monday.com Foundation Tech School - Privacy Policy (adults)
This Privacy Policy describes how the monday.com Foundation Ltd. (together with our affiliated companies – “monday.com Foundation”, “we”, “our” or “us”), collects, stores, uses, discloses and otherwise processes personal data relating to identified or identifiable individuals (“personal data” or “personal information”) who interact with us via the Tech School Program (“Program”).
Specifically, this Privacy Policy outlines our practices regarding the personal data of the following individuals (which may also be referred to in the Privacy Policy as “You”):
i. Tech School Providers: monday.com Foundation Tech School program coordinators/organizers (including school teachers/managers/mentors) who are registered to, use, interact with or provide the Tech School program to their students;
ii. Tech School Participants: Tech School participants/students (“Participants”) who are registered to, use, interact with or participate in the Tech School program, including via the Tech School Learning Management System (“LMS”). This Privacy Policy is Participants’ parents/guardians (to help you understand the data collected about the Participants). A separate Privacy Policy for Participants who are children is available above.
iii. Visitors: who visit or otherwise interact with the Program website, including https://www.mondaytechschool.org/, or any other website, webpage, e-mail or text message related to the Program, participate in any Tech School events, or interact with any online content or communications under our control (collectively – “Sites” and together with the Program, the “Services”);
This Privacy Policy describes our practices regarding:
- Data Collection & Processing
- Data Uses & Legal Bases
- Data Location
- Data Retention
- Data Disclosure
- Cookies and Tracking Technologies
- Communications
- Data Security
- Data Subject Rights
- Data Controller/Processor
- Additional Notices
Please read this Privacy Policy carefully and make sure that you fully understand and agree to it. You are not legally required to provide us with any of your personal data, and may do so (or avoid doing so) at your own free will. If you prefer not to provide us with your personal data, or to have it processed by us or any of our service providers, please refrain from visiting or interacting with our Sites, or using our Services.
You may also choose not to provide us with “optional” personal data (i.e. “not required” fields on forms), but please keep in mind that without it, we may not be able to provide you with the full range of our Services or with the best experience when using or interacting with our Services.
Any capitalized but undefined term in this Privacy Policy shall have the meaning given to it in our Website Terms of Use.
1. Data Collection & Processing
A. We collect or generate the following categories of personal data about Tech School Providers and Visitors:
- Usage and device information: Connectivity, technical and usage data, such as IP addresses and approximate general locations derived from such IP addresses, device and application data (like type, operating system, mobile device or app id, browser version, location and language settings used), activity logs, the relevant cookies and pixels installed or utilized on your device, and the recorded activity (sessions, clicks, use of features, logged activities and other interactions) in connection with our Services. We collect and generate this information automatically, including through the use of analytics tools (including cookies and pixels) which collect data such as: how often you visit or use the Services, which pages you visit and when, which website, ad or email message brought you there, and how you interact with and use the Services.
- Contact, profile and account information: Including contact details such as name, email, phone number, position, workplace, professional information, company, position, country, any expressed, presumed or identified needs, preferences, attributes and insights relevant to our engagement with you, and contract and account details. We also collect profile pictures, login credentials and any other information submitted or that is otherwise available to us when you sign up or log in to the Services. We collect this information directly from you, or from other sources and third parties.
- Communications: Personal data contained in any forms and inquiries that you may submit to us, including support requests, interactions through social media channels, instant messaging apps and the website chatbot feature (available also via the LMS); registrations to events and photographs taken at events that we host, organize or sponsor; participation in our online and offline communities and activities; surveys, feedback and testimonials received; expressed, presumed or identified needs, preferences, attributes and insights relevant to our potential or existing engagement; and sensory information including phone call and video conference recordings (e.g., with support teams), as well as written correspondence, screen recordings, screenshots, documentation and related information that may be automatically recorded, tracked, transcribed and analyzed, for purposes including analytics, quality control and improvements, training, and record-keeping purposes.
For the purposes of the California Consumer Privacy Act (“CCPA”), specifically in the last twelve (12) months, we have collected the following categories of Personal Information: Identifiers; Professional or Employment-Related Information; Internet or other Electronic Network Activity Information; Geolocation Information; Inferences; and Audio, electronic, visual, thermal, olfactory information. We do not use or disclose sensitive personal information as defined in the CCPA.
B. We collect or generate the following categories of personal data about Tech School Participants:
- Usage and device information: When Participants enter the program website/LMS, we collect connectivity, technical and usage data, such as IP addresses and approximate general locations derived from such IP addresses, device and application data (like type, operating system, mobile device or app id, browser version, and language settings used), activity logs, and the recorded activity (sessions, clicks, use of features, logged activities and other interactions).
