Your Privacy Matters

We use personal information to:

• Provide, maintain, and secure the Services;
• Respond to inquiries and support requests;
• Process transactions and manage billing;
• Communicate about product updates, events, or changes;
• Personalize your experience;
• Improve our tools and operations;
• Conduct analytics and market research;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with applicable laws and enforce our agreements.

If you authorize BoardLens to integrate with tools like Google Calendar or Outlook, we will access and use that data only as needed to provide the integration you requested and in accordance with your explicit permissions and the policies described here. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We may share personal information with:

• Service providers and processors assisting us with infrastructure, hosting, AI processing, analytics, payments, support, or communications, under contracts that limit their use of the information to providing services to us;
• Legal and safety recipients, where required to comply with applicable law, legal process, or government request, or to protect rights, safety, and property;
• Corporate successors, in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to appropriate confidentiality protections.

Some analytics and advertising cookies may, however, constitute a “sale” or “share” under certain state laws; where that is the case, you can exercise the “Do Not Sell or Share My Personal Information” choice described below.

We use the following categories of cookies and similar technologies:

• Strictly necessary — required for core functionality and security; always active.
• Analytics/performance — help us understand usage (for example, Google Analytics).
• Functional — remember your preferences.
• Marketing — measure and support our marketing.

Where required by law (including in the EEA and UK), non-essential cookies are set only after you consent through our cookie banner. You can change or withdraw your choices at any time through our cookie preference center, and you can manage cookies through your browser. We honor Global Privacy Control (GPC) signals as an opt-out of “sale”/“share” where applicable. For a full list of the cookies we set and to manage your choices, see our Cookie Policy.

Depending on where you live, you may have some or all of the following rights:

• Access the personal information we hold about you, and obtain a copy;
• Correct inaccurate personal information;
• Request deletion of your personal information;
• Port your data to another provider (data portability);
• Restrict or object to certain processing;
• Withdraw consent at any time (without affecting prior processing);
• Opt out of the “sale” or “sharing” of personal information and limit the use of sensitive personal information; and
• Not receive discriminatory treatment for exercising your rights.

To exercise any of these rights, contact us at contact@boardlens.ai or use the request tools on our website. We will verify your request (typically by confirming control of the email associated with your information) before acting. You may use an authorized agent to submit a request on your behalf, with proof of authorization. We will not discriminate against you for exercising your rights.

If your personal information is contained in Board Materials controlled by a BoardLens customer, please direct your request to that customer; we will assist them as their processor.

California “Shine the Light.” California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing, so this is generally not applicable, but you may contact us to confirm.

Appeals. If we deny your request, you may appeal by replying to our decision; where required by law (for example, in Virginia, Colorado, and certain other states), we will respond to your appeal within the statutory period and tell you how to contact your state attorney general.

If you are located in the EEA, UK, or Switzerland, we process your personal information only where we have a valid legal basis, including:

• Consent (for example, for marketing communications, non-essential cookies, or calendar integration);
• Contract performance (to provide you access to BoardLens);
• Legal obligations; and
• Legitimate interests (for example, to secure and improve our Services), where those interests are not overridden by your data protection rights.

Automated decision-making. We do not use your personal information to make decisions that produce legal or similarly significant effects about you solely by automated means. AI-generated outputs are decision-support only and are reviewed by people in your organization.

Right to complain. You have the right to lodge a complaint with your local data protection supervisory authority. In the EEA, you can find your authority via the European Data Protection Board; in the UK, the Information Commissioner’s Office.