Privacy Policy

What We Collect

When you create a BoardStack account, we collect your name, email address, and information about your HOA community such as the community name and unit count. We also collect usage data to improve the service.

Financial data you enter into BoardStack — including reserve fund balances, budget line items, and transaction records — is stored securely and used solely to provide the service to your community.

How We Use It

We use your information to operate and improve BoardStack, send transactional communications such as account confirmations and billing receipts, and provide customer support. We do not sell your personal data to third parties.

We may use anonymized, aggregated data to understand how communities use the platform and to improve compliance features. This data cannot be used to identify individual users or communities.

Data Storage

Your data is stored in the United States using Neon Postgres with encryption at rest. We use Cloudflare for content delivery and infrastructure security. All data transmission is encrypted using TLS.

We retain your account data while your subscription is active. If you cancel your account, we retain data for 90 days to allow recovery, after which it is permanently deleted unless required by law.

Third Parties

Ventora Labs C Corp uses Cloudflare for hosting and edge security, Neon for managed Postgres, Stripe for payment processing, Resend for transactional email, PostHog for product analytics, Sentry for error tracking, Google for OAuth sign-in, and Apollo for launch CRM operations. Each processor handles data under its own terms and privacy commitments.

We do not share your HOA financial data with any third party except as required to operate the service (e.g., database hosting) or as required by law (e.g., valid legal process).

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. We will respond to verified requests within 30 days. You may also export your community's data in CSV format from your account settings.

If you are located in the European Economic Area or California, you have additional rights under GDPR and CCPA respectively. Please contact us at the email below to exercise these rights.

Contact

For privacy-related questions or data requests, contact us at privacy@boardstack.app .

For enterprise customers requiring a Data Processing Agreement, see our DPA page.

For the current list of subprocessors, see our Subprocessors page.