Last updated: 2027 18 08
Privacy Policy
This policy explains what data SecondBoard.AI collects, how it is processed — including by our AI providers — and the choices and rights you have.
1. Who we are
SecondBoard.AI is an AI board meeting service operated by SecondBoard AI ("we", "us"). This policy explains what personal data we collect, why, and what rights you have. For any privacy question or request, contact giorgikeburia@gmail.com. Registered entity and postal address: I/E Giorgi Keburia, 19 Petre Kavtaradze St, Tbilisi, Georgia.
2. Data we collect
- Account data — name, email address, and login credentials.
- Payment data — handled by Creem, our merchant of record. We never see or store your full card details; we receive only subscription status and limited billing metadata.
- Content you provide — company descriptions, uploaded documents, chat messages, meeting inputs, and emails sent to your agents' inboxes.
- Usage data and cookies — device and browser information, IP address, pages viewed, and product events used to keep the service secure and improve it.
3. How we use your data
- Providing, operating, and securing the Service and your account.
- Generating AI board responses, debates, minutes, and research.
- Memory features that persist your business context, prior decisions, and commitments between sessions.
- Service emails such as billing notices, payment reminders, and important updates.
- Analytics to understand feature usage and improve the product.
4. AI processing
To generate board responses, your content is processed by third-party AI providers: Anthropic (large language models) and Voyage AI (embeddings used for memory and retrieval).
We do not sell personal data. Our AI providers process data via their APIs under their business terms and do not use API data to train their models.
5. Subprocessors
- Anthropic — language model processing
- Voyage AI — embeddings for memory and retrieval
- Creem — payments and merchant of record
- DigitalOcean — hosting and infrastructure
6. Data retention
We retain your content and account data for as long as your account is active, so that board memory continues to work across sessions. You can request deletion of specific content or your entire account at any time; we delete or anonymize data within a reasonable period, except where we must retain records for legal, tax, or accounting purposes. Backups are purged on a rolling schedule.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, export (data portability), restrict, or object to processing of your personal data, and to withdraw consent. To exercise any of these, email giorgikeburia@gmail.com from your account email. We respond within 30 days and may ask for verification. You also have the right to lodge a complaint with your local data protection authority.
8. Security
We use encryption in transit (TLS) and encryption at rest for stored data, role-based access controls, least-privilege access for staff, and audit logging. No system is perfectly secure, but we work to protect your data and will notify affected users of any breach as required by law.
10. Children
The Service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service or our subprocessors change. Material changes will be communicated by email or in-app notice before taking effect, and the date below will be updated.
12. Effective date
This Privacy Policy is effective as of 2027 18 08.