Privacy policy
Effective October 26, 2026
boardum is a task board for projects you share with people you choose. This page explains what boardum collects, why, who can see it, and how to have it deleted. Questions go to support@boardum.io.
What boardum collects
- From Google, when you sign in: your name, email address, profile photo and Google account ID. boardum asks Google only for basic sign-in information (the openid, email and profile scopes). It never asks for your Gmail, Drive, Calendar, contacts or any other Google data.
- What you put into boardum: projects, sections, tasks and their details (descriptions, due dates, priorities, colors, custom fields, subtasks), comments, files you attach, and the email addresses you invite to a project.
- To keep you signed in: a session record with the time, your IP address and your browser's user agent, plus the sign-in tokens Google returns.
When you import a project from another app, the file is read in your browser; only the resulting tasks are sent to boardum, never the file itself.
How it's used
Only to run boardum: to sign you in, show your projects to you and the people you share them with, put your name on your comments, and let teammates assign tasks to you. boardum has no ads, doesn't sell or rent your information, doesn't build profiles of you, and doesn't use your content to train AI models.
boardum's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see it
- People in your projects see your name, email and photo in the member list, plus everything in those projects, including your comments and files. Projects are private to their members.
- Service providers that run boardum and store its data in the United States: Vercel (hosting and file storage) and Neon (the database). Google provides sign-in. They process data only to provide those services.
- Others, only if the law requires it, for example in response to a valid legal order.
Cookies and storage in your browser
boardum sets only the cookies sign-in needs: a session cookie, a short-lived copy of your session so pages load quickly, and a temporary cookie while Google sign-in is in progress. Your light or dark theme choice is kept in your browser's local storage. There are no analytics or advertising cookies.
Keeping and deleting your data
Your information is kept while you use boardum. You can delete tasks, comments and files at any time, and a project's owner can delete the whole project, which removes its tasks, comments and files. Sessions expire on their own. To get a copy of your data, correct it, or delete your account and everything tied to it, email support@boardum.io.
Security
boardum is served only over HTTPS. Attached files sit in private storage and open through links that expire after a few hours, and every request is checked against your project memberships.
Children
boardum isn't meant for children under 13 and doesn't knowingly collect their information.
Changes
If this policy changes, the new version will be posted here with a new effective date.