Privacy Policy — Import Preflight

Last updated: 27 October 2026
View as Markdown
On this page

This policy covers Import Preflight, a monday.com marketplace app published by Yin Yang Inc. (trading as ClonePartner).

Your file

The CSV you choose is read inside your browser tab by the browser's own FileReader, checked there, and handed back to you as a download or through the clipboard. It is never uploaded. It is not sent to ClonePartner, to monday.com, or to anyone else, and no copy is retained after you close or reload the view.

What the app reads from monday.com

The app makes exactly one request to monday.com's own API, for the structure of the board you are viewing:

boards (ids: $ids) { id name board_kind columns { id title type settings_str } }

That returns each column's identifier, title, type, and configuration — for a status or dropdown column, the labels set up on it. It is what lets the app tell you that a value in your file matches no label on that board.

It does not read your items. There is no query for item data, column values, updates, or files, anywhere in the app.

The AI suggestion

When some columns in your file match no column on the board, the app can ask monday’s own AI which board column each one probably belongs to. It is a suggestion: it never changes the report, and nothing happens unless you press the button.

The model is shown two lists of names and nothing else — the column headers from your file, and the titles and types of the board columns that are still unassigned. No row of your file is sent. That is a property of how the request is built rather than a promise: the function that builds it is given your headers and the board’s schema, and the rows of your file are not one of its parameters, so there is no route through which a value could travel.

The request runs on monday’s own AI infrastructure, through their run_prompt API. It does not go to ClonePartner, and it does not go to any AI provider we have chosen or contracted with — monday selects and operates the model. Usage is metered against your own monday account’s AI allowance, which is also why nothing is spent until you ask for it.

What the app never does

  • It never writes to your board. The app issues no GraphQL mutation of any kind. Where something in your file can be corrected without judgement, you are given a corrected file to import yourself with monday's own importer.
  • It stores nothing. No database, no cookies, no localStorage, no sessionStorage.
  • It holds no access token. A client-side monday app authenticates through the parent monday.com window under your own permissions, so there is no credential to store and no server on which to store one.
  • It contains no analytics, telemetry or error reporting, and loads nothing at runtime from any third party — no CDN, no fonts, no scripts.

Where it runs

The app is hosted on monday code, monday.com's own infrastructure, and is served from the region matching your monday.com account. ClonePartner operates no server for this app and receives no data from it.

Permissions

The app requests two scopes. boards:read serves the single board query above; monday.com's scopes are coarser than this app's needs — it would permit reading item data, and the app does not. ai:consume serves the AI suggestion and nothing else. The narrowness is a property of the code rather than of the permissions, which is why the sections above name every request the app makes.

How to verify this

These are not assurances you have to take on trust. The app's build fails if an item query, any browser-storage call, or any GraphQL mutation other than the AI call appears in the shipped bundle — that check is part of the build rather than a policy, and it runs over the code that actually ships. You can also confirm it yourself: open your browser's network panel while using the app and you will see a request for board columns, a request for the AI suggestion if you pressed the button, and nothing else.

Data deletion

There is nothing to delete. No data is collected, so none is retained. Uninstalling the app leaves nothing behind, because nothing was created.

Children

The app is a business tool and is not directed at children under 16.

Changes

If the app's behaviour changes, this page changes first. Questions: support@clonepartner.com.