Shulboard runs digital boards for shuls: a website where a shul's office makes and changes its boards, and a page that shows those boards on the shul's screens. This policy covers shulboard.app and those screen pages. "Shulboard", "we" and "us" mean the business that runs it. To reach us: support@shulboard.app.
The short version
- Shulboard keeps what a shul puts into it, and the accounts of the people who edit it. It uses them to run that shul's boards and nothing else.
- It doesn't sell anyone's information, shows no ads, and has no advertising or analytics trackers.
- Card payments are handled by Stripe. Card numbers never reach Shulboard.
- Google data is used only for the calendar and photo features someone turns on, under Google's Limited Use rules.
- A person can delete their own account, and an owner can delete the whole shul, from inside Shulboard, straight away.
What Shulboard keeps
Your account
Your email address and name; a password, stored only as a one-way scrambled form by our sign-in provider; and, if you sign in with Google, the name, email address and profile picture Google shares for sign-in. If you turn on an authenticator app, what's needed to check its codes. If you add a passkey (signing in with your fingerprint or face), the public half of it, its name (like "Mac") and when it was added and last used; the private half never leaves your device, and your fingerprint or face is checked by the device itself and never reaches Shulboard. Which shuls you belong to, and whether you're an owner or an editor.
The shul and what's on its boards
The shul's name and address, and the map position and time zone worked out from it; its boards, notices, events and flyers, minyanim, Kiddush sponsors, photos and albums; and the names on its yahrzeit boards. Yahrzeit names are of people who have passed away, with their Hebrew names, dates of passing and, if the office adds them, who dedicated the plaque and private notes. A record of who changed what, so a shul can see who edited a notice.
Photos are resized and saved again when they're uploaded, which removes the location and camera details a phone stores in a photo.
Invitations
The email address of each person invited to a shul, and who invited them.
The shul's screens
For each screen: when it last checked in, which version of its board it has, what browser it runs and its size, and its own log of what happened on it (for example, when its connection dropped). When a screen asks for a connection code, the internet address it asked from, so codes can't be requested in bulk.
Payments
The shul's plan, Stripe's numbers for its customer record and subscription, and a history of payments and changes. Card details are typed into Stripe's own pages and kept by Stripe. To keep the free trial to one per person, a one-way scrambled form of the email address that started a trial is kept, even after the account is deleted.
How you found Shulboard
If you came to the site through one of our own links, like one shared in a WhatsApp group or printed on a poster, we keep which link it was, the country you were in and whether you were on a phone. If you then make an account, the link stays with it, and so does your answer to How did you hear about Shulboard, if you gave one. We use this only to see which of our messages work. It isn't shared or used for advertising, and a click is deleted after 13 months.
A visit that didn't come through one of our links isn't recorded at all.
When you contact us
What you send from the contact form or from Get help in the dashboard: your name, email address, shul and message. Get help also sends the page you were on, the shul's plan, how its screens were checking in, your browser, and a screenshot if you add one. We keep it in Shulboard, along with the emails we send back, so we can answer you and follow up. Only the people who run Shulboard can read it. We answer by email, from support@shulboard.app.
What Shulboard doesn't collect
No advertising identifiers, no tracking across other websites, and no analytics service.
How it's used
- To show each shul's boards on its screens, and let its people change them.
- To fetch zmanim, the daily study and calendar events for those boards.
- To send the emails the service needs: confirming an address, signing in, resetting a password, invitations, and notices about the shul's subscription.
- To take payment and keep the shul's plan up to date.
- To find and fix problems, such as a screen that stopped checking in.
- To answer you when you write to us.
What a shul puts on a board is shown on its screens, where anyone in the room can see it, and to anyone who has that screen's link.
Google data
Shulboard asks for access to a Google account only when someone chooses one of these features, and only for what that feature needs.
| Feature | What Shulboard asks Google for | What it does with it |
|---|---|---|
| Continue with Google | Your name, email address and profile picture | Signs you in. Nothing else is read. |
| Calendars | calendar.app.created and your email address | Reads and writes only the calendars Shulboard itself made in that account: shows their events on the shul's boards, and adds, changes and deletes events in them when someone does so in Shulboard. No other calendar in the account is seen. The access is kept, encrypted, until someone presses Disconnect Google or the shul is deleted. |
| Import from Google Photos | photospicker.mediaitems.readonly and your email address | Copies only the photos you choose in Google's own picker into the shul's album. Nothing else in the library is seen. The access lasts about an hour, is held only in a cookie in your browser, and is never stored by Shulboard. |
Who Google data is shared with. Google data is shared, transferred or disclosed only to these, and to nobody else:
- Supabase and Vercel, the companies that run Shulboard's database, file storage and hosting (listed under Who helps run Shulboard). They store and serve it for Shulboard and have no other use of it.
