Privacy Policy

1. Information We Collect

We collect the following information when you use EchoBoards:

• Account information: Your name, email address, and profile picture, provided by Google when you sign in via OAuth
• User content: Projects, tasks, milestones, comments, file attachments, and other data you create within the Service
• Usage data: Session information and preferences (such as theme and layout mode), stored locally on your device

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To enable collaboration features such as real-time sync, presence indicators, notifications, and task assignment
• To respond to support requests

3. Information Sharing

We do not sell, rent, or trade your personal information. We may share information only in the following cases:

• With collaborators: Your name and avatar are visible to other members of projects you join
• Legal requirements: If required by law, regulation, or valid legal process

4. Data Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure authentication via OAuth, and role-based access control within the application. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Project data shared with other members may persist if other members still have access to the project. You can export your data at any time using the built-in JSON export feature.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your personal data
• Export your data in a portable format (JSON)
• Withdraw consent and delete your account at any time

To exercise these rights, contact us at support@echoboards.com.

7. Third-Party Services

We use Google OAuth for authentication. When you sign in, Google's Privacy Policy applies to the data they process. We do not use third-party analytics, advertising networks, or tracking services.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the Service or email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, contact us at support@echoboards.com.