Back to home
LoveBoard

Privacy Policy

Last updated: March 30, 2026

1. Introduction

LoveBoard is operated by Better Version, Inc., a Delaware corporation ("we", "our", or "us"). Our business address is 28 Geary Street, STE 650 Suite #228, San Francisco, CA 94108. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we process your data on the legal bases described below.

2. Information We Collect

We collect information in the following ways:

  • Account information: When you create an account, we collect your name, email address, and password.
  • Workspace data: Information you provide when setting up your workspace, including organization name and branding preferences.
  • Testimonial content: Text, video, and image content submitted by you or your customers through collection forms. This includes video recordings captured through our in-browser recorder.
  • Payment information: Billing details processed securely through our payment provider (Stripe). We do not store your full credit card details.
  • Usage data: Information about how you interact with our Service, including pages visited, features used, and timestamps.
  • Device information: Browser type, operating system, IP address, and device identifiers.

3. Video and Media Data

Our Service includes in-browser video recording for testimonial collection. When a video testimonial is recorded or uploaded:

  • Video files are stored securely on Cloudflare R2 object storage with encryption at rest
  • Videos are associated with the workspace that created the collection form
  • Workspace owners control whether a video is published, archived, or deleted through the dashboard
  • When a workspace owner deletes a video testimonial, the associated media files are permanently removed from storage within 30 days

4. Legal Basis for Processing (EEA and UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

  • Contractual necessity: Processing necessary to provide you with the Service you signed up for, including account management, workspace features, and testimonial collection.
  • Legitimate interest: Processing for purposes such as improving the Service, preventing fraud, and ensuring security — where our interests do not override your fundamental rights.
  • Consent: Where you have given explicit consent, such as for marketing communications or non-essential cookies. You may withdraw consent at any time.
  • Legal obligation: Processing necessary to comply with applicable laws and regulations.

5. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve your experience

6. Information Sharing

We do not sell your personal information. We may share your information in the following situations:

  • Service providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing, email delivery).
  • Legal requirements: When required by law, regulation, or legal process.
  • Business transfers: In connection with a merger, acquisition, or sale of assets.
  • With your consent: When you have given us explicit permission to share your information.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Testimonial data collected through your workspace on behalf of your customers will also be deleted when you delete your account or remove individual testimonials. Media files associated with deleted testimonials are permanently removed from storage within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (TLS) and at rest, regular security assessments, and access controls. However, no method of transmission over the Internet is 100% secure.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our primary infrastructure is hosted in the United States. Our service providers operate globally, and data may be stored in data centers located in the United States or other jurisdictions.

For transfers of personal data from the EEA or UK to countries that have not received an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission. You may request a copy of the relevant safeguards by contacting us at hello@loveboard.io.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us at hello@loveboard.io. We will respond to your request within 30 days.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to correct: You may request that we correct inaccurate personal information.
  • Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, please contact us at hello@loveboard.io. We will verify your identity before processing your request and respond within 45 days.

12. Data Processing Agreement

When you use LoveBoard to collect testimonials from your customers, you act as the data controller and LoveBoard acts as a data processor on your behalf. Our Data Processing Agreement (DPA), which governs our processing of personal data on your behalf, is available at loveboard.io/dpa. The DPA forms part of your agreement with us and includes Standard Contractual Clauses where applicable.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

14. Third-Party Services and Sub-Processors

Our Service integrates with or uses the following third-party services:

  • Stripe for payment processing
  • Cloudflare for content delivery, security, media storage (R2), and web analytics
  • MongoDB for data storage
  • Featurebase for knowledge base and product feedback
  • Google Cloud for cloud infrastructure and related services
  • Google Analytics for website analytics
  • Resend for transactional and product email delivery
  • AppSumo for marketplace, licensing, and partner program operations
  • Datadog for application monitoring, logging, and observability

Each of these services has its own privacy policy governing how they handle your data. These services also serve as our sub-processors for the purposes of GDPR compliance. We will update this list when sub-processors change and notify affected customers in advance.

15. Children's Privacy

Our Service is not intended for children under 16 years of age (or under 13 in jurisdictions where that is the applicable age of consent for data processing). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete that information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@loveboard.io or by mail at:

Better Version, Inc.
28 Geary Street, STE 650 Suite #228
San Francisco, CA 94108
United States