Board AI, Inc., doing business as "Vallor" ("Vallor," "we," "us," or "our"), provides an AI contract management platform available at vallor.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to visitors to our website and to users of the Service.

Information We Collect

We collect the following categories of information:

Account information. Name, email address, company name, role, and login credentials when you create an account or book a demo.
Contract data. Contracts, related documents, and metadata that customers connect or upload to the Service. This data is processed on the customer's behalf and remains within the customer's tenant.
Usage analytics. Product usage events, pages viewed, and feature interactions, collected through PostHog, to understand how the Service is used and to improve it. Analytics run only after you opt in through our cookie banner (see "Cookies and Consent" below).

How We Use Information

To provide, operate, secure, and maintain the Service.
To process contract data as instructed by the customer, including AI-powered extraction, analysis, and search.
To respond to support requests and communicate about the Service.
To analyze usage and improve features, performance, and reliability.
To comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use customer contract data to train generalized AI models.

Cookies and Consent

We use two categories of cookies and similar technologies:

Strictly necessary cookies. Required to run the Service, including authentication, session management, security, and remembering your cookie preferences. These are always active because the Service cannot function without them, and they do not require consent.
Analytics cookies (optional). We use PostHog to understand product usage and improve the Service. These cookies load only after you opt in through our cookie banner. Until you consent, no analytics cookies are set and no analytics events are collected.

You can change your choice at any time using the "Cookie preferences" link in the footer of our website. Under the EU General Data Protection Regulation (GDPR), our legal basis for analytics cookies and related processing is your consent (Art. 6(1)(a)). You can withdraw consent at any time, and withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Subprocessors and Sharing

We share information only with service providers that help us run the Service, under contracts that restrict their use of the data. These include:

Cloud hosting providers that host the Service and store customer data.
AI model providers that process contract content to deliver extraction and analysis features. These providers are contractually prohibited from retaining or training on customer data.
Analytics providers (PostHog) for product usage analytics, active only after you opt in.

A current list of subprocessors is available on request at admin@vallor.ai. We may also disclose information if required by law or to protect the rights, property, or safety of Vallor, our customers, or others.

Data Retention

We retain account information for as long as your account is active and as needed to comply with legal obligations. Customer contract data is retained for the duration of the customer agreement and deleted or returned upon termination, subject to a reasonable wind-down period and any legal retention requirements. Usage analytics are retained in aggregated or pseudonymized form.

Your Rights (Including GDPR)

Depending on your location, you may have rights under applicable data protection laws, including the EU General Data Protection Regulation:

Access. Request a copy of the personal data we hold about you.
Deletion. Request that we delete your personal data.
Portability. Receive your personal data in a structured, commonly used, machine-readable format.
Correction. Request that we correct inaccurate personal data.
Objection and restriction. Object to or request restriction of certain processing.

To exercise any of these rights, contact us at admin@vallor.ai. If we process your data on behalf of a Vallor customer, we may direct your request to that customer. You also have the right to lodge a complaint with your local supervisory authority.

Security

Vallor maintains a SOC 2 Type II audited security program. Data is encrypted in transit and at rest. Access to customer data is restricted on a least-privilege basis, logged, and monitored. Customer data is isolated per tenant. Details on our security posture, reports, and documentation are available through our Trust Center or by contacting admin@vallor.ai.

Children

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes will be communicated to customers in advance where required.

Contact

Board AI, Inc. (d/b/a Vallor)
1000 Brickell Avenue, Suite #715 PMB 690
Miami, FL 33131
United States
admin@vallor.ai

This policy is governed by the laws of the State of Florida, without regard to its conflict of laws principles, except where applicable data protection law provides otherwise.