Privacy Policy

Who we are

GrooveBoard is operated by Maple Groove Inc., a corporation registered in Alberta, Canada (the "Company", "we", "us"). You can contact us at [email protected].

Information we collect

We collect only what's necessary to run GrooveBoard for you:

• Account data: email address, first name, last name (used for sign-in, identification, and professional sharing context).
• Board content: nodes, notes, lists, images, connections, perimeters, and other content you create on your boards.
• Sharing state: who you've shared boards or areas with, and at what permission tier.
• Technical data: IP address (briefly, for abuse prevention), browser type, and timestamps of activity. We log client-side errors to help us fix bugs; sensitive URL parameters (auth tokens, recovery codes) are stripped before logging.

We do not sell your personal information to anyone, ever.

How we use your information

• To operate GrooveBoard — render your boards, save your changes, deliver your shares.
• To send you transactional email (sign-in links, share invitations, account notifications). We use Resend as our email provider.
• To detect and prevent abuse, fraud, and policy violations.
• To improve the product based on aggregated, non-identifying usage signals.

Who can access your content

You, plus anyone you explicitly share with at the permission tier you set.

Maple Groove staff do not routinely access your board content. Authorized staff may access stored data only when:

• You request support and we need to look at your board to help.
• We have a credible reason to suspect a violation of the Acceptable Use Policy (see Terms of Service).
• We are legally compelled to disclose data (court order, lawful warrant).

Access is logged. We are honest about this because dishonesty here breaks trust faster than the access itself.

Service providers

GrooveBoard runs on infrastructure provided by:

• Cloudflare — content delivery, DNS, edge caching
• Supabase — database, authentication, storage
• Resend — transactional email delivery

These providers process your data on our behalf only and are bound by their own data-processing agreements with us. They do not have independent rights to your data.

Third-party business partners (opt-in only)

GrooveBoard may, in the future, integrate with third-party financial software providers — for example, calculation engines, research tools, or planning software — that benefit your work on the platform.

Sharing your data with these partners is strictly opt-in, per partner. You will see an explicit "Connect to [Partner Name]" prompt and must consent before any data flows. We will never share your board content with a business partner without that explicit step.

This clause exists so that, when we add such an integration, we don't need to re-consent every existing user — but it does not authorize any sharing today.

Data retention

We keep your board content for as long as your account is active. If you delete your account, we delete your board content within 30 days, except where we are required to retain it for legal or regulatory reasons.

Backups are retained for up to 30 days for disaster-recovery purposes.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Withdraw consent and have your data deleted (subject to legal retention requirements).
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these, email [email protected] from the address on your account. We will respond within 30 days.

Cookies and local storage

GrooveBoard uses browser localStorage and sessionStorage to keep you signed in and to cache board state for offline resilience. We do not use third-party tracking cookies. We do not use advertising networks.

Children

GrooveBoard is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we will delete the account.

Changes to this policy

We will post material changes here and email registered users at least 30 days before they take effect. Minor wording or formatting fixes don't trigger a notification.

Soft-launch disclaimer

GrooveBoard is currently in private soft-launch. The product is functional but evolving rapidly, and you may encounter bugs. We are committed to the privacy practices above from day one — but you should keep your own backups of important content during this phase.