This Privacy Policy explains how BoardMason ("BoardMason", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website, create an account, or use our services (together, the "Service"). By using the Service you agree to the practices described here.
1. Who we are
BoardMason is a hosted dashboard builder: connect a data source, arrange widgets on a grid, and share a live, read-only link, offered as a subscription software-as-a-service (SaaS). The data controller responsible for your personal information is BoardMason, boardmason.com. For privacy questions or to exercise your rights, contact us at contact@boardmason.com.
2. Information we collect
We collect the following categories of information:
- Account information. When you sign in with Google, we receive your name, email address, and basic profile details to create and secure your account.
- Billing information. If you purchase a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not see or store full payment card numbers; we receive limited billing data such as your name, the last four digits of your card, billing country, and subscription status.
- Usage and device data. We automatically collect log data such as IP address, browser type, pages viewed, referring pages, timestamps, and similar diagnostics to operate and secure the Service.
- Cookies. We use strictly necessary cookies to keep you signed in and to protect against fraud. See our Cookie Policy for details.
- Support communications. If you contact us, we keep your messages and contact details to respond and improve support.
- Customer Data. When you connect a data source or build a dashboard, the Service processes the content and data you provide or connect ("Customer Data"). You decide what data to connect. Where Customer Data contains personal information about third parties, you are the controller and we act as your processor (see Section 7).
3. How we use information
- To provide, operate, maintain, and secure the Service;
- To create and manage your account and organizations;
- To process payments, manage subscriptions, and send billing notices;
- To respond to your requests and provide customer support;
- To detect, prevent, and address fraud, abuse, and security incidents;
- To analyze and improve the Service and develop new features;
- To send you service, security, and transactional messages; and
- To comply with legal obligations and enforce our Terms of Service.
4. Legal bases for processing (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Performance of a contract: to provide the Service you sign up for.
- Legitimate interests: to secure, improve, and market the Service, balanced against your rights.
- Consent: where required, for example for non-essential cookies or optional marketing. You may withdraw it at any time.
- Legal obligation: to meet tax, accounting, and other legal requirements.
5. Cookies and similar technologies
We use only strictly necessary cookies to operate the Service (for example, to keep you signed in and to prevent fraud). We do not use advertising cookies. For a full description, see our Cookie Policy.
6. How we share information
We do not sell your personal information. We share it only as described below:
- Service providers (subprocessors). Trusted vendors who process data on our behalf under contract, listed below.
- Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of BoardMason, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
- With your direction. For example, when you publish a public read-only dashboard link or invite members to an organization.
Our current subprocessors are:
| Provider | Purpose | Region |
|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, and database (edge infrastructure) | Global |
| Google LLC | Sign-in (OAuth): we receive your name and email to create your account | Global |
| Stripe, Inc. | Payment processing and subscription billing | Global |
7. Customer Data and data processing
For personal data contained in the data sources and dashboards you connect, you are the controller and BoardMason is the processor. We process Customer Data only to provide the Service and on your documented instructions, and we do not use Customer Data for our own purposes. If you require a Data Processing Addendum (DPA), contact contact@boardmason.com.
8. Data retention
We keep personal information for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymize personal information within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. You can delete dashboards and disconnect sources at any time from within the product.
9. Data security
We protect your information with technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and least-privilege practices. Payment data is handled by a PCI-DSS compliant processor. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continually to protect your information.
10. International data transfers
We and our subprocessors may process information in countries other than your own. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
11. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- delete your information;
- restrict or object to certain processing;
- receive your information in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with your local data protection authority.
California residents: you have the right to know, delete, and correct personal information, and to opt out of "sales" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
To exercise any right, email contact@boardmason.com. We will verify your request and respond within the time required by law.
12. Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
13. Third-party links and services
The Service may link to or integrate third-party sites and services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.
14. Changes to this Policy
We may update this Policy from time to time. We will post the new version here with an updated "Last updated" date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect means you accept the revised Policy.
15. Contact us
For any privacy question or request, contact contact@boardmason.com or write to BoardMason, boardmason.com.