Privacy Policy

Effective date: 12 October 2026

The short version: our apps are built to handle as little data as possible. PDF Annotator does not store your PDFs, and this website has no analytics, trackers or advertising.

1. Who we are

“nichospt”, “we” and “us” refer to Antonio Lopes, the independent developer that operates the website nichospt.net and publishes the apps listed on it. We are based in Portugal. You can reach us at support@nichospt.net.

2. What this policy covers

This policy explains how information is handled when you:

visit this website,
contact us by email, or
use one of our apps. At present that is PDF Annotator for monday.com.

Our apps run inside third-party platforms. Your use of those platforms is covered by their own privacy policies. For monday.com, that is monday.com's privacy policy, and the content of your monday account remains under the control of your organisation's monday administrators.

3. This website

No cookies, analytics or trackers. This site does not set cookies, does not use analytics or advertising services, and does not load fonts, scripts or other resources from third parties.
No accounts or forms. You cannot sign up, log in or submit information through this site.
Server logs. Like almost every website, the company that hosts this site (Cloudflare, Inc. (Cloudflare Pages)) may automatically record technical information about requests, such as IP address, date and time, the page requested and browser type, in order to deliver the site and keep it secure. We do not use this information to identify visitors.
Email. If you email us, we receive your email address and whatever you include in your message, and we use it only to reply and to resolve your request. Email is handled by Cloudflare, Inc. (Cloudflare Email Routing, which forwards messages sent to this domain) and Google (Gmail), where they are read.

4. PDF Annotator for monday.com

PDF Annotator lets you annotate a PDF stored in a monday Files column and saves the annotated version to an “Annotated PDFs” column on the same item, which the app adds to the board the first time it is needed. It runs on monday.com's own app hosting infrastructure (monday code).

4.1 Your PDFs

The app does not store your PDFs. When you open a document, it is fetched temporarily from monday, displayed and annotated in your browser, and the annotated result is uploaded back to monday as a separate file. The original file, and the column it is in, are never changed by the app. Saving the same document again replaces the previous annotated version that the app created, unless you choose “Save as a copy”. Once the upload is complete, the app keeps no copy of the original, the annotated result or the annotations themselves.

PDF content is not sent to analytics services, AI services or external storage, and it is not written to the app's logs.

4.2 Information the app does handle

Information	Why it is needed	Where it is kept
monday account ID and user ID	To know which account and user a request comes from. They are taken from the signed session token that monday issues to the app, not from anything typed in.	Used while handling each request; also used to label the items below and included in operational logs.
OAuth access and refresh tokens	When you connect the app, monday issues tokens that let the app read your PDFs, save the annotated version, and add its column or board tab, on your behalf and within the permissions you approved.	monday's Secure Storage, on monday's infrastructure. Tokens are never sent to your browser and are never written to logs.
Monthly export counter	To apply the Free plan limit. It is a count of successfully saved annotated PDFs for a calendar month, kept per monday account, together with short-lived reservations made while a save is in progress. It contains no file names, board names, item names or document content.	monday's app Storage, on monday's infrastructure.
Subscription status	To know whether an account is on the Free plan, a trial or a paid plan. It is read from monday when needed. We do not receive or store payment details.	Read from monday; monday remains the source of truth.
Item, column and file identifiers	To find the PDF you chose and to check, with monday, that it belongs to that item and that you are allowed to access it.	Used while handling the request. Not stored.
Operational logs	To diagnose problems and keep the service reliable. Logs contain a request ID, account ID, user ID, the operation performed, timing, whether it succeeded, and error codes. They do not contain PDF content, annotation content or tokens.	monday code's logging facility. Retention: for the period set by monday code's logging service; we do not copy logs anywhere else.

4.3 Where it is processed

The app's server-side code and the stored items above are hosted by monday.com on its monday code infrastructure. Hosting region: the European Union (monday code's EU region). The annotation itself happens in your own browser.

4.4 Purposes

We use the information above only to provide the app: to authenticate you, to read and write files in monday at your request, to apply plan limits, and to keep the service secure and working. Where the GDPR applies, we rely on the performance of our agreement with you (providing the app you asked for) and on our legitimate interest in keeping the service secure and reliable.

5. What we do not do

We do not sell personal information.
We do not use your data for advertising or profiling.
We do not send your documents to AI services or use them to train AI models.
We do not keep copies of your PDFs.
We do not collect payment card details.
We do not send marketing email. We contact you only to answer a request you sent us, or, rarely, about something that affects your use of an app, such as a security issue.

We rely on a small number of providers to operate:

monday.com, which hosts the app (monday code), provides the storage described above, and handles installation, subscriptions and billing for monday.com apps.
Website hosting: Cloudflare, Inc. (Cloudflare Pages).
Email: Cloudflare, Inc. (Cloudflare Email Routing, which forwards messages sent to this domain) and Google (Gmail), where they are read.

We may also disclose information if we are legally required to, or if it is necessary to protect the rights, safety or security of our users or of the service.

7. How long data is kept

PDFs and annotations: not kept.
OAuth tokens: kept while the app is connected so that it can keep working. Refresh tokens are replaced each time they are used and the previous one is discarded.
Monthly counter: one small record per calendar month, holding only a number. Reservations for saves that did not finish expire automatically. Records for past months are no longer used; they are removed when the account's app data is deleted.
Operational logs: for the period set by monday code's logging service; we do not copy logs anywhere else.
Support emails: up to 24 months after your request is resolved.
After uninstalling: when monday.com notifies the app that it has been uninstalled from an account, the OAuth tokens stored for that account are deleted. The monthly counters contain only numbers and remain in monday's app storage; we delete them on request.

8. Security

The app is designed so that sensitive decisions are made on the server and not in the browser: identity is taken from monday's signed session token, access to a file is checked with monday before anything is uploaded, and credentials are held only in monday's Secure Storage. Connections use HTTPS. No system is perfectly secure, but we work to keep the amount of data we hold small so that there is little to expose.

9. Your choices and rights

You can stop using an app, or ask your monday administrator to uninstall it, at any time.
You can ask us what information we hold about you, or ask us to correct or delete it, by emailing support@nichospt.net.
Depending on where you live, you may have further rights under data protection law, such as the right to object to or restrict certain processing, to receive a copy of your data, or to complain to your local data protection authority.

If you use an app through your employer's monday account, your employer may be the party responsible for your data in monday. We may need to refer your request to them.

10. Children

Our website and apps are intended for business use and are not directed at children. We do not knowingly collect information from children.

11. Changes to this policy

If this policy changes, the updated version will be published on this page with a new effective date. Significant changes will be made clear at the top of the page.

12. Contact

Questions about this policy or about your data: support@nichospt.net.