Privacy Policy

Account Information

When you create an account, we collect your name, email address, profile photo (if provided via Google or Apple sign-in), and authentication credentials. If you subscribe to a paid plan, we collect payment information through our third-party payment processor (Stripe); we do not store your full credit card number on our servers.

Business & Company Information

To make your board useful, you provide information about your business: company name, industry, team size, website, and the “brief” your board reads — which may include operational, financial, and strategic details you choose to share, whether typed directly, imported from another AI tool, or gathered through the onboarding interview. The Service also maintains a working “board memory”: a synthesized narrative of key facts, decisions, and progress drawn from your ended meetings, which is stored with your company data and used to give the board continuity between meetings.

Meeting Data

When you create and conduct meetings, we collect and store: meeting titles, agenda topics and descriptions, AI executive configurations (selected roles, models, and personality presets), chat messages and AI-generated responses, uploaded documents and their content, pinned decisions and action items, and meeting summaries and exports.

Usage Data

We automatically collect information about how you interact with the Service, including: pages visited, features used, session duration, credit consumption and token usage, AI model selections, device type, browser type, IP address, and general location (city/country level).

Cookies & Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Service. These include:

• Strictly Necessary Cookies: Authentication session cookies required for the Service to function. These cannot be disabled.
• Analytics Cookies: We use Firebase Analytics (powered by Google Analytics 4) to understand usage patterns, feature adoption, and performance. This service collects anonymized interaction data such as pages visited, features used, session duration, and general device/browser information. Firebase Analytics may set cookies (e.g., _ga, _gid) to distinguish unique users and sessions.

Analytics data is processed by Google in accordance with the Google Privacy Policy. We do not use analytics data for advertising purposes. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

• To provide, operate, and maintain the Service, including running AI-powered boardroom meetings
• To process your transactions and manage your subscription
• To send transactional emails (account verification, meeting summaries, invitations, billing confirmations)
• To monitor and analyze usage trends to improve the Service
• To detect, prevent, and address technical issues, fraud, or abuse
• To communicate with you about updates, security alerts, and support
• To enforce our Terms of Service and protect our legal rights

Elevate Boardroom uses third-party large language model (LLM) providers to power AI executive responses. When you use the Service, your meeting inputs — including agenda topics, context, chat messages, and uploaded document content — are transmitted to one or more of the following providers for processing:

• Google (Gemini) — via Google Cloud Vertex AI
• Anthropic (Claude) — via the Anthropic API
• OpenAI (GPT) — via the OpenAI API
• xAI (Grok) — via Google Cloud Vertex AI Model Garden
• Meta (Llama) — via Google Cloud Vertex AI Model Garden
• Mistral AI — via Google Cloud Vertex AI Model Garden

If you use the voice readout feature, message text is additionally sent to OpenAI or Google text-to-speech services to synthesize audio. If you use the news feature, your company's industry and location are used to build news queries; article content shown to you comes from public news sources.

We do not use your meeting data to train or fine-tune any AI models. However, third-party API providers may have their own data retention and processing policies. We recommend reviewing each provider's terms. When possible, we use API configurations that opt out of data training (e.g., zero-day retention endpoints).

Your uploaded documents are processed server-side to extract text content for AI context. Document files are stored securely in Firebase Storage and are only accessible to authorized meeting participants.

Your data is stored using Google Firebase (Firestore database and Firebase Storage) and is encrypted in transit (TLS 1.2+) and at rest. We implement industry-standard security measures including:

• Encrypted data transmission and storage
• Firebase Security Rules restricting access to authorized users only
• Server-side authentication validation on all API endpoints
• Service account credentials stored as environment variables, never in client code
• Regular security reviews and dependency auditing

While we implement robust security practices, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

• Service Providers: With third-party vendors who assist in operating the Service (e.g., Stripe for payments, Google Cloud for hosting, AI model providers for processing)
• Meeting Participants: If you invite other users to a meeting, those participants can view meeting content, including your messages and shared documents
• Legal Requirements: If required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset

• Account Data: Retained for as long as your account is active. You may request deletion at any time.
• Meeting Data: Retained according to your subscription plan — Startup (30 days), Growth (90 days), Scale (unlimited). You can manually delete meetings at any time.
• Uploaded Documents: Retained for the duration of the meeting lifecycle. Deleted when the meeting is deleted.
• Company Brief & Board Memory: Retained while your company workspace exists; editable in Settings and removed if you delete the workspace or your account.
• Usage Logs: Aggregated usage analytics are retained for up to 24 months. Individual session logs are retained for up to 90 days.
• Billing Records: Retained for up to 7 years for legal and tax compliance.

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (“right to be forgotten”)
• Portability: Request your data in a structured, commonly used format
• Opt-out: Unsubscribe from marketing communications at any time, and control notification emails (meeting summaries, expiry warnings, usage alerts) in Settings → Preferences
• Restriction: Request that we limit the processing of your data

• Email: privacy@elevateboardroom.ai
• Company: Elevate Boardroom LLC
• Location: United States