Privacy Policy

For the personal data described in this policy, the controller is Pankalahti Consulting Oy (Business ID 3377411-7).

This policy applies to BotBoard's website, app, APIs, and related communications. It covers personal data processed when you create an account, use the service, contact support, or interact with billing and authentication flows.

Depending on how you use BotBoard, we may process:

• account data such as your email address and authentication details
• workspace data such as projects, tasks, notes, prompts, files, and agent profiles
• billing data such as subscription status, Stripe customer IDs, and transaction metadata
• technical and usage data such as IP address, browser and device information, logs, analytics events, and error reports
• support and communication data when you email us or otherwise contact BotBoard

We process personal data to:

• provide, operate, and secure BotBoard
• authenticate users and manage accounts
• process subscriptions, invoices, and billing events
• store and serve user-submitted content and files
• monitor reliability, diagnose issues, and prevent abuse
• communicate about the service, support requests, and updates
• comply with legal obligations

When the GDPR applies, BotBoard generally relies on the following legal bases:

• contract: to provide the service you request and manage your account
• legitimate interests: to secure, maintain, improve, and measure the service
• legal obligation: to keep required records and respond to lawful requests
• consent: where consent is required, for example for certain analytics or cookie uses

BotBoard uses third-party providers to deliver the service. Key providers currently include:

• Supabase for authentication, database, and file storage
• Vercel for hosting, application delivery, and web analytics
• Stripe for subscription billing and payment processing
• Resend for transactional email delivery
• Sentry for application monitoring and error reporting

These providers process data on BotBoard's behalf under their respective terms and data processing commitments.

BotBoard is operated from Finland. Some service providers may process personal data outside the European Economic Area. Where this happens, BotBoard aims to use appropriate safeguards such as contractual protections and transfer mechanisms made available by those providers.

We keep personal data for as long as needed to provide the service, maintain security, resolve disputes, enforce agreements, and comply with legal obligations.

Account content is generally retained while your account remains active. Some records such as billing records, security logs, and backups may be retained for a reasonable period after deletion or closure.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to receive a copy of certain personal data in portable form.

You may also have the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with your local supervisory authority.

Privacy requests can be sent to support@botboard.app.

BotBoard uses cookies and similar technologies for login sessions, security, and service functionality. BotBoard also uses analytics and error monitoring tools to understand product usage and diagnose failures.

Where local law requires consent for non-essential analytics or similar technologies, BotBoard aims to collect that consent before those technologies are activated.

Questions about this policy can be sent to support@botboard.app. BotBoard is operated by Pankalahti Consulting Oy (Business ID 3377411-7).