SUITEBOARD — PRIVACY POLICY

Account information: email address, name, and authentication credentials handled via Auth0.

Financial data (via integrations): When you connect QuickBooks, Stripe, or other financial services, we retrieve transaction summaries, invoices, bills, cash position, and customer data necessary to generate your briefs and insights. We do not collect individual transaction line-items beyond what is needed for summary analysis.

Calendar and meeting data: When you connect Google Calendar or Calendly, we retrieve event metadata (title, time, attendees) to detect scheduling patterns.

Usage data: We log page visits, actions taken on briefs, and aggregate analytics. Analytics events are hashed and contain no personally identifiable information or financial figures.

• Generate briefs, insights, and actions tailored to your business;
• Authenticate you and secure your account;
• Monitor and improve service quality;
• Communicate with you about the Platform.

We do not use data obtained through Google Workspace APIs to develop or train generalized AI models shared across customers without your explicit consent. We do not transfer your data to third parties for advertising.

Financial data retrieved from your integrations is retained for 90 days after your last sync or until you disconnect the integration, whichever comes first. After disconnect, we delete the associated data from MongoDB, Redis, and any archival storage within 30 days.

Account data is retained for the lifetime of your account. Upon account deletion, all personal and company data is removed within 30 days, except where retention is required by law.

We share data only with service providers necessary to operate the Platform, under strict confidentiality:

• Auth0 — authentication
• MongoDB Atlas — primary datastore
• Stripe — billing (PCI DSS compliant)
• Intuit / QuickBooks, Google, Calendly — data integrations you explicitly connect
• PostHog — product analytics (PII-stripped events only)

You have the right to:

• Access the personal data we hold about you;
• Request deletion of your data at any time;
• Receive an export of your data in a machine-readable format;
• Withdraw consent previously given for optional data processing.

To exercise any right, email privacy@beproex.com. We respond within 30 days.

We implement administrative, physical, and technical safeguards aligned with AICPA SOC 2 standards. OAuth tokens are encrypted at rest (AES-256). Transport uses TLS 1.2+. However, no internet transmission is perfectly secure — you assume the inherent risk of connecting sensitive data.

We use cookies and similar technologies for:

• Essential: authentication, session management, CSRF protection. These cannot be disabled.
• Analytics (optional): PostHog product analytics, Google Analytics. Only fires after you accept cookies.
• Preferences: dark mode, language, dismissed banners.

You can manage your consent any time by clearing cookies for this domain or emailing privacy@beproex.com.

We may update this Privacy Policy. Material changes will be notified by email and displayed on the Platform for 30 days before taking effect.

Suiteboard LLC

Email: privacy@beproex.com

Address: 2618 San Miguel Dr., Newport Beach, CA 92660