This Privacy Policy explains how NonprofitBOD ("we," "us") collects, uses, and shares information when you use nonprofitbod.com and our board governance service (the "service"). By using the service, you agree to this policy.
1. Information we collect
- Account information — your email address, name, and profile photo if you add one.
- Board content — the governance data you and your board create, such as organizations, members, meetings, agendas, minutes, motions, votes, tasks, compliance records, policies, documents, and conflict-of-interest disclosures.
- Billing information — if you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not store full card numbers.
- Usage and device data — pages viewed, actions taken, approximate location, browser and device information, collected through analytics as described below.
2. Cookies and analytics
We use cookies and similar technologies for essential functionality (such as keeping you signed in) and, with your consent, for analytics and advertising measurement. When you first visit, we ask for your consent to analytics and advertising cookies. Until you accept, Google Analytics runs in a limited, cookieless mode and no advertising or third-party pixels are loaded.
With consent, we may use: Google Analytics 4 and Google Ads, the Meta (Facebook/Instagram) Pixel and Conversions API, and the Microsoft (Bing) Universal Event Tracking tag. These help us understand traffic and measure the effectiveness of our marketing. You can withdraw consent by clearing the site's cookies/local storage in your browser.
3. How we use information
- To provide, secure, and improve the service.
- To send transactional messages such as sign-in links, invitations, reminders, and governance notices.
- To process payments and manage subscriptions.
- To measure and improve our marketing, with your consent.
- To comply with legal obligations and enforce our Terms.
4. How information is shared
We do not sell your personal information. We share information with service providers who process it on our behalf, including:
- Stripe — payment processing.
- Email delivery — to send transactional email from your configured mail provider.
- Anthropic — to power optional AI features (for example, drafting minutes from your notes). Content sent for AI processing is limited to what the feature requires.
- Unsplash — to source cover images for published articles.
- Google, Meta, and Microsoft — analytics and advertising measurement, only with your consent.
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a merger or acquisition.
5. Your board's data
Board content belongs to your organization. Board administrators control who can access it within the service. You can export your board's data at any time from within the service, and you can request deletion of your account and associated content.
6. Data retention
We retain your information for as long as your account is active and as needed to provide the service. After account deletion, we delete or de-identify your information within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. You can also access and export much of your data directly in the service.
8. Security
We protect your information with measures including encryption in transit, encryption at rest for sensitive secrets, secure passwordless authentication, security response headers, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.
9. Data location
The service is operated from the United States, and your information is processed there. If you access the service from outside the United States, you consent to processing in the United States.
10. Children
The service is not directed to children under 18, and we do not knowingly collect their personal information.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. The "Last updated" date above reflects the latest version.
12. Contact
Questions about this policy can be sent to [email protected].
See also our Terms of Service.