- The shul's own boards, screens and members. Events read from a Google calendar, and photos imported from Google Photos, go on the shul's boards, which show on its screens, where anyone in the room can see them, and in the dashboard to the shul's members. A board's picture link a member asks for shows that board to whoever holds the link for 30 minutes.
- An AI app a member of the shul connects (Claude, ChatGPT or another), only once that member connects it and only when they ask it: it can read the shul's events, including those from a Google calendar, exactly as the member can in Shulboard. Shulboard sends it nothing on its own.
- Google itself, when Shulboard adds, changes or deletes an event in a calendar it made in the account.
- Where the law requires it, or whoever takes over Shulboard if it's ever sold, under this same policy.
Google data isn't sold, isn't used for advertising, isn't used to train AI models, and isn't transferred to any other app or service. Nobody at Shulboard reads it unless you ask us to look into a problem with it, it's needed for security, or the law requires it.
Shulboard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
To take the access back, press Disconnect Google (or Disconnect, on an album) in Shulboard, or remove Shulboard at myaccount.google.com/permissions. Photos already imported stay in the album until someone deletes them.
AI apps you connect
A member of a shul can connect an AI app, such as Claude or ChatGPT, to Shulboard from Connect an AI in Shulboard's menu, and then ask it about the shul's screens, notices, events, Kiddush sponsors, yahrzeits, davening times and zmanim, or to change them. Nothing is connected until that person signs in to Shulboard and presses Connect, and the app works with the one shul they chose.
- What the app can reach. Only what that person could see and change in Shulboard themselves, in that one shul, and only when they ask it. It can't change the shul's screens, settings, members or billing. Shulboard never sends an app anything on its own.
- What Shulboard keeps. Which apps you've connected, to which shul, and when each was connected and last used; the app's name and where it signs in from; the sign-in keys it uses, stored only in a one-way scrambled form; and a record of each thing an app did: which action, a short summary of its settings and whether it worked, never what the shul typed. When something goes wrong, or you ask for something it can't do, the app may offer to pass a short note to the Shulboard team (what was wanted and what happened), and sends it only if you say yes; we read it to fix Shulboard. A board's picture an app asks for opens from a link that works for 30 minutes.
- What the app's company keeps. What you say to an AI app, and what it reads from Shulboard to answer you, is handled by the company that makes the app, under its own privacy policy, not this one: for example Anthropic's for Claude and OpenAI's for ChatGPT.
- Stopping it. Connect an AI, Disconnect stops an app straight away. An app unused for 90 days is disconnected by itself, and leaving a shul stops every app working with it.
Shulboard's own team uses a separate connection, Shulboard admin, to read what shuls send us, as described under Who helps run Shulboard; it's open only to the people who run Shulboard.
Who helps run Shulboard
These companies handle information for Shulboard, each only for the job listed.
| Company | What for | What it handles |
|---|---|---|
| Supabase | Database, sign-in and file storage | Everything Shulboard keeps, listed above. |
| Vercel | Hosting the website and screen pages | Each request to the site, including internet addresses, in its logs. |
| Stripe | Payments | Owners' names, email addresses and card details, typed into Stripe. See Stripe's privacy policy. |
| Resend | Sending email | The address and words of each email Shulboard sends. |
| Anthropic | Finding and fixing problems | We use Claude, Anthropic's AI, to read and sort the messages people send us and Shulboard's own records of what went wrong. Email addresses, phone numbers, links, Google data and the name of whoever wrote are left out of what it sees. Under Anthropic's commercial terms, none of it is used to train its models. See Anthropic's privacy policy. |
| LocationIQ | Looking up the shul's address | The address typed in the shul's settings, to find its map position. |
| Sign-in, Calendars, Google Photos, and our email inbox | Only when you use those features, as above, and the messages you send us. | |
| YouTube (Google) | Playing a video a shul puts on a board | When a board shows a YouTube video, the screen plays it from YouTube's privacy-enhanced player (youtube-nocookie.com), which sees the screen's internet address. To show the video's title in the editor, Shulboard asks YouTube for it by the video's link. See Google's privacy policy. |
Zmanim and the daily study are fetched from Chabad.org's published feeds by the shul's ZIP code or city and the dates needed; a shul that chooses Hebcal's times has them worked out by Shulboard itself from its address, with nothing sent anywhere. No names, accounts or other personal information are sent.
