Boardshaper – Privacy Policy

Introduction

The Boardshaper privacy policy balances the need to be transparent with the need to avoid providing information that may assist anyone from gaining access to the Boardshaper Infrastructure, the technology or the data stored within the Boardshaper Solution. We therefore reference the [Infrastructure Supplier], [Development Team] and [Partners] to avoid naming those organizations.

Accessing Customer Data

Boardshaper does not sell, rent or lease our customer information to third parties. Boardshaper considers your use of the service, including the content of your communications, to be private.

You are responsible and liable for any activity by any person who uses the service through your user name and password. Additional users which you add to the system are responsible for maintaining the security of your account and password. You agree to immediately notify Boardshaper of any unauthorized use of the service or any other breach of security known or suspected by you.

To the maximum extent permitted by law, Boardshaper reserves the right to monitor your communications and may disclose information about you, including contents of communications, if it is necessary to conform to legal requirements or respond to legal process.

By subscribing to the service and unless you expressly state in writing that you withhold permission, you hereby acknowledge, agree and authorize Boardshaper to present you by name, logo, URL and description, as a user of the service.

Helpdesk

Boardshaper and its partners reserve the right to access your account if required to help understand and resolve a support call.

Website Enquiries

Boardshaper and its partner may provide customer inquiry forms on their websites that customers are invited to complete should they wish to initiate the process of setting up a new Boardshaper Account. The data supplied by the customer via these forms is automatically transferred to a secure database.

Boardshaper and its partners will access this information and reserve the right to contact you for the purposes of setting up a new customer account on their behalf.

Information provided by customers is not shared outside of Boardshaper except in the case where Boardshaper is conducting a joint promotion with a partner. In such cases, Boardshaper and the Partner reserves the right to access and share customer data collected whilst conducting a promotion.

Infrastructure

The Boardshaper Cloud Infrastructure is hosted by a leading Cloud Hosting Producers.

Access to the Infrastructure is strictly controlled via security groups and a series of strictly controlled sub networks (subnets). The Security Groups control a list of Ports that controls the types of traffic that can flow in either direction. Individual Machines are permitted access to each Port via their IP address. In addition to these restrictions, the servers are password protected.

Access to the Boardshaper Cloud Infrastructure is restricted to a limited number of resources from the technical team for the sole purposes of monitoring and carrying out maintenance work on and upgrades to the infrastructure.

Database Architecture

The tables that controls access to the Boardshaper App is separate from the databases that controls access to the customers data. There is a complex set of tables that would need to be combined to identify where data is stored for an individual customer. The Boardshaper solution uses a multi-tenant database architecture with a limit to the number of customers stored in each database.

Within the customer database, sensitive data is limited to small number of tables with other transaction tables (e.g. Appointments, Reminders) referencing only a unique number that links it to the customer.

Development Resources

Boardshaper has signed legal agreements with each individual working on the Project.