Who we are
Boardpace is a project management service for teams and solo makers.
Boardpace is the data controller for the personal data described in this policy. You can contact us about privacy at info@boardpace.com.
Data we collect
- Account data: name, email address, login method and security settings such as two-factor authentication.
- Workspace data: workspaces, members, roles, skills and invitations you create or receive.
- Content: projects, tasks, comments, labels, due dates and activity history you add to Boardpace.
- Billing data: plan, seats and subscription status. Card details are handled by our payment provider, Stripe, and are never stored by us.
- Integration data: if a workspace connects Discord, the server name, channels, roles and a log of delivered notifications.
- Support data: messages you send us through the support form.
- Technical data: basic logs and usage events needed to operate, secure and improve the service.
Why we use it and our legal basis
- To provide the service and your account (performance of a contract, GDPR art. 6(1)(b)).
- To process subscriptions, invoices and payments (contract and legal obligation, art. 6(1)(b) and (c)).
- To send service emails such as invitations, verification codes and security notices (contract).
- To keep Boardpace secure, prevent abuse and fix errors (legitimate interest, art. 6(1)(f)).
- To improve the product through aggregated usage insights (legitimate interest).
- To meet accounting and other legal requirements (legal obligation, art. 6(1)(c)).
International transfers
Some processors may process data outside the EU/EEA. Where this happens we rely on an adequacy decision, such as the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses with appropriate supplementary measures.
How long we keep data
We keep account and workspace data for as long as your account or workspace is active. When you delete content or your account, we delete or anonymise it within 30 days, unless we must keep it longer by law, for example bookkeeping records which are kept for the period required by applicable accounting law.
Security
We protect data with encryption in transit, access controls that isolate workspaces and projects, optional two-factor authentication and restricted internal access. No system is perfectly secure, but we work continuously to protect your information.
Your rights
Under the GDPR you have the right to:
To exercise your rights, contact info@boardpace.com. You may also lodge a complaint with your local data protection authority, in Denmark Datatilsynet (datatilsynet.dk).
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased.
- Restrict or object to certain processing, including processing based on legitimate interest.
- Receive your data in a portable format.
- Withdraw consent at any time where processing is based on consent.
Changes to this policy
We may update this policy as Boardpace evolves. We will post the new version here and notify you of material changes by email or in the app.