Privacy Policy

Overview

RecapBoard ("RecapBoard," "we," "us") is a collaborative retrospective tool for teams. We think the feedback your team shares is sensitive, and we treat it that way.

This Privacy Policy describes how we handle information across our website, app, and related services (together, the "Services").

Information we collect

We collect what we need to run the Services:

• Account information — your name and email address when you sign up or are invited, plus a profile avatar you can customize.
• Content you create — the boards, columns, cards, votes, pulse responses, and mentions you and your team add.
• Guest participation — if you join a board as a guest, we store a randomly generated identity and the display name you choose — not your real name or email.
• Technical data — basic data needed to run and secure the Services, such as your IP address, browser type (user agent), and server logs.
• Sign-in with Google — if you choose Google sign-in, we receive basic account identifiers from Google to create and access your account.

How we use information

We use the information we collect to provide, maintain, secure, and improve the Services — including operating your boards, sending account and service emails (such as email verification and password resets), and, when you turn them on, generating the card-merge summaries and suggestions you request.

We do not sell your personal information, and we do not use the content of your boards to train our own AI models.

AI features

Some optional features — theme detection, card-merge summaries, and suggestions — are turned on per board. When you use them, the relevant board content is sent to our third-party AI provider to generate the output you asked for, and is handled under that provider's terms. We don't use your content to train our own models.

AI-generated content is clearly marked in the product, so it's never confused with feedback written by a person.

Sharing & service providers

We share information only in limited circumstances:

• Within your boards — content is visible to the members and guests of the boards and stacks you belong to.
• Service providers — we rely on a small set of vendors to run the Services — for example hosting and database, transactional email, our AI provider, and bot/abuse prevention — and they may process information on our behalf.
• Legal reasons — when required by law, or to protect the rights and safety of our users and others.
• Business transfer — if the Services are ever transferred to another operator, your information may transfer with them.

Data retention & deletion

We keep your information while your account is active. Deleting a board removes its content — cards, votes, and pulse responses — from the Services. Cards you delete and accounts that are never verified are generally cleaned up automatically over time.

You can delete your account at any time from Settings → Account. To confirm the request is really you, we email you a confirmation link, and deletion completes only after you open it. Deleting your account permanently removes your profile and the boards and stacks you own — including their cards, votes, and pulse responses, and any cards teammates added to those boards; cards you wrote on other people's boards are kept but anonymized. We may keep limited information where the law requires it.

Security

We protect your data with encryption in transit (HTTPS/TLS), scoped access controls, and rate limiting on sensitive endpoints. Passwords are hashed and checked against known-breach databases, and we use bot-prevention checks on sign-up and sign-in.

No method of transmission or storage is perfectly secure, but we work to safeguard your information and will provide breach notifications where required.

Cookies

We use a small number of cookies to keep you signed in, remember a guest identity across boards, and store your preferences (such as light or dark theme). We don't use advertising or third-party tracking cookies. You can control cookies through your browser; disabling some may affect how the Services work.

Your choices

You can review and update your profile in your account settings, delete boards and cards you have access to, and delete your account at any time from Settings → Account.

Children's privacy

The Services are intended for teams and workplaces and are not directed to children under 16. We don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "last updated" date above and, where appropriate, notify you in the product. Your continued use of the Services after a change means you accept the updated policy.