We collect and generate this information automatically, including through the use of analytics tools (such as cookies and pixels) which collect data such as: how often the Sites are visited, which pages are visited and when.
Please note that when Participants interact with the LMS, we do not intentionally collect personal data that directly identifies Participants, such as their name, profile picture or email address. Instead, we issue unassigned login credentials to Tech School Providers for their distribution among Participants. The assignment of logins to specific Participants is never shared with us, which ensures we are not able to directly identify individual Participants via their account logins. Please note that if a Participant accesses the Services from home, their home IP address will be collected.
- Direct interactions and communications with us: Personal data contained in any forms and inquiries that Participants may submit to us, including support requests, registrations to events and photographs taken at events that we host, organize, sponsor or participate in.
- Interactions with the AI chat feature (available also via the LMS): We do not ask for and do not seek to collect any personal data of individuals using the AI chat feature. No personal data is required to be disclosed and the feature itself does not collect IP addresses or other technical data aimed at identifying individual users. Technical information associated with the session (such as browser type, session identifiers, or similar diagnostic information) may be processed in order to operate and improve the chat feature. When Participants use the AI chat feature, their input (including text, images, and files) and any output generated will be visible to us and the third-party provider of the chat feature. Such data may be used for testing and analytics purposes, for example to get a better understanding of topics that pose a challenge to students, frequently asked questions, and insights to improve educational content. Such data is not used for model training. Participants are instructed not to include personal information when using the chat feature (for example, their name, address, phone number or other identifying details).
2. Data Uses and Legal Bases
We use personal data for the following purposes and in reliance on the lawful bases noted in the chart below:
Legal basis for processing
To facilitate, operate, and provide our Services.
To provide assistance and support.
- Performance of a Contract
- Where required by applicable law, consent provided by a parent/guardian or by educational institutions acting on their behalf.
To authenticate the identity of Tech School Providers, and to allow them to access our Services.
- Legitimate Interest
- Performance of a Contract
To evaluate, test and monitor our Services, diagnose or fix problems and bugs, as well as develop new features, technologies, and improvements to the Services.
To gain a better understanding of how individuals use and interact with our Services, and how we can improve user experience, and continue improving our products, offerings and the overall performance of our Services.
- Consent (where applicable)
- Legitimate Interest
To explore and pursue growth opportunities by facilitating a stronger local presence and tailored experiences.
To facilitate, sponsor and offer certain events, contests and promotions.
- Legitimate Interest
- Consent
To publish your feedback and submissions to our Sites, public forums and blogs.
- Legitimate Interest
- Consent
To support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity.
- Legitimate Interest
- Performance of a Contract
To create aggregated data, inferred non-personal data or anonymized or pseudonymized data (de-identified data), which we may use to provide and improve our Services, conduct research, or for any other purpose.
- Legitimate Interest
- Performance of a Contract
To enforce our agreements, resolve disputes, and protect our business interests and the interests and rights of third parties.
To comply with court orders and warrants, prevent misuse of the Services, and take any action in any related legal dispute and proceeding.
- Legitimate Interest
- Legal obligations
To comply with applicable laws and regulations.
- Legitimate Interest
- Legal obligations
If you reside or are using the Services in a territory governed by privacy laws under which “consent” is the only or most appropriate lawful basis for the processing of personal data (in general, or specifically with respect to the types of personal data you expect or elect to submit or have processed via the Services), your acceptance of this Privacy Policy will be deemed your consent to the processing of your personal data for all purposes detailed in this Privacy Policy, unless applicable law requires a different form of consent. If you wish to revoke such consent, please contact us.
3. Data Location
We and our authorized Service Providers (defined below) maintain, store and process personal data in the United States of America, Israel, the European Union (“EU”), the United Kingdom (“UK”) and other locations, as reasonably necessary for the proper performance and delivery of our Services, or as may be required by law.
Local privacy laws may be different in your location. For such transfers across territories, we adopt appropriate safeguards to protect your personal data, your fundamental rights and freedoms, and the exercise of your rights in accordance with applicable laws.
If we transfer personal data originating from the European Economic Area (EEA), the UK, or Switzerland to countries that provide an adequate level of data protection based on adequacy decisions published by the European Commission (and associated), the UK or Switzerland (as relevant), we rely on such adequacy findings regarding the level of data protection offered by the recipient country.
