Privacy Policy for Board Law

1. Introduction

Welcome to Board Law, a mobile and web application operated by Audux Ltd ("we," "us," or "our"), a company registered in England, United Kingdom.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Board Law application (the "App"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using Board Law, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect and store the following personal information:

• Username: Your chosen display name for the App
• Email Address: Used for account creation, authentication, and communication
• Subscription Data: Information related to your subscription status, payment history, and subscription tier

2.2 Chat Data

• Chat History: If you have an account, we store your chat conversations with the Board Law assistant for your convenience, allowing you to access your previous interactions across devices
• Chat Content: The questions you ask and the responses provided by our AI assistant

2.3 Technical Information

We may collect standard technical information such as:

• Device type and operating system
• App version
• Usage statistics and analytics

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• To create and manage your user account
• To provide access to the Board Law AI assistant
• To store and retrieve your chat history for your convenience
• To manage your subscription and billing

3.2 Service Improvement

• To improve our AI assistant's performance and accuracy
• To develop new features and enhance user experience
• To conduct research and analysis

3.3 Communication

• To send you important service updates and notifications
• To respond to your inquiries and support requests
• To send subscription-related communications

4. Data Retention

4.1 Account Data

We retain your username, email address, and subscription data for as long as your account remains active or as needed to provide you with services.

4.2 Chat History

Your chat conversations are stored and linked to your account (if applicable) for your convenience. You can access your chat history at any time through the App.

4.3 Deletion Rights

You may request deletion of your personal data at any time by contacting us. Upon request, we will delete your account information and associated chat history, subject to any legal obligations to retain certain information.

5. Data Anonymization

Before using any chat data for service improvement, research, or analysis purposes, we ensure that all personally identifiable information is removed through our anonymization process. This means:

• Your username and email are not associated with the chat content used for analysis
• Chat data used for improvement purposes cannot be traced back to your individual account
• Anonymized data helps us improve the AI assistant while protecting your privacy

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data storage infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Sharing and Disclosure

7.1 No Sale of Personal Data

We do not sell, trade, or rent your personal information to third parties.

7.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating the App, such as:

• Cloud hosting providers
• Payment processors
• Analytics services

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

8. Your Rights (UK GDPR)

As a user in the United Kingdom, you have the following rights under the UK General Data Protection Regulation (UK GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to our processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us using the details in Section 11.

9. Children's Privacy

Board Law is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of Board Law after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries or to exercise your rights under UK GDPR, please use the contact information above with the subject line "Data Protection Request."

12. Data Controller

For the purposes of UK data protection legislation, the data controller is:

---