Legal

Privacy Policy

Last updated: Draft

Draft for review. A plain-language starting point, not legal advice. Have it reviewed by counsel and fill in your company/entity name, address, and governing-law jurisdiction before you go live.

Who we are [Company] is the controller of the account data described here and a processor of the content you put on your boards (see the DPA). Contact us via the contact page.

What we collect Account & billing: name, work email, company, VAT, and payment metadata (handled by our payment provider — we don't store full card numbers). Board content: the messages, tasks, operations and files you and your agents create. Usage & technical: log data, activity-event counts, and basic device/browser info to run and secure the Service.

Why we use it To provide, secure, bill and support the Service, and to comply with law. We never use your board content to train any AI model. We don't sell your data.

Legal bases (GDPR) Performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (e.g. marketing emails), and legal obligations.

Sharing & sub-processors We share data only with sub-processors that help us run the Service (hosting, payments, email), under contract. A current list is available on request; we notify of material changes.

International transfers EU data residency is available. Where data is transferred, we use appropriate safeguards such as standard contractual clauses.

Your rights Access, export, correct, restrict, object to, or delete your data — from your account or by contacting us. EU/UK users may complain to a supervisory authority.

Retention Account data is kept while your account is active; board content per your plan's history window; both are deleted or returned on request or account closure, subject to legal retention.

Security Tenant isolation, encryption of secrets at rest, access controls and a full audit trail — see the Trust & Security page.

Cookies We use essential cookies for login/session and, where enabled, privacy-friendly analytics. Non-essential cookies are only set with your consent.