To the extent we transfer personal data originating from the EEA, the UK or Switzerland to countries that have not been recognized as offering an adequate level of data protection by the relevant competent authority, we and the relevant data exporters and importers rely on appropriate trans-border data transfer mechanisms as established under applicable law, such as the standard contractual clauses adopted by the EU (available here) and the UK (available here).
4. Data Retention
We retain your personal data for as long as it is reasonably necessary to maintain and expand our relationship and provide you with our Services and offerings; to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (e.g., as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise), all in accordance with our data retention policy. Please note that except as required by applicable law or our specific agreements with you, we will not be obligated to retain your personal data for any particular period, and we are free to securely delete it or restrict access to it for any reason and at any time, with or without notice to you.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements.
If you have any questions about our data retention policy, please contact us via a method listed in Section 12 below.
5. Data Disclosure
We disclose your personal data to certain third parties as described below:
- Service Providers: We engage with third-party companies and individuals to perform services complementary to our own. Such service providers provide us with support, including hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, billing and payment processing services, fraud detection and prevention services, web and mobile analytics, data enrichment, e-mail and/or SMS distribution and monitoring services, call, session or activity recording and analysis services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, content providers, e-mail, voicemails, support and customer relation management systems, website chat services, and our legal, financial and compliance advisors (collectively, “Service Providers”). These Service Providers may have access to your personal data, depending on each of their specific roles and purposes in facilitating and enhancing our Services, and may only use such data for such limited purposes as determined in our agreements with them.
- Tech School Providers: We may share personal data relating to Tech School Participants with their Tech School Providers for the purposes of administering and delivering the Program, including to provide access to and manage participation in the Program; support learning activities and monitor engagement; organize and run events, workshops or other program-related activities; and communicate with Participants or their parents/guardians.
- Legal Compliance: In exceptional circumstances, we may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.
- Event Sponsors: If you attend an event or webinar organized by us, or download or access an asset on our Sites related to such an event, webinar or other activity involving third-party sponsors or presenters, we may disclose your personal data to them. If required by applicable law, you may consent to such disclosure via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your personal data will be subject to the sponsor’s privacy statements. If you do not wish your personal data to be disclosed, you may choose to not opt-in via event/webinar registration or elect to not have your badge scanned, or you can opt out in accordance with Section 9 below.
- Sharing your Feedback or Recommendations: If you submit a public review or feedback, note that we may (at our discretion) store and present your review via our Services.
- Protecting Rights and Safety: We may disclose personal data with others if we believe in good faith that this will help protect the rights, property, or personal safety of the monday.com Foundation, you, or any members of the general public.
- Change in controllership: should the monday.com Foundation or any of its affiliates undergo any change in control or ownership, including by means of merger, acquisition or purchase of substantially all or part of its assets, personal data may be disclosed or transferred to the parties involved in such an event. If we believe that such a change in control might materially affect your personal data then stored with us, we will notify you of this event and the choices you may have via e-mail or a prominent notice on our Sites.
For the avoidance of doubt, we may disclose your data in additional situations, pursuant to your explicit approval, if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, disclose or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.
For the purpose of the CCPA, in the last 12 months, we have disclosed Identifiers; Internet or other electronic network activity information; Geolocation Data; Commercial Information; Audio, Electronic or Similar Information; and Inferences to the third parties listed above.
6. Cookies and Tracking Technologies
Cookies: As is true of most websites, our Sites and Services utilize “cookies”, anonymous identifiers, pixels, container tags, and other technologies to provide our Services and ensure that they perform properly, to analyze our performance and marketing activities, and to personalize your experience. Such cookies and similar files or tags may also be temporarily placed on your device. Certain cookies and other technologies serve to recall personal data, such as an IP address, previously indicated by your device when visiting our Sites or using the Services. Under some data protection laws, like the CCPA and other US state privacy laws, our disclosure of this data to third parties for targeted advertising may be considered a “sale” or “sharing” of personal information. To learn more about our practices concerning cookies and tracking, and how to exercise your opt-out rights, please see our Cookie Policy. You can manage your cookie preferences and opt out of the sale or sharing (for targeted advertising) of your data via our cookie banner, which you can reopen anytime by clicking the “Your Privacy Choices” link or the toggle icon in the footer of each webpage within our Services.
We do not use personal data of Tech School Participants collected through the Tech School program for behavioral advertising directed at Participants.
