Board AI, Inc., doing business as "Vallor" ("Vallor," "we," "us," or "our"), provides an AI contract management platform available at vallor.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. It applies to visitors to our website and to users of the Service.

Information We Collect

We collect the following categories of information:

Account information. Name, email address, company name, role, and login credentials when you create an account or book a demo.
Contract data. Contracts, related documents, and metadata that customers connect or upload to the Service. This data is processed on the customer's behalf and remains within the customer's tenant.
Usage analytics. Product usage events, pages viewed, and feature interactions, collected through PostHog, to understand how the Service is used and to improve it.
Cookies and similar technologies. We use cookies for authentication, session management, preferences, and analytics. You can control cookies through your browser settings.

How We Use Information

To provide, operate, secure, and maintain the Service.
To process contract data as instructed by the customer, including AI-powered extraction, analysis, and search.
To respond to support requests and communicate about the Service.
To analyze usage and improve features, performance, and reliability.
To comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use customer contract data to train generalized AI models.

Subprocessors and Sharing

We share information only with service providers that help us run the Service, under contracts that restrict their use of the data. These include:

Cloud hosting providers that host the Service and store customer data.
AI model providers that process contract content to deliver extraction and analysis features. These providers are contractually prohibited from retaining or training on customer data.
Analytics providers (PostHog) for product usage analytics.

A current list of subprocessors is available on request at admin@vallor.ai. We may also disclose information if required by law or to protect the rights, property, or safety of Vallor, our customers, or others.

Data Retention

We retain account information for as long as your account is active and as needed to comply with legal obligations. Customer contract data is retained for the duration of the customer agreement and deleted or returned upon termination, subject to a reasonable wind-down period and any legal retention requirements. Usage analytics are retained in aggregated or pseudonymized form.

Your Rights (Including GDPR)

Depending on your location, you may have rights under applicable data protection laws, including the EU General Data Protection Regulation:

Access. Request a copy of the personal data we hold about you.
Deletion. Request that we delete your personal data.
Portability. Receive your personal data in a structured, commonly used, machine-readable format.
Correction. Request that we correct inaccurate personal data.
Objection and restriction. Object to or request restriction of certain processing.

To exercise any of these rights, contact us at admin@vallor.ai. If we process your data on behalf of a Vallor customer, we may direct your request to that customer. You also have the right to lodge a complaint with your local supervisory authority.

Security

Vallor maintains a SOC 2 Type II audited security program. Data is encrypted in transit and at rest. Access to customer data is restricted on a least-privilege basis, logged, and monitored. Customer data is isolated per tenant. Details on our security posture, reports, and documentation are available through our Trust Center or by contacting admin@vallor.ai.

Children

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes will be communicated to customers in advance where required.

Contact

Board AI, Inc. (d/b/a Vallor)
Miami, Florida, United States
admin@vallor.ai

This policy is governed by the laws of the State of Florida, without regard to its conflict of laws principles, except where applicable data protection law provides otherwise.