Privacy Policy

Who we are

Co-boards is a simple shared board that helps groups, small businesses and personal projects keep track of who's doing what. This policy explains what information we hold about you, why, and what you can do about it. Co-boards is run under the trading name Co-boards.org, which is responsible for your information (the "data controller"). If you have any questions, email admin.coboards@gmail.com.

What we collect and why

• Your email address — to create your account, log you in, and reply to you about the service. Why we're allowed to: it's needed to provide the service you signed up for (our contract with you).
• Your name — captured when you accept an invitation and can be changed later on the Manage account page. Why: so colleagues can tell who is who. Why we're allowed to: it's needed to provide the service you signed up for (our contract with you).
• Your password — kept in a scrambled ("hashed") form by our login provider so nobody, including us, can read it. Why: to keep your account secure.
• Your account membership and role — which accounts you belong to and whether you are a Lead or a Member. Why: to control what you can see and change.
• The information you type in — the boards you set up, the items on them, and the names you give to columns and rows. Why: this is the service. Co-boards isn't designed for sensitive personal information — health details, information about children, or financial or identity numbers. Please keep items practical rather than personal. If you add details about other people, you're responsible for having a good reason to hold them.
• A one-way scrambled version of your device's IP address — only when you use the "Request an account" form. Why: to stop spam and abuse of that form.
• Essential browser storage — your browser keeps your sign-in, and which account you last looked at, so the app works as you move around it. Why: the app can't work without it. Nothing is used for tracking.

What we do NOT collect

We do not take payment details (Co-boards doesn't process payments). We don't send marketing emails. We don't use analytics, advertising, or tracking cookies.

How long we keep it

• Your account and the information you enter: kept while your account is open. Removed within one month at the latest of a request to the administrator to remove your login and personal data.
• The scrambled IP logs from the request form: kept for up to 90 days, then deleted.
• Copies may briefly remain in our providers' routine backups before being overwritten.

The companies that help us run Co-boards (and where your data sits)

We use a small number of trusted suppliers who only handle your data on our instructions:

• Supabase — stores your account, login and the information you enter. Region: the database is hosted in the EU, in Frankfurt, Germany.
• Lovable — builds and hosts the app itself, and provides its database and login service.
• Lovable Cloud Emails — sends sign-in, invitation and password-reset emails, via Mailgun in the EU region; it handles the email address involved.
• Resend — sends service notifications and account-request emails; it handles the email addresses involved.

Some suppliers may process data outside the UK. Where they do, they rely on the UK/EU- approved safeguards for international transfers.

Your rights

You can ask us to: see the information we hold about you; correct it; get a copy to take elsewhere; delete it; or limit/object to how we use it. Inside the app (Account menu → Manage account) you can download your own data and update your own name. To have your login and personal data removed, contact the administrator, who will action it. For anything else, email admin.coboards@gmail.com and we'll respond within one month, free of charge. You can also complain to the UK's Information Commissioner's Office at ico.org.uk (or your local data protection authority if you're in the EU). We'd appreciate the chance to sort it out first.

Children

Co-boards accounts are for adults (18 and over). Groups that involve children — clubs, schools, families — can use it, but please don't record information about children on your boards.

Changes

If we change this policy, we'll update the date at the top and, for important changes, let you know.

Contact

Co-boards.org · admin.coboards@gmail.com