1. Who we are (data controller)
QURTUBA TECH FOR PROGRAMMING is the controller of the personal data described here and can be reached at support@aiboard360.com or via https://aiboard360.com.
For company data you upload about your own employees or customers, you act as controller and we act as processor on your instructions.
2. Categories of personal data we collect
Identity and account data: name, email address, password credentials, profile photo, language preference.
Organization and role data: organization and entity membership, role, permissions, invitations.
Billing data: plan, subscription and transaction identifiers, billing country, purchase history. Card details are collected and stored by Paddle, not by us.
Content data: documents, files, KPIs, business plan and company information you enter or connect, and the transcripts, minutes and decisions generated from them.
Technical and usage data: IP address, device and browser information, login attempts and security events, audit logs of exports and administrative actions.
Communications data: support messages and emails we exchange with you.
3. Why we process it and on what basis
To perform our contract with you: providing accounts, AI outputs, billing and support.
For our legitimate interests: securing the platform, preventing fraud and abuse, and improving reliability.
To comply with legal obligations: tax, accounting and record-keeping.
With your consent where required, for example optional marketing emails, which you can withdraw at any time.
We do not sell personal data and do not use it for third-party advertising.
4. Who we share personal data with
Paddle.com Market Ltd — our authorized reseller and Merchant of Record. Paddle receives your name, email, billing address and transaction data to process payments, calculate and remit taxes, issue invoices and handle billing support, and acts as an independent controller for that activity.
Cloud hosting and database providers that store the platform's data.
AI model providers that generate the requested outputs from the prompts and company context sent to them.
Email delivery providers used for authentication and notification emails.
Professional advisers, auditors and authorities where we are legally required to disclose.
5. AI processing
Prompts and relevant company context are sent to AI model providers strictly to produce the output you request. Customer content is not used to train third-party foundation models.
6. International transfers
Our providers may process data outside your country. Where that happens, transfers rely on recognized safeguards such as adequacy decisions or standard contractual clauses.
7. Security
Encryption in transit and at rest, least-privilege access, row-level isolation per organization, authenticated sessions, audit logging, and regular dependency and configuration scanning.
8. Retention
Account and content data is retained for the life of the subscription and deleted or irreversibly anonymized on request, or within 90 days of termination, except records we must keep for legal, tax or accounting reasons.
9. Your rights
Subject to applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent where processing is consent-based.
To exercise any right, email support@aiboard360.com. You also have the right to complain to your local data protection authority.
10. Cookies and similar technologies
We use strictly necessary cookies and local storage for sign-in sessions, language and currency preferences. Paddle sets cookies needed to run checkout securely.