Privacy Policy

1. Who we are

Elixir Boards is a project-management service operated by Elixir Blend in Cyprus ("Elixir Boards", "we", "us"). This policy applies to elixirboards.com, the Elixir Boards web application, and related services.

Privacy questions and requests can be sent to [email protected].

2. Information we collect

Account and profile information

We process information such as your name, email address, profile image, authentication identifiers, language, preferences, and account settings. If you use a third-party sign-in provider, we receive the profile information you authorize that provider to share.

Workspace content

We store the information you and your collaborators add to the service, including boards, cards, comments, documents, spreadsheets, forms, invoices, files, messages, contacts, companies, time records, and activity history.

Facebook and Instagram information

When you connect Meta, we receive the Facebook Pages you manage and linked Instagram Professional account identifiers, names, usernames, profile images, authorization tokens, and token-expiry information. Page access tokens are encrypted before storage. We also process the captions, links, images, schedules, remote post identifiers, and delivery results needed to publish content you request.

Usage and device information

We may collect IP address, browser and device information, timestamps, diagnostic logs, feature usage, security events, and cookie or similar-technology data. Public pages use Google Analytics to understand traffic and campaign performance.

Billing and communications

If you purchase a paid service, our payment provider processes payment details and sends us transaction, subscription, and billing-status information. We do not store full payment-card numbers. We also process support messages and service communications.

3. How we use information

• Provide, secure, maintain, and improve Elixir Boards.
• Authenticate users and manage accounts, workspaces, permissions, and collaboration.
• Publish or schedule social content only when an authorized user requests it.
• Process subscriptions, respond to support requests, and send operational notices.
• Detect abuse, investigate errors, enforce our terms, and comply with law.
• Generate AI-assisted output when you deliberately submit content to an AI feature.

Where the GDPR applies, our legal bases include performing our contract with you, our legitimate interests in operating and protecting the service, consent where requested, and compliance with legal obligations.

4. How information is shared

We share information only as needed with service providers that help us operate Elixir Boards, such as cloud hosting, authentication, email, analytics, payments, customer support, and AI providers. Their processing is governed by their agreements and applicable law.

When you connect or publish through Facebook or Instagram, information is sent to Meta under your instructions and is also governed by Meta's Privacy Policy. Workspace information is visible to the collaborators and guests you authorize.

We may disclose information when required by law, to protect users and the service, or as part of a merger, financing, acquisition, or sale with appropriate safeguards. We do not sell personal information.

5. Retention and deletion

We retain account and workspace information while your account is active and as reasonably needed to provide the service, resolve disputes, meet legal obligations, and maintain security records. Retention periods vary by data type. Backups may persist for a limited period before being overwritten.

Disconnecting a Meta account removes its stored publishing token and prevents future publishing through that connection. For complete account or Meta-data deletion instructions, visit Data Deletion.

6. Security and international processing

We use access controls, encrypted transport, token encryption, monitoring, and other organizational and technical safeguards designed to protect information. No internet service can guarantee absolute security.

Our providers may process information in countries outside your own. Where required, we rely on lawful transfer mechanisms and contractual safeguards.

7. Your rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information, and to withdraw consent. You may also complain to your local data-protection authority. Contact [email protected] to exercise these rights; we may need to verify your identity.

8. Children and changes

Elixir Boards is not directed to children under 16, and we do not knowingly collect their personal information. We may update this policy as the service or law changes. Material changes will be identified by a new update date and, where appropriate, an in-product notice.