Privacy Policy

Information We Collect

We collect:

• Account and profile information you provide
• Payment data processed via Stripe
• Board member and organization data you enter into the app
• Usage logs and device information
• Cookies and similar tracking technologies

How We Use Your Information

We use your information to:

• Operate and improve Board Manager
• Process payments and manage subscriptions
• Provide customer support
• Prevent fraud and ensure security
• Comply with legal obligations

We may send service-related communications. You can opt out of marketing emails at any time.

Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate Board Manager, including Supabase (database), Vercel (hosting), Stripe (payments), Resend (email), and Twilio (SMS), and with Anthropic when you connect Claude, as described below. All processors are bound by contractual data protection agreements.

Claude Connector

Coordinators can connect Claude, Anthropic's AI assistant, to their Board Manager account. Claude can then read and change their organization's board data through the connector, only with that coordinator's permissions and only after they approve the connection.

• What we receive: only what Claude passes to a connector tool, such as the name of a member to add or the text of minutes to save. We don't receive the rest of the conversation.
• What we log: for each tool call, the tool's name, the organization, the coordinator, the connecting app, the time, whether it worked, and our own error message if it didn't. We never log what was asked or what came back. These records are kept 12 months, like our other usage logs.
• What Claude can't do: send email or texts, delete data, or reach another organization's data.
• Sharing: data returned to Claude is processed by Anthropic under its own privacy policy. We don't share it with anyone else.
• Stopping it: disconnect Board Manager in Claude's connector settings at any time. Questions: info@nonprofitboardmanager.com.

Data Retention

We retain data as follows:

• Account data: 90 days after account deletion
• Usage logs: 12 months
• Financial records: 7 years (legal requirement)
• Support communications: 3 years

Security

We protect your data with TLS encryption, row-level database security, and access controls. No system is perfectly secure; please use a strong, unique password for your email account.

Your Rights

You may request access to, correction of, deletion of, or a portable copy of your personal data. To exercise these rights, email hello@upspire.studio.

California Residents (CCPA/CPRA)

California residents have the right to know, delete, and correct their personal information, and to opt out of data sales. We do not sell personal data.

Children

Board Manager is not directed to children under 13. If we become aware of data collected from a child under 13, we will delete it promptly.

Contact

Privacy questions? Email hello@upspire.studio.