How Reboardly handles
your board data.

The controller for Reboardly is David Weber IT-Solutions, owner David Weber, Hillstr. 65, 88326 Aulendorf, Germany. Contact: hello@reboardly.com.

Verantwortlicher fuer Reboardly ist David Weber IT-Solutions, Inhaber David Weber, Hillstr. 65, 88326 Aulendorf, Deutschland. Kontakt: hello@reboardly.com.

• reboardly.com: marketing website, legal pages, support contact
• miro.reboardly.com: Miro app frontend, backend, OAuth, uploads, jobs
• phototoboard.com: redirect-only domain to Reboardly

• technical logs such as IP address, user agent, timestamps, request paths, and errors
• contact and support messages you send to us
• Miro OAuth/account identifiers, team/workspace context, and OAuth tokens
• uploaded source whiteboard photos or selected Miro board images
• small thumbnails retained for job history
• generated board evidence, previews, scene/result data, import events, and job metadata
• usage-limit records for the free beta quota
• ratings, written feedback, and optional diagnostic review consent

We process data to provide and secure Reboardly:

• provide the Miro app, uploads, AI processing, previews, and generated board results
• authenticate users with Miro OAuth and keep app sessions working
• show job history and let users reopen or delete previous jobs
• enforce the free beta quota of 30 processing requests per fixed 24-hour window
• answer support, privacy, deletion, and security requests
• detect abuse, investigate errors, and keep the service reliable
• review diagnostic material only when the user explicitly opts in

The legal bases are contract performance or pre-contractual use of the free beta service (Art. 6(1)(b) GDPR), legitimate interests in operating and securing the service (Art. 6(1)(f) GDPR), consent for optional diagnostic sharing where applicable (Art. 6(1)(a) GDPR), and legal obligations where they apply (Art. 6(1)(c) GDPR).

The marketing website does not use marketing analytics, tracking pixels, heatmaps, or third-party embedded media. Fonts and visual assets are served by us.

The Miro app uses technically necessary session cookies, short-lived authentication tokens, and browser storage needed for login, WebSocket authentication, and app operation.

Reboardly currently uses the Gemini API / Google Cloud AI services to process board images and generate editable board evidence. Uploaded images and model inputs are sent to Google for this purpose. Google states in its Vertex AI documentation that Google will not use customer data to train or fine-tune AI/ML models without prior permission or instruction. Google may process service data and may apply abuse-monitoring or caching practices depending on the applicable Google Cloud terms and service configuration.

Where Google acts as a processor for Google Cloud services, processing is governed by the applicable Google Cloud Data Processing Addendum and related Google Cloud terms.

Other service providers are Hetzner Cloud for hosting in Germany and Miro for the app platform, OAuth, and board operations. We do not use separate analytics or error-tracking providers at launch.

Reboardly hosting is in Germany. Miro and Google may process data outside Germany or the EU/EEA according to their own infrastructure, terms, and transfer mechanisms. We do not know or promise a single fixed Google processing region for Gemini API requests.

Inside Reboardly Account you can delete:

• jobs older than 1, 2, 7, 30, or 90 days
• all jobs
• all Reboardly account data, including your account record

Depending on where you live, you may have rights to access, correct, delete, restrict, export, object to processing, withdraw consent, and complain to a data protection authority. Email hello@reboardly.com for privacy requests. We may ask for information needed to verify the account before disclosing or changing data.

If you uninstall or deauthorize the Miro app before deleting data in Reboardly, email us with "data deletion" in the subject and we will handle the request through the same deletion process.

You can lodge a complaint with a data protection supervisory authority. For the controller in Baden-Wuerttemberg, the relevant authority is Der Landesbeauftragte fuer den Datenschutz und die Informationsfreiheit Baden-Wuerttemberg (LfDI BW), baden-wuerttemberg.datenschutz.de.

You may voluntarily send screenshots, source images, generated results, or logs by email when asking for support. Please do not send sensitive information unless you are comfortable sharing it with us for support handling.