Privacy Policy

This Privacy Policy describes how ES TEE MATE COMPANY LIMITED ("we", "us", or "our") collects, uses, and shares information when you use OnboardFlow ("the Service"), a monday.com application for employee onboarding.

Information from monday.com:

• monday.com account ID and user information (name, email) for users who install the app
• OAuth access tokens to integrate with monday.com APIs
• Board and item data related to onboarding workflows

Employee Information (provided by your organization):

• Name and email address of new hires
• Position and department
• Start date
• Documents uploaded by new hires (ID documents, tax forms, etc.)

Mobile App Information:

• Device identifiers for push notifications (FCM tokens)
• App usage data and task completion status

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process onboarding tasks and document submissions
• Send push notifications about task updates and document reviews
• Sync onboarding data with your monday.com boards
• Send invite emails to new hires (when enabled)
• Respond to support requests

We do not sell your personal information. We may share information in the following circumstances:

• With monday.com: To enable integration features and board synchronization
• With service providers: We use AWS for cloud infrastructure and file storage, Firebase for push notifications, and SendGrid/AWS SES for email delivery
• Within your organization: HR administrators can view onboarding data and uploaded documents for employees in their organization
• For legal reasons: When required by law or to protect our rights

We take reasonable measures to protect your information:

• Data is encrypted in transit using TLS 1.2+
• Documents are stored in private AWS S3 buckets with time-limited access URLs
• OAuth tokens are encrypted at rest
• Access to systems is restricted and logged

Data is stored on servers located in Asia Pacific (Singapore) region.

We retain your information for as long as your account is active or as needed to provide the Service. When you uninstall or de-authorize the app from monday.com, all data is deleted immediately:

• OAuth tokens and integration credentials are deleted immediately
• Onboarding session data (names, emails, task progress) is deleted immediately
• Uploaded documents are permanently removed from storage immediately

This deletion is automatic and irreversible. We recommend exporting any data you wish to keep before uninstalling the app.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Export your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at [email protected].

The Service is not intended for use by individuals under 16 years of age. We do not knowingly collect information from children.

OnboardFlow operates on the following domains owned by us:

• obf.esteemate.io — Backend API and monday.com app hosting
• onboardflow.esteemate.io — Public website and documentation

Our service communicates with the following third-party domains:

• Cloudflare (cloudflare.com) — CDN, SSL/TLS certificates, DDoS protection, and performance optimization. All traffic to our domains is proxied through Cloudflare.
• Amazon Web Services S3 (s3.amazonaws.com) — Secure storage of documents uploaded by employees. Files are stored with server-side encryption.
• Firebase Cloud Messaging (fcm.googleapis.com) — Delivery of push notifications to mobile app users. Only device tokens and notification content are transmitted.

We do not use any analytics, advertising, or tracking services. These third-party services have their own privacy policies governing their use of data.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us:

ES TEE MATE COMPANY LIMITED
Email: [email protected]
Address: Bangkok, Thailand