Privacy policy

Google account data

Sign-in uses Google. The app requests your name, email address, and profile picture. It does not request Gmail, Drive, Calendar, Contacts, or any other Google product.

That information is used only to:

• confirm it is you
• decide whether your email is allowed to use the app
• show your name and picture in the header

Google also issues sign-in tokens. Those tokens are stored so your session can continue. They are not used to read anything else in your Google account.

Google user data is not sold, not used for advertising, and not used to train models. It is not shared except with the companies that host this app, and only so the app can run.

What else we store

• Boards you create: names, layout, text, colors, and positions
• Images you upload, including PNG, JPEG, WebP, GIF, SVG, and HEIC
• Email addresses an admin adds on the People page, and which admin added them
• Session details: a sign-in token, when it expires, your IP address, and your browser

Boards and images are private to the account that created them. Another signed-in person cannot open them, including an admin.

Who handles it

The app is hosted on Vercel. The database is Neon. Uploaded files are stored with Vercel Blob. Google handles sign-in. These providers process the data only to provide that infrastructure.

How long we keep it

Account, boards, and images are kept while you use the app.

Removing an email on the People page blocks the next sign-in. It does not delete that person's boards or images.

You can delete a board yourself. To delete an account and the files that belong to it, use the High Leverage contact form and include the Google email on the account. High Leverage will delete the account, its boards, and its uploaded images.

Children

This app is not for children under 13, and it does not knowingly collect their information.

Changes

If this policy changes, the date at the top of this page will change.

Contact

Questions about this policy go through the High Leverage contact form.