How we collect, use, and protect your data. Written to be readable, not to hide behind 14,000 words of legalese.
This Privacy Policy explains how BoardHasA.name ("we", "us", "BoardHasA") handles personal information when you use our project management service, marketing site, and supporting products. By using the service you agree to the practices described here.
We collect only what we need to operate the product, never sell personal data, and let you export or delete your information at any time.
When you create an account we collect your name, work email address, organization name, and a hashed password. Single sign-on customers provide only what their identity provider releases (typically email and display name).
Boards, tasks, comments, attachments, and any other content you store on the service. This is your data — we treat it as confidential and only access it to deliver, secure, or support the product.
Standard application logs: IP address, browser type, pages visited, and timestamps. We use this to debug issues, prevent abuse, and improve performance.
Handled by our PCI-DSS compliant payment processor. We store only the last four digits of your card and the billing address on file.
We do not use your content to train AI models. We do not sell, rent, or trade personal data to third parties.
We retain your account data for as long as your subscription is active. After cancellation, content is retained in cold storage for 30 days to allow recovery, then permanently deleted. Backups are purged within 90 days.
Audit logs and billing records are retained for up to 7 years to meet tax and compliance obligations, even after account deletion.
Regardless of where you live, BoardHasA.name customers can:
To exercise any of these rights, email privacy@boardhasa.name. We respond within 30 days.
We use industry-standard safeguards — encryption in transit and at rest, scoped access controls, continuous monitoring, and regular third-party penetration testing. For full detail see our Security page.
No system is perfectly secure. If you believe an account has been compromised, contact security@boardhasa.name immediately.
BoardHasA.name is operated from data centers in the United States and the European Union. If you are located outside these regions, your data may be transferred internationally. We rely on Standard Contractual Clauses and equivalent safeguards for cross-border transfers as required under GDPR and similar frameworks.
BoardHasA.name is a business tool and is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has provided personal information, contact us and we will delete it.
We update this policy when we add features or change practices. We will post the new version here with a revised effective date. Material changes are communicated by email at least 30 days before they take effect.
Privacy questions, requests, and complaints can be sent to:
BoardHasA, Inc.
Attn: Privacy Office
1 Market Street, Suite 200
San Francisco, CA 94105, USA
privacy@boardhasa.name
EU residents may also lodge a complaint with their local supervisory authority.
Our team is happy to walk through any of these terms with you — particularly for procurement or security reviews.