Blink Payment Manager Privacy Policy

Introduction

This Privacy Policy describes how Blink Payment Manager ("we", "our", or "the App") collects, uses, stores, and protects information when you use the App on the monday.com platform.

Please read it before using the App. Questions about it, and requests about your data, go to [email protected].

1. Information We Collect

1.1 Data You Provide

Blink Payment API Credentials

• API Key
• Secret Key
• Blink account address (base URL)

monday.com Data

• Your monday.com account ID, and the user IDs of people who use the App
• Each person's monday.com connection (an access token), created when they choose "Connect monday.com"
• Each person's role (for example viewer or guest), taken from monday.com's session token
• The IDs and names of boards where the App's board view has been added
• Item IDs, and the values of the columns the App reads and writes (Client Name, Client Email, Payment Amount, Paylink Status, Manage Paylink, Paylink Created, Expiry Date, Amount Paid, Paid Date, Balance Paid Date, Blink Paylink Notes, and the recurring plan columns)

Records the App Keeps

• Paylink records: the monday.com item and board, the Blink paylink, its address (URL), the amount, the client's email and the status
• Cached details of payments, read from Blink Payment
• Payments marked as paid by hand: the payment reference, who marked or confirmed it, the amount, the date, and the values it replaced
• Automation rules you set up, including the board, groups and the person who created them
• Your App settings, and markers linking recurring plans to board items
• The most recent incoming payment notifications (IDs and statuses only), for troubleshooting
• When the App was last used in your account

1.2 Data Collected Automatically

• Server logs: requests to the App's server, including the IP address and browser details (user agent) of the request, account, board and item IDs, and the names of monday.com items the App works on, kept for troubleshooting and security monitoring. Logs never contain API keys, secrets or access tokens.

1.3 Data We Do NOT Collect

• We do NOT collect or store payment card details. Card details are entered on Blink Payment's pages and never reach the App.
• We only read boards where the App's board view has been added, or boards on which you set up an automation
• We do NOT collect personal data beyond what the App needs to work

2. How We Use Your Information

2.1 Core Functionality

• Create Paylinks: create Blink Paylinks and recurring plans from your board data
• Keep the board up to date: update monday.com items when payments arrive or Paylink Statuses change
• Automations: run the automation rules you set up
• Dashboard: show payment history and pending payments

2.2 Service Operation

• Error logging: diagnose and fix technical issues
• Security: detect and prevent unauthorised access and abuse

2.3 Our Role

For the details of your own customers that you put on your boards (such as names, email addresses and amounts), you decide what is collected and why, and we process them on your behalf to provide the App. For your account and usage information, we decide how it is used, as described in this policy.

3. How We Store and Protect Your Data

3.1 Data Storage

• Location: monday.com's app hosting (monday code), in the United States
• Credentials and connections: stored in monday.com's SecureStorage, an encrypted vault
• Working copies: any copy of your Blink credentials on the App's server is encrypted with AES-256

3.1.1 Credential Storage

Blink Payment API credentials are stored per monday.com account, not per board. This means:

• Every board in your monday.com account that uses the App shares the same credentials
• You do not need to re-enter credentials when you add the App to another board
• Changing the credentials on any board changes them for every board in the account

3.2 Security Measures

• Encryption in transit: HTTPS/TLS for all data transmission, with Strict Transport Security (HSTS)
• Every request from the App's screens must carry a valid monday.com session; the account and user are taken from that session
• Viewers can only read; guests cannot change credentials or settings
• Incoming notifications are never trusted as sent: Blink Payment's are confirmed by reading the paylink back from Blink with your account's own credentials, and monday.com's are checked by their signature, except notifications from automation rules created before signed rule links were introduced, which are accepted only when they match an automation rule saved for that account and board
• Requests to Blink Payment go only to Blink's own address (secure.blinkpayment.co.uk)
• Strict validation of IDs and other inputs
• Rate limits per account and user
• Blocked requests are logged for monitoring

3.3 Data Retention

• While installed: we keep your data while the App is installed in your monday.com account
• Removing the board view from a board: deletes nothing. Your credentials stay in place for your other boards.
• Uninstalling the App from your monday.com account: we delete the data we hold for that account as soon as monday.com's uninstall notice reaches the App (see section 6)
• Server logs: are kept by monday.com's hosting for a short period under its own retention, and are not removed by the deletion above

External Services: Data on Blink Payment's servers (paylinks, payments) is NOT deleted when you uninstall the App. That data is managed by Blink Payment.

4. Data Sharing and Third-Party Services

4.1 Third-Party Services

We share data with:

Blink Payment

• Purpose: create and manage Paylinks and recurring plans, and read their payment status
• Data shared: the customer's name and email address, the amount and currency, a payment reference made from the customer's name, the notes or description, the expiry date, and reference data linking the paylink to its monday.com item (the item, board and account IDs and the requested amount)

monday.com

• Purpose: host the App, show its screens, read and update your boards, run automations and send notifications
• Data shared: board, item and user IDs, column values, Paylink addresses and payment details written to your boards

4.2 Data We Do NOT Share

• We do NOT sell your data to third parties
• We do NOT use your data for advertising
• We do NOT share data with analytics or tracking services

4.3 Permissions

The App follows the permissions monday.com gives each person:

No permission escalation: the App cannot give anyone more access than monday.com has given them. Viewers who need to create Paylinks must ask their monday.com administrator for edit access.

