Privacy Policy

Effective Date: 23 June 2025

This Privacy Policy explains how Friday, Inc. (“Friday,” “we,” “us”) collects, uses, and protects information when you use the Monday Chrome extension (the “Extension”). By installing or using the Extension, you agree to the practices described below.

1. What the Extension Does

Monday helps you stay focused on your goals by blocking distracting websites and—only if you request it—asking our AI service whether a temporary exception should be granted. All goals, blocked‐site lists, timers, and donation analytics are stored locally in your browser. We do not require an account or collect personal identifiers.

2. Information We Collect

2.1 Locally Stored Data (chrome.storage.local)

• Blocked sites list you create
• Goals / daily tasks you enter (id, name, status, timestamps)
• Temporary permissions (site → expiry timestamp)
• Daily reminder time and next reminder timestamp
• Payment attempts (local timestamp + constant source string “checkout‑link”)
• Timer state (saved periodically so the countdown persists after a restart)

This data never leaves your device unless you deliberately export or sync it using Chrome’s built‑in developer tools.

2.2 Data Sent to Our Servers

• AI evaluation request – When you ask for temporary access the Extension sends:
  • reason (max 200 characters, HTML‑stripped)
  • site (domain you are trying to reach)
  • goal (current active goal name)
  The request is processed by a serverless function on Vercel and proxied to OpenAI’s GPT‑4.1‑nano model.
• Transient server logs – Our edge platform records IP address, user‑agent, and timestamp for operational purposes. These log entries are automatically deleted within 30 minutes.

2.3 Third‑Party Services

• OpenAI API – Receives the AI evaluation payload. We do not store the content and have disabled OpenAI’s data‑retention and training usage for this endpoint.
• Stripe – Users who click “Donate” are redirected to stripe.com. Stripe may collect payment‑related data as described in Stripe’s Privacy Policy. No payment or personal data returns to the Extension.

3. How We Use Information

• Provide core functionality (offline) – Blocking sites, tracking goals, enforcing timers.
• AI decision‑making (online) – Determining if your stated reason aligns with your goal.
• Operational security & diagnostics – 30‑minute edge logs help us prevent abuse and diagnose runtime errors.

We do not sell, rent, or share your information for advertising or marketing.

4. Legal Bases & Regional Disclosures

The Extension is offered worldwide. Because no personal identifiers are required, most data is deemed “non‑personal.” If local laws (e.g., GDPR, UK GDPR, CCPA/CPRA, LGPD) consider any of the transient data personal, we process it under the following legal bases:

• Contractual necessity – To deliver the service you request (site blocking, AI evaluation).
• Legitimate interest – To secure the Extension, prevent misuse, and keep brief diagnostic logs.
• Consent – You choose to send an AI request or initiate a Stripe donation.

You may have rights to access, correct, delete, or restrict processing of your personal data. To exercise these rights, email support@friday.so. We will respond within the timeframe required by applicable law.

5. Data Retention

• Local storage – Retained until you uninstall the Extension or use the in‑extension “Reset” option.
• Server logs – Deleted automatically after 30 minutes.
• OpenAI requests – Not saved on our servers; OpenAI discards them per their zero‑retention setting.

6. Your Controls & Choices

• Block/allow any site at any time.
• Edit or delete goals or wipe all local data via the settings menu.
• Skip AI evaluation – Simply remove the site from your blocked list to avoid sending requests.
• Disable reminders – Change the daily‑reminder time or clear it entirely.

7. Security

• All network traffic uses HTTPS/TLS 1.2+.
• No inline eval(), remote scripts, or content‑injection vulnerabilities in the Extension’s code.
• No server‑side user database; therefore no data at rest to encrypt.

8. Children’s Privacy

The Extension is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe we have inadvertently collected such information, please contact us so we can delete it.

9. International Transfers

Friday, Inc. is based in the United States. If you access the Extension from outside the U.S., your interactions may be processed on servers located in the U.S. or other countries that may not provide the same level of data protection as your home jurisdiction. We rely on Standard Contractual Clauses or comparable safeguards where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Post the revised version at this URL, and
• Describe significant changes in the Chrome Web Store release notes.

The “Effective Date” at the top tells you when it was last revised.

11. Contact Us

If you have questions or concerns about privacy, please email support@friday.so. We aim to reply within 30 days.

Friday, Inc.
© 2025 Friday, Inc. All rights reserved.