Shulboard doesn't share anyone's information with anyone else, except where the law requires it, or with whoever takes over Shulboard if it's ever sold, under this same policy.
Cookies and storage
Only what makes the site work, and one that remembers which of Shulboard's own links brought you here. None for advertising or analytics services, and nothing that follows anyone around the web.
| Cookie | Why | How long |
|---|---|---|
Sign-in (sb-…) | Keeps you signed in | Until you sign out, renewed while you use it |
shulboard_org | Remembers which shul you were working on | A year |
shulboard_google_consent | Finishes connecting a Google calendar | 10 minutes |
shulboard_google_photos… | Holds the Google Photos access while you import | About an hour |
shulboard_from | Remembers which Shulboard link brought you here, like one shared on WhatsApp, so we can tell which of our messages lead to new shuls | 90 days |
A screen also keeps its board, photos and a short log in its own browser's storage, so it keeps working through an internet outage. A browser that has signed in with a passkey remembers that it has, in its own storage, so the sign-in page can offer it first.
How long it's kept
| What | For how long |
|---|---|
| A shul's content, and its members' accounts | Until the shul or the account is deleted |
| Deleted photos, albums, boards, notices and yahrzeit names | 30 days in Recently deleted, then deleted for good |
| Uploads that failed or were left unfinished | Deleted after a day |
| Each screen's own log | 14 days |
| Shulboard's log of its background jobs | 30 days |
| Unused screen connection codes | Deleted a day after they expire |
| Used connection codes, with the address they were asked from | Until the screen is deleted |
| Screen check-ins, the record of who changed what, and payment history | Until the shul is deleted |
| The scrambled email that marks a free trial as used | Kept, so a trial can't be started again |
| A click on one of Shulboard's own links | 13 months |
| A connected AI app | Until it's disconnected, or 90 days after it was last used |
| The record of what each AI app did | 90 days |
| A note an AI app passed on to the Shulboard team | Until the shul is deleted |
| Which link brought an account, and how the shul heard about Shulboard | Until the account or the shul is deleted |
| Routine backups of the database | 7 days |
Copies can remain in our database provider's routine backups for up to 7 days, then those backups are deleted too.
Deleting
You don't need to ask us. Everything below happens in Shulboard, straight away.
- One thing. Delete it where it is. Photos, albums, boards, notices and names wait 30 days in Recently deleted, where you can put them back or delete them for good sooner.
- The whole shul. An owner deletes it from Shul settings, Delete this shul. Its subscription is cancelled first, then the shul and everything in it is deleted.
- Your account. Delete it from Account, Delete my account. If you're a shul's only owner, make someone else an owner or delete the shul first.
If you can't sign in, email support@shulboard.app and we'll do it for you.
Keeping it safe
Everything travels encrypted. Each shul can see only its own information, enforced by the database itself. Calendar links and Google access are stored encrypted. Anyone can add an authenticator app for a second sign-in step.
Your rights
You can see, correct, download or delete the information about you. Most of it is in Shulboard itself; for anything else, email us. Depending on where you live, you may have further rights under laws such as the GDPR or the California Consumer Privacy Act, including to complain to your data protection authority.
A shul decides what goes on its boards. If you're named on a shul's board and want that changed, ask the shul, or write to us and we'll pass it on.
Children
Shulboard is for the people who run a shul, and isn't meant for children under 13. We don't knowingly collect their information; if you think a child has given us some, email us and we'll delete it.
Changes
If this policy changes in a way that matters, we'll update the date at the top, and email the shuls' owners before the change takes effect.
Contact
support@shulboard.app, or the contact form.