Privacy notice — marketing site
This notice describes the data the BoardiGO marketing site collects when you visit.
It does not cover the BoardiGO product application (app.boardigo.com), which processes board materials, decisions, signatures and minutes under a separate data-protection notice shared during evaluation.
What we collect
The marketing site is opt-in for analytics, write-only for email correspondence, and uses hosting-layer logs that are kept short. Anything not described below is not collected by this site.
On every page request, the hosting layer records your IP address, browser user agent, the page you requested and the time. Purpose: security monitoring and basic operations. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: 30 days. Recipients: internal staff and the hosting provider only.
When you click Accept on the consent banner, PostHog (EU host) records page views and named events (for example, CTA clicks) until you revoke. No cross-site identifier, no advertising cookies. Purpose: improve the site. Legal basis: consent (Art. 6(1)(a) GDPR). Retention: per PostHog defaults. Recipient: PostHog EU as sub-processor and internal staff.
When you write to a *@boardigo.com inbox, our email provider routes the message to the relevant team and we keep the thread for as long as needed to answer (typically up to 3 years for support and prospect correspondence; sales and customer correspondence follows the contract retention). Purpose: respond to your enquiry. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or contract performance (Art. 6(1)(b) GDPR) depending on the context.
What we do not collect
The boundaries below are not aspirational. They are statements about the marketing site as deployed today and will be updated if anything changes — before the change ships.
The marketing site does not enrich your visit with third-party advertising identifiers and does not push your visit data into ad networks. The consent banner does not unlock advertising trackers; Accept turns on product analytics only.
We do not sell visit data, email-list rentals or any other personal data collected on this site to third parties. We do not run a "consent partners" mechanism that effectively does the same thing.
The hosting provider, the email provider and PostHog all run in EU regions for the marketing site; no personal data collected here is transferred outside the EU / EEA. If a sub-processor changes, we update this page and the cookies page before the change ships.
Your rights
You can exercise any of the rights below by writing to privacy@boardigo.com. We answer in writing and within one month, unless we explain why we need longer.
Email privacy@boardigo.com for a copy of any data the marketing site holds about you.
Ask us to correct any inaccurate data we hold about you.
Ask us to delete what we hold, subject to legal retention obligations (e.g. logs we are required to keep for a defined period).
Ask us to pause processing while a dispute is resolved, or object to any processing we run on the legitimate-interest basis.
Ask us for a portable copy of any data you provided directly to the marketing site — typically your email correspondence.
If you are not satisfied with our response, you can complain to the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg or to the supervisory authority in your EU country of residence.
Controller & contact
The controller for the marketing-site data described above is BoardiGO (Luxembourg). The exact legal-entity form is being reconciled and will be displayed in full once confirmed.
BoardiGO (Luxembourg). The marketing-site privacy notice references the same legal entity used in the ISMS Registry of Processing Activities; the exact legal-entity form is being reconciled with the site footer and will be displayed in full once confirmed.
Email privacy@boardigo.com for any privacy question or to exercise a right. We do not yet name a specific Data Protection Officer; if and when the DPO role is formally appointed, this page will name the post-holder directly.
Commission Nationale pour la Protection des Données (CNPD), Luxembourg — reachable via cnpd.public.lu. You may also contact the supervisory authority in your EU country of residence.
Privacy contact
For privacy questions about the BoardiGO marketing site, email privacy@boardigo.com. For the product-app privacy story — RoPA summary, sub-processor list, DPA route — the trust / security pack is the right channel and is shared during evaluation.