Privacy Policy

BoardReady ("we", "us", or "our") is a digital governance and board platform for SMEs, operated by Early Warning Index, Copenhagen, Denmark. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights, when you use BoardReady at boardready.dk.

We collect: • Account data: your email address, name, and a securely hashed password. • Company data you provide: company name, stage, industry, board size. • Board and assessment data you enter: risk assessments, governance answers, board-fit answers, meeting notes, action items, and details of board members you add (name, email, role). • Payment data: handled by Stripe; we store your subscription status and Stripe customer reference, not your card details. • Automatically collected data: anonymized IP address, browser type, and page views (via Google Analytics with IP anonymization).

Your data is used to: • Provide the platform’s analyses (Risk Communication Score, Board Fit, Governance Check, board material and follow-up). • Generate AI-assisted analysis (see "AI Processing" below). • Manage your account and subscription. • Send transactional and reminder emails (e.g. meeting reminders, trial and subscription notices). • Send optional newsletter updates if you opt in. • Analyze site traffic (via Google Analytics with IP anonymization).

To generate analysis and suggestions, the content you submit for analysis (such as your risk descriptions and company context) is sent to Anthropic (the Claude AI provider). Anthropic processes this data to return the analysis and, under its commercial API terms, does not use it to train its AI models. We do not send your data to any other AI provider.

We retain your account and the data you enter for as long as your account is active, so you can access your history. You can request deletion of your account and all associated data at any time by emailing contact@earlywarningindex.com. We will delete your data within 30 days of receiving your request (your Stripe subscription is cancelled first).

We use the following subprocessors to run BoardReady: • Supabase — database hosting, in the EU (Frankfurt, eu-central-1). • Netlify — application hosting. • Anthropic — AI analysis (Claude). • ZeptoMail (Zoho) — transactional and reminder email. • Stripe — payment processing. • Google Analytics — site analytics (with IP anonymization). We do not sell your data to any third party.

Your account and assessment data are stored in the EU. Some subprocessors (for example Anthropic, which provides the AI analysis) are based outside the EEA. Where data is transferred outside the EEA, the transfer is governed by the subprocessor’s data protection terms, including Standard Contractual Clauses where applicable.

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR): • Right to access your personal data • Right to rectification of inaccurate data • Right to erasure ("right to be forgotten") • Right to data portability • Right to object to processing To exercise these rights, email contact@earlywarningindex.com.

We use the following cookies: • Necessary cookies: store your language preference and cookie consent. • Analytics cookies (optional): Google Analytics cookies to understand site usage. You can manage cookie preferences through our cookie consent banner. Analytics cookies are only set if you accept them.

We host your data in the EU, encrypt it in transit and at rest, hash passwords, and enforce strict per-customer access controls so you can only access your own data. For the full details of our technical and organizational measures, see our security page.

For privacy-related questions or data requests, contact us at: Email: contact@earlywarningindex.com Early Warning Index Copenhagen, Denmark