Privacy Policy

1. Introduction

AppBoard ("we", "us", or "our") operates appboard.pro, a product discovery platform where creators submit software products and community members vote and engage. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using AppBoard you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following types of information:

• Account information: your email address and an auto-generated username when you sign up. We use passwordless OTP (one-time code) authentication — we never store passwords.
• Profile information: an optional profile picture you upload, stored on our cloud storage provider.
• Product data: names, taglines, descriptions, website URLs, logos, screenshots, and classification information you provide when submitting a product.
• Content you create: comments, reviews and ratings, votes, favourites, and the creators you follow. This content is public on the platform.
• Product performance data: impressions, detail-page views, and outbound clicks recorded per product, so creators can see how their listing performs. These are stored as daily aggregate counts, not per-visitor records.
• Usage data: IP addresses, pages visited, click interactions, search queries, and vote actions, used to operate and improve the platform and to prevent abuse of the voting system. Where we retain this beyond the immediate request, the IP address is stored only in an irreversible hashed form.
• Device and browser information: browser type and version, operating system, device type, preferred language, and referral source, derived from your request headers.
• Consent records: your cookie and privacy choices, together with the date, the version of this policy in force, and the device/browser context in which the choice was made, so we can demonstrate that consent was given.
• Payment information: when you purchase a promoted placement, payment is processed by Stripe. Card details are entered on Stripe's systems and never reach our servers; we retain only the transaction record (amount, currency, status, and the product promoted).

3. How We Use Your Information

• To create and manage your account and authenticate you via email OTP.
• To operate the leaderboard, voting system, and reputation scoring — including IP-based checks to prevent duplicate votes.
• To display your public profile, submitted products, and reputation score to other users.
• To send transactional emails you cannot opt out of while holding an account — login codes, payment receipts, and essential service notices.
• To send notification emails about activity on your own products (comments, reviews, follows, and publication status). These are enabled by default and every one of them carries a one-click unsubscribe link; you can also turn whole categories off under Email Preferences in Settings at any time.
• To process payments for promoted placements.
• To detect and prevent fraud, spam, and abuse.
• To analyse aggregate usage patterns and improve the platform.

4. Information Sharing

Your username and submitted products are public by default and visible to all visitors. We do not sell your personal data.

We share data with third-party services only as needed to operate the platform:

• Infrastructure — Amazon Web Services: hosting, database, and file storage for logos, screenshots, and profile pictures.
• Email delivery — SendGrid: sending login codes, receipts, and notification emails.
• Payments — Stripe: processing promoted-placement purchases. Stripe acts as an independent controller for payment data under its own privacy policy.
• Analytics — Google Analytics: aggregate usage measurement on appboard.pro. See the Cookies and Analytics section below.
• AI product prefill — Anthropic: when you use the optional "Prefill with AI" feature, the website URL you submit and the public page content retrieved from it are sent to Anthropic's API to extract your product name, tagline, and description. This happens only when you actively trigger prefill.
• Legal compliance: we may disclose information if required by law or to protect the rights and safety of our users.

5. Data Security

We use HTTPS encryption for all data in transit. We use passwordless authentication (email OTP) to eliminate password-related vulnerabilities. Access to production systems is limited to authorised personnel. While we take security seriously, no method of transmission over the internet is 100% secure.

6. Data Retention

• Account data is retained while your account is active.
• Published products remain on the platform indefinitely unless you request removal.
• Vote and interaction logs are retained for fraud prevention and may be anonymised after 90 days.
• Sign-in records (used to secure your account and detect suspicious access) are retained for up to 12 months.
• Consent records are retained for as long as we rely on the consent and for up to 3 years after it is withdrawn, so we can evidence the choice if challenged.
• Aggregated analytics are retained indefinitely in anonymised form.

7. Your Rights

You have the right to:

• Access and update your account information at any time via Settings.
• Request a copy of your personal data.
• Delete your account and associated personal data. Account deletion is handled as a support request — email [email protected] and we will confirm and action it.
• Unsubscribe from any notification email with one click, using the link in the footer of every such email — no sign-in required.
• Change or withdraw your cookie consent at any time under Cookie preferences in Settings. Withdrawing is as easy as giving consent.
• Control the visibility of your products.

Note: deleting your account removes your personal data but anonymised content (votes, aggregated scores) may remain.

8. Cookies and Analytics

We use a small number of first-party cookies that are strictly necessary to run the platform: authentication and session management, and an identifier that remembers your cookie choices so we don't ask again on every visit.

We also use Google Analytics on appboard.pro to understand aggregate usage — which pages are visited, referral sources, and approximate country-level location. Google Analytics sets its own cookies and processes that data on Google's infrastructure. We do not use advertising cookies, cross-site tracking pixels, or sell data to advertisers.

You can review and change your cookie preferences at any time under Cookie preferences in Settings, and withdrawing consent is as easy as giving it. We keep a record of your choice — including the date and the version of this policy in force — so we can demonstrate that it was made.

9. Children's Privacy

AppBoard is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international transfers of personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of AppBoard after changes constitutes acceptance of the updated policy.