threats, and provide security dashboards and reports.

Third-Party Analytics

We use Mixpanel as a third-party analytics provider to understand usage patterns and improve our application. The data sent to Mixpanel is limited to non-personally identifiable information, such as Account ID and User ID. We do not send any personally identifiable information (PII) to Mixpanel.

We do not use this data for advertising or profiling.

Third-Party Services (AuditSentry SIEM Only - Map Rendering)

To display maps in AuditSentry SIEM, the frontend loads map tiles from CARTO (basemaps.cartocdn.com) and/or OpenStreetMap (tile.openstreetmap.org). In addition, Leaflet marker icon images are loaded from cdnjs (Cloudflare CDN) (cdnjs.cloudflare.com). These requests are required to render the map UI and do not serve analytics, advertising, tracking, or monitoring purposes by the app. As with any web request, the user's IP address and standard browser metadata may be processed by these providers when assets are fetched.

4. Data Storage and Security

UserSentry stores only essential metadata required for app functionality, such as account identifiers and automation settings. Data is secured using encryption and follows monday.com's developer security standards.

5. Compliance

UserSentry adheres to strict privacy principles, ensuring transparency, minimal data access, and user control via monday.com's permissions.

If you uninstall the app, our access to your monday.com data is automatically revoked.

6. Contact

If you have questions about this Privacy Policy, contact us via the monday.com app listing page or support form.