Privacy Policy

Last updated 3 September 2026

Boardium gives a company owner a standing board of advisors. To do that it has to hold what you tell the board and what you hand it, which is often the most sensitive material a small business has: revenue, payroll, a bank statement, a dispute with a supplier. This page says exactly what is kept, who else sees it, and how to get rid of it.

What we collect

Information you give us

• Your account. Your name, email address, the name of your business, the trade it is in, and your timezone.
• What you ask the board. Questions, agenda items, the meetings that result, the positions each board member took, and the commitments recorded against them.
• Files you upload. Financial statements, photographs, PDFs and anything else you hand the board, along with the figures read out of them.

Information from a sign-in provider

If you sign in with Google, Apple or Facebook, we receive a stable identifier for you from that provider, plus your name and email address where the provider releases them. We do not receive your password, your friends, your contacts, your posts, or anything else on that account. We request the minimum each provider offers: your public profile and your email address.

Information collected automatically

• A session cookie, so you stay signed in for 30 days.
• Standard web server logs, which include your IP address, the pages requested, and your browser's user agent.

Payment information

Card details never reach Boardium. Payment is handled entirely by Stripe, and what we hold is a Stripe customer reference, your subscription status, and the dates your trial and billing period end.

How your information is used

• To run the board: to prepare an agenda, hold a meeting, and follow up on what was committed.
• To read the documents you upload, so the board can answer using your actual numbers.
• To sign you in and keep your session.
• To take payment and manage your subscription.
• To send you transactional email: address confirmation, password resets, and notices about your account.

Your content is not used to train any AI model. It is not sold. It is not shared with other Boardium customers, and no board can see another company's material.

Artificial intelligence, stated plainly

The board members are AI personas, not people. To produce their answers, the content of your questions, your meeting history and the documents you upload is sent to Anthropic, which operates the underlying models. Anthropic processes that material on our instructions in order to return an answer.

None of the board members is a licensed accountant, lawyer, broker, insurance agent or financial advisor, and what they produce is not professional advice.

Who else sees your information

Who	What they receive	Why
Anthropic	Your questions, meeting history and uploaded document content	To generate the board's answers
Stripe	Your name, email address and payment details	To take payment
SMTP2GO	Your email address and the message	To deliver transactional email
Google, Apple, Meta	Only what is exchanged when you choose to sign in with them	To sign you in

We do not sell personal information and we do not share it for advertising. Beyond the providers above, information is disclosed only where the law requires it, or where it is necessary to establish or defend a legal claim.

Government and law enforcement requests

Occasionally a government, a court or a law enforcement agency asks a company to hand over a customer's data. Your board holds your financial position, so it is worth saying in advance how such a request would be handled rather than working it out under pressure.

1. We check that it is lawful. Every request is reviewed before anything is produced: whether the body making it has authority, whether the instrument is valid, and whether it actually reaches the data being asked for. A request that arrives by email without legal process is not a legal request.
2. We push back when it is wrong. A request that appears unlawful, overbroad, or that asks for more than the matter needs is challenged or narrowed, with counsel where the situation warrants it.
3. We give the minimum. Where a request is valid we produce only the specific records it covers. We do not hand over an account wholesale because that is more convenient than reading the order.
4. We write it down. Each request is recorded: who asked, what was sought, what was produced or refused, the reasoning, and who decided.
5. We tell you where we lawfully can. If your data is requested you will be notified, unless we are legally prohibited from doing so or there is a genuine emergency involving a risk to someone's life.

Nothing here is a promise to resist a valid court order. It is a commitment that one will be read, tested and answered narrowly rather than treated as a formality.

Where it is held

Boardium's servers are in the United States. Uploaded documents are stored on that server, outside the published web folder, in a directory that is not reachable from the internet. Files are served only to a signed-in member of the business that uploaded them.

How long it is kept

• While your account is open, your content is kept so the board can refer back to it. That memory is the product; a board that forgets last quarter is not a board.
• After you delete your account, your business record, meetings, figures and uploaded files are deleted within 30 days.
• Billing records are kept for as long as tax and accounting law requires, typically seven years, and are held by Stripe as well as by us.
• Server logs are kept for 90 days.

Your choices

• See it. Everything the board holds about you is visible in the application: the File Cabinet lists every document, and The Numbers lists every figure.
• Correct it. Company details can be edited in Settings, and a figure the board has wrong can be settled from The Numbers.
• Delete it. See how to delete your data.
• Disconnect a sign-in provider. Removing Boardium from your Google, Apple or Facebook account stops that provider being used to sign in. It does not delete your Boardium account, which has to be requested separately.

Depending on where you live you may have further rights over your personal information, including access, correction, deletion, and the right to complain to a regulator. Write to privacy@boardium.co and we will answer within 30 days.

Security

The site is served over HTTPS. Passwords are stored hashed, never in readable form. Uploaded documents sit outside the web root and are served only to the business that owns them. No system is perfectly secure, and we do not claim otherwise.

Children

Boardium is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes

If this policy changes materially, the date at the top changes and we will email account holders before the change takes effect.