Privacy
A short, plain explanation of what HandoverBoard collects.
Data on real boards
- When a board is created and used, we store the board name, the creator's email for verification and code recovery, user names added to the board, note and comment content, and any other data users enter on that board.
- Data is retained for as long as the board is active. Boards inactive for an extended period may be reviewed, and this retention policy may evolve after the beta.
- A board can be deleted self-service from the board menu: deletion is confirmed via a one-time link sent to the email used to create the board. If you can't access that inbox, contact hello@handoverboard.com.
- For each board created by a business or team, that business is the data controller for the data entered on their own board (note content, user names, and anything else they add) — they decide what data is entered and why.
- HandoverBoard acts as the data processor for that board data, storing and processing it on the business's behalf.
- Teemu Kotola, operating HandoverBoard, is the data controller only for data HandoverBoard collects directly itself: the board creator's verification email, anonymous demo analytics, and newsletter subscriptions.
- Data is processed on EU/US cloud infrastructure via Supabase.
Do not enter patient, health, or other sensitive personal information into HandoverBoard boards. HandoverBoard is not designed or certified for handling protected health information or other special category data.
What not to store
- HandoverBoard uses a shared access code rather than individual logins. Once the code has been shared with your team, access cannot be revoked for one person.
- For that reason the board is not suitable for storing sensitive personal data about third parties: please do not add customer phone numbers, ID numbers, health or patient information, or other protected health information.
- Everyone who has the code can see the whole board. The board owner is responsible for controlling who receives it.
Anonymous demo analytics
- The demo collects anonymous usage data: how long a demo session lasts and the approximate country derived from your connection. It is used only to improve the product.
- No personal data, name or IP address is stored. The country is derived at request time and the IP address is never saved.
Newsletter and tracking
- The newsletter email address is used only to send you the newsletter.
- The site uses lightweight visitor measurement (Tinybird) provided by our hosting platform. It records page views: the page address opened, the referring page, the browser language setting and a random session identifier. It is not used for advertising or profiling.
- This measurement never sees note content, names, access codes or email addresses. We use no tracking or advertising cookies.