TL;DR: Your monday.com board data and Outlook calendar content never leave their respective platforms. The app accesses only calendar events — no emails, contacts, or files. The only data we store is subscription metadata (plan, quota, account ID). The app runs on monday code's secure infrastructure with SOC 2, ISO 27001, HIPAA, and GDPR compliance.
Our approach: trust is everything
Trusting a third-party vendor with sensitive work and calendar data is a real decision — and we don't take it lightly. At Fantasy Media, we've built Outlook Calendar Integration Plus around a simple commitment: your data stays within monday.com and Microsoft's secure environments.
The sections below answer the questions IT and security teams ask most often — exactly what we access, how it's protected, where it runs, and what happens if you ever decide to leave.
What data does the app access?
From Outlook: calendar events only. The app does not access your emails, contacts, files, or any other Microsoft data.
From monday.com: board structure and column values needed to create and update items during sync.
No calendar event content or monday.com board data is stored on our servers.
Does the app store any of my data?
No board, item, or calendar event content is stored on our end.
The only data we store is subscription metadata:
Billing cycle start and end dates
Remaining action quota
Account ID, account name, and the email of the user who installed the app
This metadata is stored within monday code's managed infrastructure and logically partitioned by account ID — ensuring each customer's information remains separate.
How are Microsoft authentication tokens handled?
Tokens are the secure keys that let the app access your Outlook calendar on your behalf. We handle them in two ways:
Short-lived tokens — we use monday.com's short-lived authentication tokens, ensuring customer data stays within the monday.com environment.
Secure vault storage — when tokens need to persist, they're kept in monday code's secure vault, which has the same security standards as monday.com itself.
We never store authentication tokens on our own servers.
Do you log any of my data?
No. We do not log details of your boards, items, columns, or calendar event content. Runtime logs are kept in monday code's managed logging service and contain only non-customer identifiers (account ID, user ID, board ID).
Is my data encrypted?
Yes — both in transit and at rest.
In transit: all data is transmitted over TLS
At rest: subscription metadata is encrypted within monday code's managed storage
Where is the app hosted?
Outlook Calendar Integration Plus is hosted on monday code — monday.com's native app-hosting infrastructure. We do not run our own servers or data centers.
monday code servers are located in the US.
Apps hosted on monday code comply with enterprise-level compliance and security standards:
Yes. Outlook Calendar Integration Plus passed monday.com's security and compliance review before being approved on the Marketplace. The review covers OAuth permissions, data handling, and privacy policy.
How is billing handled?
All payments are processed through monday.com's native billing system — there's no separate vendor to approve. Since you already pay through monday.com, your payment information is never shared with us.
What happens to my data if I uninstall the app?
Uninstalling immediately:
Revokes the app's access to your monday.com account and Outlook calendar