Privacy Policy
Whereboard (“we”, “us”) provides a visual team presence service. This policy describes how we handle information when you use our hosted product, marketing site, or sign up for a workspace.
What we collect
- Account & profile: display name, optional nickname, work email, avatar choices (initials, shape, color, uploaded image), and board placement you set yourself.
- Sign-in: if you use Google or another OIDC provider, we receive identity fields your administrator allows (typically email and name). Private sign-in links use hashed codes — we do not store plaintext links.
- Billing & leads: name, email, company, chosen team subdomain, and payment status when you checkout or contact us. Card payments are processed by Stripe; we do not store full card numbers.
- Technical: standard server logs (IP, user agent, timestamps) and session cookies needed to keep you signed in.
What we do not do
- No GPS or device location tracking.
- No hidden monitoring — people update their own status on the board.
- We do not sell personal information.
How we use information
- Operate your team workspace and sync presence in real time.
- Send transactional email (e.g. workspace ready, sign-in help) via our email provider.
- Process subscriptions and respond to support requests.
- Prevent abuse (e.g. reserved or offensive team names).
Where data is stored
Hosted teams: application data (profiles, boards, uploads) is stored on infrastructure we operate for
www.whereboard.xyz, currently SQLite database and file uploads on our servers unless otherwise agreed in writing.
Self-hosted deployments keep all data on your own servers — this policy applies mainly to our hosted offering.
Retention & deletion
We keep workspace data while your subscription is active. If a workspace is suspended or cancelled, we may retain data for a reasonable period for backup, billing, and legal obligations, then delete it. Contact us to request deletion of lead or contact form data.
Subprocessors
We use trusted providers to run the service, including:
- Stripe — payments
- Resend (or configured SMTP) — transactional email
- Infrastructure host — application hosting and TLS
Your choices
- Update your profile or avatar anytime from your dashboard.
- Team administrators can disable users or revoke sign-in links.
- Contact us via the marketing contact form for access or deletion requests.
Children
Whereboard is a workplace tool not directed at children under 16.
Changes
We may update this policy; the date at the top will change. Continued use after changes means you accept the updated policy.
Contact
Questions: use the contact form on our website or email the address listed on your order confirmation.
This document is operational guidance, not legal advice. Consult counsel for your jurisdiction if required.