Privacy Policy

Account data (name, email, profile photo) provided by your sign-in provider; the content you create (boards, cards, votes, comments, survey answers); and basic technical logs (IP address, browser type) for security and reliability.

Solely to operate and improve Retroboard: syncing your boards in realtime, showing your name on your cards, sending invites you request, and keeping the service secure. We do not sell your data or use it for advertising.

Authentication is handled by Google Firebase Authentication. All application data is stored in our PostgreSQL database hosted on managed cloud infrastructure. Data is encrypted in transit (TLS) and at rest.

Board content is visible to people you share a board with (and to signed-in visitors for public boards). We share data with subprocessors only as needed to run the service — see our DPA for the current list.

Content is retained until you delete it. Deleting a board permanently removes its cards, votes, comments and surveys. You may request full account deletion at privacy@retroboard.org and we will complete it within 30 days.

Depending on your jurisdiction (GDPR, CCPA and similar), you may have rights to access, correct, export or delete your personal data. Contact privacy@retroboard.org to exercise them.