Privacy Policy

This policy explains how Yehuda Levy(“Freeboard”) handles personal information. Freeboard is used by law firms, and the data a firm puts into Freeboard can include information about clients, matters, and parties.

Who controls the data

For the content your firm enters (matters, tasks, deadlines, names, notes), your firm is the controller and Freeboard is the processor: we handle that content on the firm’s behalf and under its instructions. For account and billing information, and for how we run the service, we are the controller.

What we collect

• Account information: names, work email addresses, roles, and sign-in credentials.
• Firm content: matters, files, tasks, deadlines, and anything else your firm chooses to record, which may include personal information about clients and parties.
• Technical information needed to run and secure the service, such as log and session data.
• Billing information, collected and held by Paddle, our reseller and merchant of record. We receive transaction records, not full card details.

How we use it

To provide and secure the service, to support your firm, to process payment through Paddle, and to meet legal obligations. We do not sell personal information and we do not use your firm’s content to advertise.

Data isolation and security

Each firm runs on its own separate database, so one firm’s data is not stored alongside another’s. Access within a firm is enforced at the database level by row-level security, so a user only reaches what their role allows, and confidential matters are walled to their own team. Two-factor authentication is available and can be enforced.

Service providers we use

• Supabase, for database and authentication hosting.
• Vercel, for application hosting.
• Paddle, for payment processing as merchant of record.
• Gmail (Google), to send account and deadline emails.

These providers process data on our or your firm’s behalf. [Data-storage region: confirm this once you set the Supabase and Vercel regions for each firm, then state it here before publishing.]

Retention

We keep firm content for as long as the firm’s subscription is active, and for a reasonable period afterward to allow export, before deletion. Account and billing records are kept as long as needed for legal and accounting purposes.

Your rights

Depending on where you are, you may have rights to access, correct, or delete personal information, or to object to certain processing. For firm content, please contact your firm administrator, since the firm controls that data. For other requests, contact us and we will respond as the law requires.

Changes

We may update this policy and will note the date of the latest version above.

Contact

Privacy questions: yehuda.levy08@gmail.com.