Beta terms — under counsel review. Prepared Board is an invite-only beta. This policy describes how the service works today. It has not yet been reviewed by counsel and may change before general availability; we will update the date below when it does.
Effective date: October 10, 2026
Last updated: October 10, 2026
Operator: Signalry, Inc. ("Prepared Board," "we," "us," or "our")
Contact: privacy@preparedboard.com
1. Scope
This policy covers the Prepared Board website (preparedboard.com), the Prepared Board application, and messages you send us, including pilot requests.
Customers (the organizations whose boards use Prepared Board) put their own board information into the service. For that board content, the customer decides what is collected and why, and we process it on the customer's behalf to provide the service.
2. Information we collect
- Account and contact information: name, work email, password hash or sign-in identifiers (for example, Google or Microsoft sign-in for an existing account), organization, and board role.
- Pilot and contact requests: name, work email, company, role, board type, timing of your next board meeting, any message you include, and the referral code in the link you followed, if any.
- Board content: meetings, agendas, packs, minutes, decisions, votes, recusals, actions, monitors, documents and other material your board enters or uploads.
- Service and security logs: an audit log of access, votes, documents, and membership changes inside a board; request logs kept by our hosting providers.
- Site analytics: see section 4.
We do not ask for and do not want sensitive personal information beyond what your board's governance work requires.
3. How we use information
We use information to provide and secure the service; create and manage accounts, boards, invitations, and permissions; respond to pilot requests and support questions; send service and security email (for example, invitations, password resets, and verification); understand aggregate product usage; and meet legal obligations. We do not use board content to train AI models, and Prepared Board does not send board content to foundation-model APIs (see /trust/ai).
4. Analytics and cookies
We use Vercel Web Analytics and Vercel Speed Insights, which are cookieless and report aggregate counts (page views, referrer, country, device and browser type, page performance). They set no analytics cookies and do not track you across sites. On public pages we record the page path and, if present, campaign tags (utm_* or ref). Inside the signed-in app and on private links (board packs, invites, sponsor and welcome links) we record only a normalized route pattern such as /app/meetings/[id]: record IDs and link tokens are replaced and query strings are dropped, so no page content, title, board name, document name, or ID is sent. We also count a small set of named product steps (for example pilot requested, board created, member invited, first decision recorded). These events carry no name, email, board, document, or meeting identifier.
When you follow a Prepared referral or template link (/r/...), we set a first-party cookie so a later signup can be credited to that link and a template can be preloaded. Signed-in sessions use a necessary session cookie. We use no advertising trackers.
5. Who we share information with
- Your board: other members and administrators of your board see board content according to the roles and permissions your board sets.
- Service providers that run the service for us: Vercel (application hosting and Vercel Blob file storage, United States), Neon (Postgres database, AWS us-east-2, United States), and Resend (transactional email, including pilot-request notifications to our team). If your account uses Google or Microsoft sign-in, those providers confirm your identity.
- Advisers and successors: professional advisers under confidentiality, and a successor in a merger, acquisition, or financing.
- Legal requests: where reasonably necessary to comply with law or protect people, systems, or property.
We do not sell personal information.
6. Retention, export, and deletion
We keep account and board information while your board uses Prepared Board. A board's Owner, Admin, or Chair can export at any time: the full record of decisions, votes, minutes, actions and document details; uploaded files download separately. When a board leaves, we delete its content on request, subject to backups that expire on our providers' normal cycle and any legal obligation to keep it. Pilot requests are kept while we are in contact with you; ask us to delete yours at any time.
7. Security
Data is encrypted in transit (TLS) and at rest by our providers' default, provider-managed encryption. Access inside a board is role-based and audited. We have not completed an independent security audit or outside penetration test yet; see /security for where we stand.
8. Your choices and rights
You can ask to access, correct, export, or delete your personal information by emailing privacy@preparedboard.com. If your information is part of a board's record, we may need to coordinate with that board's administrator. You can opt out of non-essential email using the link in the message.
9. Location
Prepared Board is operated from the United States, and the providers above store data in the United States.
10. Children
Prepared Board is for organizations and their boards. It is not directed to children, and we do not knowingly collect information from anyone under 16.
11. Changes
We will post changes here and update the dates above. For material changes, we will also email account holders.
12. Contact
Privacy questions and requests: privacy@preparedboard.com.