5. Your Rights (UK GDPR and EU GDPR)

To exercise any of these rights, email [email protected].

5.1 Right of Access (Article 15)

You can ask for a copy of the data we hold about you or your account.

5.2 Right to Erasure (Article 17)

You can have all App data deleted by uninstalling the App from your monday.com account (deleted as soon as monday.com's uninstall notice reaches the App), or by asking us.

Note: this only deletes data held by the App. Data on Blink Payment's servers must be deleted through Blink Payment.

5.3 Right to Rectification (Article 16)

You can correct your Blink credentials in the App's Settings at any time, and your customers' details on your board.

5.4 Right to Data Portability (Article 20)

You can ask for your data in a machine-readable format (JSON).

5.5 Right to Object (Article 21)

You can object to our processing of your data, or stop it by uninstalling the App.

6. Data Deletion

6.1 Automatic Deletion (Uninstalling the App)

When the App is uninstalled from your monday.com account:

1. monday.com sends the App a signed uninstall notice for your account
2. The App checks the signature
3. The App deletes what it holds for that account: credentials, monday.com connections, paylink records, cached payment details, manual payment records, automation rules, settings, recurring plan markers, the boards list and payment notifications
4. The deletion is logged with a timestamp

Timeline: as soon as monday.com's uninstall notice reaches the App. The App's server can run as more than one copy at a time; short-lived working copies held by a copy that did not receive the notice are discarded when that copy restarts. If monday.com's storage refuses a deletion, the refusal is logged; email [email protected] if you want us to check that your data has gone.

Removing the board view from a board does not delete anything. Only uninstalling the App from the monday.com account does.

What is NOT deleted:

• Blink Payment: paylinks and payments on Blink's systems remain. Contact Blink Payment to manage that data.
• monday.com boards: items and columns, including values the App wrote, remain on your boards

6.2 Clearing Credentials Without Uninstalling

In the App, open Settings and choose "Clear All Workspace Credentials". This removes, for your whole monday.com account:

• The Blink credentials
• Everyone's saved monday.com connections (each person connects again)
• The paylink records and cached payment details held by the App, the boards list and recent payment notifications

It keeps your automation rules, App settings, manual payment records and recurring plan markers, so that everything works again once new credentials are saved. To remove those too, uninstall the App or ask us.

6.3 Deletion on Request

Email [email protected] to ask for your data to be deleted.

Limitations:

• Credentials are shared by the whole monday.com account, so they cannot be deleted for one person only
• We cannot delete data on Blink Payment's servers, or monday.com board data

7. Cookies and Browser Storage

7.1 No Cookies

The App does NOT set or read cookies. Sign-in is handled by monday.com's own session tokens.

7.2 Browser and monday.com Storage

• The App keeps a few functional settings in monday.com's storage for the board view (for example the chosen view mode) and in your browser's local storage (for example whether setup has been completed)
• These are needed for the App to work and are not used for tracking

7.3 Tracking

• We do NOT use tracking, advertising or third-party analytics of any kind

8. International Data Transfers

8.1 Data Location

• App data: United States (monday.com's hosting)
• Blink Payment: United Kingdom

8.2 Transfers from the UK and EEA

Data stored on monday.com's hosting in the United States is transferred under the safeguards monday.com provides for its platform, such as Standard Contractual Clauses. Blink Payment operates in the UK under UK GDPR.

9. Children's Privacy

The App is a business tool and is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the law, in the App, or in our security measures.

• Material changes: we will tell you by email or in the App where we can
• Minor changes: the updated policy is published with a new "Last Updated" date

11. Data Breach Notification

If we become aware of a personal data breach affecting data the App holds:

1. We will investigate and take steps to contain it straight away
2. Where the law requires it, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach
3. We will tell affected customers without undue delay, so that they can meet their own obligations

12. Legal Basis for Processing

• Contract: processing that is needed to provide the App to you (UK GDPR / GDPR Article 6(1)(b))
• Legitimate interests: keeping the App secure, preventing abuse and fixing errors (Article 6(1)(f))

13. Contact

• App: Blink Payment Manager
• Developer: Mutherboard (mutherboard.com)
• Email: [email protected]
• We aim to reply within 48 hours

14. Payment Card Data

Card details are entered on Blink Payment's own pages and are handled by Blink Payment. They never reach the App, so the App does not store, process or transmit card data.

15. Technical and Organisational Measures

15.1 Technical Measures

• Credentials kept in monday.com's SecureStorage; any working copy on the App's server encrypted with AES-256
• HTTPS/TLS for data in transit, with HSTS (one-year max-age)
• A valid monday.com session is required for every request from the App's screens
• Incoming notifications checked before they are acted on (see 3.2)
• Requests to Blink Payment limited to Blink's own address (secure.blinkpayment.co.uk)
• Validation of IDs and other inputs
• Rate limits per account and user, over 15 minutes: 10 credential saves or checks, 60 paylink or plan creations, 1,200 other requests
• Credentials, secrets and access tokens are never written to logs
• Blocked requests are logged for monitoring

15.2 Organisational Measures

• Access to production data is limited to authorised people
• Changes to the App are reviewed for security before release
• A process for responding to incidents and data breaches

Acceptance

By clicking "Accept & Continue" below, you confirm that you have read and understood this Privacy Policy.

Last Updated: 28 October 2026 | Version: 6.1