Privacy Policy
Update Date: 9-23-2025
This Privacy Policy explains how Board Box Inc ("Board Box," "we," "us") collects, uses, and shares information about individuals who interact with our websites and services (collectively, the "Service"). For terms governing use of the Service, see /legal/terms. If you use the Service under a contract with a Customer, that Customer controls the Personal Information it submits to the Service, and we process it as a service provider/processor. This Policy covers our role as a business/controller for our own sites and operations and describes our processing as a service provider/processor at a high level.
Information we collect
Account and contact information: name, email address, organization, role.
Usage and device information: log files, IP address, browser type, pages viewed, date/time, and similar data.
Communications: content of messages you send to us (for example, support requests).
Customer-submitted data: information that Customers and their users upload to the Service. We process this on behalf of the Customer under our DPA.
Cookies and similar technologies: we use cookies to provide and improve the Service. You can control cookies through your browser settings.
How we use information
Provide, operate, maintain, and improve the Service.
Communicate with you about the Service, including support and administrative messages.
Secure the Service, prevent abuse, and enforce our terms and policies.
Analyze usage to develop new features and improve performance.
Comply with legal obligations.
How we share information
Service providers and subprocessors that perform services for us, under contracts that restrict their use of data.
Business transfers, such as a merger, acquisition, or asset sale.
Legal reasons, such as to comply with law, a subpoena, or a lawful request, or to protect rights, safety, and security.
No sale or sharing of Personal Information
We do not sell or share Personal Information as those terms are defined by the California Consumer Privacy Act (as amended by the CPRA).
Your rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your Personal Information, and to object to or restrict certain processing. To exercise these rights, contact privacy@boardbox.ai. If you are an end user of a Customer, please direct your request to that Customer.
Data retention
We retain Personal Information for as long as necessary to provide the Service and for other legitimate purposes such as complying with legal obligations, resolving disputes, and enforcing agreements.
Security
We implement technical and organizational measures described at /legal/security to protect Personal Information.
International data transfers
If we transfer Personal Information internationally, we do so under appropriate safeguards such as Standard Contractual Clauses where applicable.
Children
The Service is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13.
Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you by posting the updated Policy and changing the "Last Updated" date. Your continued use of the Service means you accept the changes.
Contact
privacy@boardbox.ai (primary)
legal@boardbox.ai (back-up)