WorkBoard Security and Privacy Policy

Security Audit

WorkBoard is SOC2 Type II, ISO 27001:2013, and TISAX certified. We employ industry standard technological measures that are reasonably designed to help protect your personal information from loss, unauthorized access, disclosure, alteration or destruction. WorkBoard may use, without limitation, firewalls, password protection, secure socket layer, and other security measures to help prevent unauthorized access to your personal information. While we take reasonable efforts to guard personal information, no security system is impenetrable.

Privacy Policy

Last updated & Effective Date: September 23, 2021
(NOTE: This is an archived version of our policy. Please see the current version here)

Thank you for visiting Workboard Inc.’s ("Workboard" or “we” or “our”) Internet web site ("Site") located at the URL www.WorkBoard.com. This Privacy Policy explains how WorkBoard receives and processes personal information as defined by applicable law from its business customers (“Customer Personal Information” or “Customer PI”) and visitors (as prospective business customers) to its website or “Site” (“Visitor Personal Information” or “Visitor PI”) or visitors from 3rd party partner applications with embedded Workboard experiences (e.g. Microsoft Teams, Slack, Cisco Webex, Jira, Microsoft ADO, etc.). Customer PI and Visitor PI may be referred to herein as Personal Information or “PI.”

What Information & Why

WorkBoard receives Customer Personal Information for the business purposes of providing software as a service for its customers (collectively referred to herein as “Services”).

Visitors Personal Information.
Visitors to our Site may provide Visitor PI (including name and business email address) so that WorkBoard can contact them to provide information about our Services. Specifically, WorkBoard receives or collects the following types of Customer PI: First Name and Last Name; Title; Job Title; and Contact information (E-mail address, physical business address).

Account Information.
When you register to use our Services, including by setting up the account as the account “Manager” or by accepting the invitation to register as a guest “Member” under a Manager’s account, you may be required to provide the following types of PI: First Name and Last Name; Title; Job Title; and Contact information (E-mail address, physical business address). If you are required to pay for your account, your payment information.

User Content.
We also store the content and information that you or your guest Members create or upload to your account on the Services (“User Content”).

Marketing.
We may collect your personal information in order to provide you with free of charge marketing related materials. If you do not wish to receive such marketing materials from Workboard, then click the “unsubscribe” button on such materials.

Usage, Device and Log Information.
We collect information about you when you access and use the Site and the Services including your Internet Protocol (“IP”) address, access times, browser type and language, Web pages you visit, device information, and other actions you take, in order to improve our Services, and/or develop new Services.

Cookies and other tracking technologies.
We (including service providers working on our behalf) use technologies to collect information, which includes cookies. Cookies are small data files stored on your hard drive or in device memory that help us to improve the Services and your experience.

Collection and Use of Aggregate Information.
WorkBoard may use aggregated or de-identified information (not containing personal information) (“Aggregated Information”) to analyze trends and improve its Services.

With Whom?

Other users on Your Account:
If you are a Member on an account, the Manager of that account may view the User Content that you post to an account as well as other status information about your usage of the account.

Service Providers:
WorkBoard shares PI with trusted Service Providers for the business purposes of providing the Services and includes the following types of services: sales automation, website management, platform hosting, security monitoring, email and marketing communications, marketing analytics, payment processing and technical support.

Native Integrations:
Workboard users can use native integrations to share data with other work apps. Workboard does not share data from integrated apps with any other services or clients. For example, when you integrate your Google account, we access your Google account to gather information that is required for the integration endpoint.

Third Party Applications:
The Site may provide links to other Web sites or resources over which Workboard does not have control ("External Web Sites"). Such links do not constitute an endorsement by Workboard of those External Web Sites. You acknowledge that Workboard is providing these links to you only as a convenience, and further agree that Workboard is not responsible for the content of such External Web Sites. Your use of External Web Sites is subject to the terms of use and privacy policies located on the External Web Sites.

Compliance with Laws:
WorkBoard may disclose PI to a third party if (a) it believes that such disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, or (b) to protect the security or integrity of the Services from harm or illegal activities.

Business Transfers:
WorkBoard may share or transfer PI in connection with, any merger, sale of WorkBoard assets, financing, or acquisition of all or a portion of the business to another company. WorkBoard may share or transfer Aggregated Information to affiliate or related companies for its business purposes.

Your Right to Control and Access Your Personal Information

Your Account:
You may update, correct or delete information about you at any time by logging into your online account and modifying your information or by emailing us at privacy@WorkBoard.com.

Registered Accounts:
Only the registered account Manager may close an account. The Manager may decide to terminate the ability of one or more of their invited Members to use their account. Only the Manager may request the deletion of the User Content in an account.

Retention Policy:
We will delete any account information thirty (30) days following the termination of a registered account unless we agree to an extension.

Do Not Track:
Some browsers offer a “do not track” (“DNT”) option. We do not respond to DNT signals.

EU Users:
EU users have the right to lodge a complaint about the collection or use of their personal information by notifying their EU supervisory authority. Please feel free to contact us at privacy@WorkBoard.com as well.

California Residents:
WorkBoard does not sell PI as defined under CCPA. WorkBoard upholds the right of non-discrimination as defined under CCPA.

Nevada Residents:
WorkBoard does not sell PI as defined by Section 1.6 of Chapter 603A of the Nevada Revised Statutes.

Security

We employ industry standard technological measures that are reasonably designed to help protect your personal information from loss, unauthorized access, disclosure, alteration or destruction. WorkBoard may use, without limitation, firewalls, password protection, secure socket layer, and other security measures to help prevent unauthorized access to your personal information. While we take reasonable efforts to guard personal information, no security system is impenetrable.

Policy On Information Collected From Children

This Site and our Services are not directed at children under the age of 13. Workboard does not knowingly collect personal information from children under the age of 13. If you become aware that a child has provided us with personal information, please contact us at privacy@WorkBoard.com.

Changes

WorkBoard may need to update this Privacy Policy from time to time to reflect changes to our Services and the laws applicable to our provision of the Services to you. If we do change this Privacy Policy, we will notify you by revising the “Last Updated” date at the top of this Privacy Policy on the Site. If there are material changes to this Privacy Policy, WorkBoard will notify registered users of our Services. WorkBoard encourages you to review this Privacy Policy regularly for any changes. Your continued use of this Site or the Services and/or continued provision of personal information to us after the posting of such notice will be subject to the terms of the then-current Privacy Policy. If you disagree with any applicable change, you will need to close your account and stop using the Site and the Services.

Contact

If you have any questions regarding this Privacy Policy please contact us via email at privacy@WorkBoard.com.