Privacy Policy — Briefboard

This Privacy Policy explains how Briefboard collects, uses and protects your personal data when you use our Service, and the rights you have under the General Data Protection Regulation (GDPR).

1. Who we are (data controller)

Briefboard is the data controller responsible for your personal data processed through the Service. For any privacy-related request, you can reach us at privacy@briefboard.io.

2. Data we collect

We collect the following categories of personal data:

Account data: your name, email address and an encrypted password.
Content data: projects, milestones, tasks, comments and any other content you create in the Service.
Usage and log data: actions you take, pages you view, and timestamps.
Technical data: IP address, browser type, device and approximate location derived from your IP.
Payment data: billing details are handled directly by our payment processor; we only receive limited transaction information, never your full card number.

3. How and why we use your data (purposes and legal bases)

We process your personal data on the following legal bases under Article 6 of the GDPR:

To provide and operate the Service and your account — performance of our contract with you.
To process payments and manage subscriptions — performance of a contract and compliance with a legal obligation.
To secure the Service, prevent abuse and improve our features — our legitimate interests.
To send service and security communications — performance of a contract and our legitimate interests.
To send marketing communications, where applicable — your consent, which you can withdraw at any time.
To comply with legal and accounting obligations — compliance with a legal obligation.

4. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to secure the Service. With your consent, we also use Google Analytics to measure how our website is used; you can change your choice at any time via the \"Cookies\" link in the footer.

5. Sharing your data (processors and recipients)

We never sell your personal data. We share it only with trusted service providers acting as processors on our behalf, under appropriate data protection agreements, including:

cloud hosting and infrastructure providers;
our payment processor, for billing and subscription management;
email and notification delivery providers;
error monitoring and performance tooling, to keep the Service reliable.

6. International data transfers

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

7. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. After you delete your account, we remove or anonymise your data within a reasonable period, except where we must retain it to meet legal, accounting or dispute-resolution obligations.

8. Your rights under the GDPR

Subject to applicable conditions, you have the right to:

access the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure of your data ("right to be forgotten");
request restriction of, or object to, certain processing;
receive your data in a portable, machine-readable format;
withdraw your consent at any time, where processing is based on consent;
lodge a complaint with a supervisory authority — in Belgium, the Data Protection Authority (www.dataprotectionauthority.be).

9. Data security

We implement appropriate technical and organisational measures — including encryption in transit, hashed passwords and access controls — to protect your personal data against loss, misuse and unauthorized access. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

10. Children's privacy

Briefboard is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date and, where appropriate, notify you.

12. Contact us

For any question about this Policy or to exercise your rights, contact us at privacy@briefboard.io.