Last updated: June 2026
This policy explains what Boardara™ collects, how we use it, and the choices you have. We treat your company’s governance, compensation, and cap-table data as highly confidential.
(a) Account data — your name, email, and a securely hashed password and recovery code. (b) Workspace content — the company, candidate, compensation, cap-table, and board information you enter or upload. (c) Usage data — basic logs needed to operate the Service, including AI-generation counts used to enforce fair-use limits.
We use your data only to provide and improve the Service: to run analyses, generate documents, save your history, secure your account, and enforce usage limits. We do not sell your data and we do not use one workspace’s confidential data to benefit another, except as anonymized, aggregated benchmarks that cannot identify you.
To generate analyses and drafts, relevant inputs are sent to our AI provider (Anthropic) for processing and returned to you. We send only what is needed to produce the requested output. We do not use your content to train third-party models.
Workspace data is stored in a managed PostgreSQL database (Neon). We apply access controls so that each workspace’s data is isolated and accessible only to its members.
We share data only with service providers that help us operate the Service (e.g. hosting, database, AI, and—if you enable it—payment and email providers), under confidentiality obligations, or where required by law. We do not share your content for advertising.
Passwords and recovery codes are stored hashed (never in plain text); sessions use signed, http-only cookies; and the app is served over HTTPS in production. No system is perfectly secure, but we work to protect your data and ask you to keep your credentials safe.
We keep your data while your workspace is active and for a reasonable period afterwards, then delete it. You may request access to, correction of, or deletion of your data by contacting us. Removing a workspace removes its associated content.
Your data may be processed in countries other than yours by our providers, with appropriate safeguards. The Service is not intended for anyone under 18.
We may update this policy; material changes will be notified in-app. Questions or requests: ashik@upcapital.ca.
This document is a plain-language template provided for convenience and is not legal advice. Have it reviewed and adapted by qualified counsel before relying on it for your business.