Privacy Policy

Borative provides a workspace operating system for tasks, teams, planning, notes, chat, audit activity, add-ons, and account controls. This Privacy Policy explains what information we collect, how we use it, and the choices available to users of Borative.

We collect account information such as name, email address, profile image, language, timezone, authentication status, and workspace membership details. We also collect workspace content that users choose to create in the product, including tasks, comments, notes, files or images added to work items, team settings, notifications, audit events, and subscription or billing status.

We may collect technical information such as device, browser, IP-derived region, session data, product usage events, and analytics events to secure, operate, debug, and improve Borative.

If you sign in with Google, Borative uses Google OAuth through Supabase Auth to authenticate your account. We request basic profile information needed to create and manage your Borative account, such as your email address, display name, and profile image when provided by Google.

Borative does not request access to your Google Drive, Gmail, Calendar, Contacts, or other Google product data for the current sign-in flow. Google account data is used only for authentication, account setup, profile display, workspace membership, security, and support of the Borative service.

We use information to:

• create, authenticate, and secure user accounts;
• provide workspace, team, task, chat, notes, audit, add-on, and notification features;
• manage roles, permissions, subscriptions, seats, and account settings;
• detect abuse, troubleshoot errors, and maintain service reliability;
• analyze product usage and improve Borative; and
• respond to user requests, support questions, and legal obligations.

We do not sell personal information. We share information only as needed to operate Borative, comply with law, protect rights and security, or with the user's direction. Borative may use service providers such as Supabase for authentication, database, storage, and realtime infrastructure; Stripe for billing and subscriptions; and Google Analytics for aggregate website and product analytics.

We retain account and workspace data while an account is active or as needed to provide the service, meet legal obligations, resolve disputes, prevent abuse, and maintain backups. Users may request deletion of their account or personal data by contacting privacy@borative.com. Some information may remain in backups, audit logs, billing records, or legal records for a limited period where required.

Borative uses technical and organizational safeguards intended to protect user data, including authentication, role-based workspace access, database access controls, and encrypted transport. No internet service can guarantee absolute security, but we work to protect Borative accounts and workspace data responsibly.

Users can update profile details, manage workspace membership and permissions, sign out, or request account deletion. Users who authenticated with Google may also manage Borative's access from their Google Account security settings.

Borative may process information in countries where we or our service providers operate. By using Borative, users understand that information may be processed outside their country of residence subject to applicable safeguards.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and may provide additional notice inside the product or by other reasonable means.

For privacy questions or data requests, contact Borative at privacy@borative.com.