Privacy Policy

Who we are

SynkBoard provides collaborative boards with text, files, and real-time features. For privacy requests, contact us at support@synkboard.com or via our contact form.

Data we collect

• Account data: email, password hash (if used), display name, optional avatar URL, notification preferences, connected sign-in methods (e.g. Google), optional WhatsApp phone number if you connect it.
• Board content: text and structure you enter in boards, board metadata (visibility, codes, share tokens), and collaboration-related records (e.g. invites).
• Files: files you upload to a board, stored with your board identifier as the storage namespace.
• Technical data: IP address, user agent, and session identifiers for security, rate limiting, diagnostics, and active session management.
• Cookies: authentication cookies (e.g. access and refresh tokens), OAuth state cookies, and private-board access cookies where applicable.

How we use data

We use data to operate the service (authentication, boards, files, real-time delivery), to communicate with you (invites, password reset, optional digests), to enforce security and rate limits, and to comply with law. We do not sell your personal information.

Processors and third parties

Depending on configuration, we may use subprocessors such as:

• Cloud database and hosting providers for storing accounts and board records
• Object storage (e.g. S3-compatible or Supabase) for uploaded files
• Redis or similar for caching, rate limiting, and realtime pub/sub
• Google for OAuth sign-in
• SMTP providers for transactional email
• Twilio for optional WhatsApp messaging

Each processor processes data only as needed to provide their service to us.

Public vs private boards

Public boards can be accessed by anyone with the link. Do not place confidential information on public boards. Private boards require approved access (account, invite, code, or token as implemented in the product).

Retention

We retain data while your account is active and as needed to operate the service. Ephemeral or time-limited boards may be removed automatically per product rules. You may delete your account in Settings; that removes your account, owned boards, and associated files as described in the product. Some logs may be retained for a limited period for security and abuse prevention.

Your rights (GDPR / UK)

If the GDPR or UK GDPR applies, you may have the right to access, rectify, erase, restrict processing, object, and data portability regarding your personal data, and to lodge a complaint with a supervisory authority. Contact us to exercise these rights. We will respond within a reasonable time.

Your rights (CCPA / CPRA)

California residents may have rights to know, delete, and opt out of certain sharing of personal information. We do not sell personal information. To submit a request, email support@synkboard.com or use the contact page.

Cookies

We use essential cookies for sign-in and security. We do not use advertising cookies on the core product. You can control cookies through your browser; disabling essential cookies may prevent sign-in from working.

International transfers

If you access the service from outside the country where our infrastructure is located, your data may be processed in other countries. We take steps designed to protect your information consistent with this policy and applicable law.

Children

SynkBoard is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

Changes

We may update this policy. We will post the new version with an updated "Last updated" date. For material changes, we may provide additional notice (e.g. email or in-product message) where appropriate.

Contact & deletion

For privacy questions or data removal requests, email support@synkboard.com or use the contact form. Account holders can delete their account from Settings.