Google Analytics: We use Google Analytics to collect information about the use of our Sites and Services. This tool helps us understand Users’ behavior on our Services, including by tracking page content, and click/touch movements, scrolls and keystroke activities. Google Analytics also collects information such as how often you visit the Services, which pages you visited when doing so, and which other sites you used prior to coming to our Sites. We do not merge the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to and use of the Services is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can learn more about how Google collects and processes data specifically in connection with Google Analytics here. Further information about your option to opt out of these analytics services is available here.
7. Communications
We may engage in service communications, through e-mail, phone, SMS and notifications. We may contact you with information regarding our Services. For example, we may send you notifications (through any means available to us) of changes or updates to our Services or legal terms, log-in attempts or password reset notices, etc.
We never send promotional communications to You.
8. Data Security
To protect your personal data held with us, we use industry-standard physical, procedural and technical security measures, including encryption as appropriate. However, please be aware that regardless of any security measures used, we cannot and do not guarantee the absolute protection and security of any personal data stored with us or with any third parties as described in Section 5 above.
9. Data Subject Rights
Individuals have rights concerning their personal data under applicable law, including the UK General Data Protection Regulation (GDPR), the CCPA and Israel’s Protection of Privacy Law (PPL).
Such rights may include, to the extent applicable to you according to the laws that apply to you, the right: (i) to know/request access to personal data (specific pieces of personal data collected; categories of personal data collected; categories of sources from whom the personal data was collected; purpose of collecting personal data; categories of third-parties to whom we have disclosed personal data), (ii) to request rectification or erasure of personal data held with the monday.com Foundation, (iii) to restrict or object to such personal data’s processing (including the right to direct us not to sell your personal data for targeted advertising), (iv) to port such personal data, or (v) to equal services and prices. To exercise any of these rights you may have, please contact us. You may also have the right to lodge a complaint with your local data protection authority.
To the extent applicable to you, you may also designate an authorized agent, in writing or through a power of attorney, to request to exercise your privacy rights on your behalf. The authorized agent may submit a request to exercise these rights by emailing us.
Please note that when you ask us to exercise any of your rights under this policy or applicable law, we may need to ask you to provide certain credentials to make sure that you are who you claim you are (to avoid disclosure to you of personal data related to others) and to provide further information to better understand the nature and scope of data for which you request access. Such additional data will then be retained by us for legal purposes (e.g. as proof of the identity of the person submitting the request, or proof of request fulfillment).
Please note that we may not be able to associate usage information with a specific Tech School Participant because login credentials are distributed by educational institutions and not linked to identifiable Participant information by the monday.com Foundation.
10. Data Controller/Processor
Certain data protection laws and regulations, such as the UK GDPR, CCPA and PPL, typically distinguish between two main roles for parties processing personal data: the “data controller” (or under the CCPA, “business” and under the PPL, “database controller”), who determines the purposes and means of processing; and the “data processor” (or under the CCPA, “service provider” and under the PPL, “database holder”), who processes the data on behalf of the data controller.
The monday.com Foundation is the “data controller”. In this situation, our Service Providers processing such data on our behalf will assume the role of “data processor”.
11. Additional Notices
Updates and Amendments: We may update and amend this Privacy Policy from time to time by posting an amended version on our Sites/ Services. The amended version will be effective as of the date it is published. We will provide prior notice if we believe any substantial changes are involved via any of the communication means available to us or via the Sites/Services. After such notice period, all amendments shall be deemed accepted by you.
External Links: While our Sites/Services may contain links to other websites or services, we are not responsible for their privacy practices. We encourage you to pay attention when you leave our Services for the website or application of such third parties, and to read the privacy policies of each website and service you visit. This Privacy Policy applies only to our Services.
Database Controller: For the purposes of Israel’s Protection of Privacy Law (“PPL”), the monday.com Foundation Ltd. serves as the “Database Controller” for personal data processed in connection with this Privacy Policy that originates from Israel or that is otherwise subject to the PPL, and can be contacted in the contact methods provided in section 12 below.
Children: The Program is designed for Tech School Participants who may be underage according to data protection laws in their respective jurisdictions. In designing these Services, the monday.com Foundation has sought to ensure that no personal data that directly identifies such Participants is requested or required for participation in our Services.
Please note that where a Participant accesses the Services from home, personal IP addresses may be collected. We may also, with permission obtained by Tech School Providers, collect photographs of Participants at Program events or during their participation in Program activities. Where required by applicable law, participation in the Program may be facilitated through schools or educational institutions that obtain any necessary permissions from parents or guardians.
Questions, concerns or complaints: If you have any comments or questions regarding our Privacy Policy, or if you have any concerns regarding your personal data held with us, please contact us via this FORM or send an email to: info@techschool.org.
Last updated: 13 July 2026