At I'mBoard, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our board management platform.

1. Data Controller

The data controller for your personal information is Slingshot Ventures Ltd, an Israeli company (Company Number: 517282786), with offices at Azrieli Sarona Tower, 121 Menachem Begin Rd, Tel Aviv 6701203, Israel.

References to "I'mBoard," "we," "us," or "our" in this Privacy Policy refer to Slingshot Ventures Ltd.

2. Information We Collect

Information You Provide

Account information (name, email, company details)
Board meeting data and documents
Communication preferences
Payment information (processed securely through third-party providers)

Information Collected Automatically

Usage data and analytics
Device and browser information
IP address and location data
Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

Provide and maintain our services
Improve and personalize user experience
Process transactions and send related information
Send administrative information and updates
Respond to inquiries and provide customer support
Monitor and analyze usage patterns and trends
Detect and prevent fraudulent or illegal activities
Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following situations:

With your consent: When you explicitly agree to share information
Service providers: With trusted third parties who assist in operating our platform
Legal requirements: When required by law or to protect rights and safety
Business transfers: In connection with mergers, acquisitions, or asset sales

5. Sub-processors

We use the following categories of third-party service providers to process data on our behalf:

Category	Purpose	Location
Cloud Infrastructure	Data hosting and storage	United States (AWS)
Authentication	User login and identity	United States
Payment Processing	Subscription billing	United States
Email Services	Transactional emails	United States
Analytics	Service improvement	United States/EU

We maintain Data Processing Agreements with all sub-processors and conduct due diligence to ensure they meet our security and privacy standards.

A detailed list of sub-processors is available upon request by emailing privacy@imboard.ai.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption for data in transit (TLS 1.3) and at rest (AES-256)
Role-based access controls and authentication requirements
Audit trails for sensitive operations
Incident response procedures

7. Data Retention

We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specific retention periods:

Data Type	Retention Period
Account information	Duration of account + 30 days after deletion
Board documents and meeting data	Duration of account + 30 days after deletion
Payment records	7 years (legal/tax requirements)
Server logs	90 days
Analytics data	26 months

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal claims).

You may request early deletion by contacting privacy@imboard.ai.

8. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal data
Portability: Receive your data in a portable format
Objection: Object to certain processing activities
Restriction: Request limited processing of your data

9. International Data Transfers

I'mBoard is operated by Slingshot Ventures Ltd, an Israeli company. Your data is stored on servers located in the United States (AWS us-east-1, Virginia).

If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using our service, you consent to this transfer.

We ensure appropriate safeguards are in place to protect your information, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with all sub-processors
Technical and organizational security measures as described in Section 6

Israel has been granted an adequacy decision by the European Commission, meaning transfers between the EU and Israel are permitted without additional safeguards.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings. For more details, please refer to our Cookie Policy.

12. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.

13. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@imboard.ai
Address: Slingshot Ventures Ltd, Azrieli Sarona Tower, 121 Menachem Begin Rd, Tel Aviv 6701203, Israel

For GDPR-related inquiries, you may also contact us at the above address or email. We will respond to your request within 30 days.

15. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, Slingshot Ventures Ltd processes personal data based on the following legal grounds:

Consent: Where you have given explicit consent for specific processing activities
Performance of a contract: To provide the services you have requested
Compliance with legal obligations: To meet our legal and regulatory requirements
Legitimate interests: For purposes that do not override your fundamental rights, including service improvement, fraud prevention, and security

You may withdraw consent at any time by contacting us at privacy@imboard.ai. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

16. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request information about the categories and specific pieces of personal information we have collected
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the sale or sharing of personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell or share personal information as defined under the CCPA/CPRA.

To exercise these rights, contact Slingshot Ventures Ltd at privacy@imboard.ai. We will verify your identity before processing your request.