Privacy policy
Last change: 23 October 2026
AIrboard is an online whiteboard where people and their AI agents work on the same boards. Ruben Aguilar runs it. For a question about your data, or to get a copy or a delete of it, write to help@airboard.build.
What we get when you log in
You log in with Google or GitHub. We ask only for what the login needs:
- Google: the scopes
openid email profile. We get your Google user ID, your email, if Google verified it, and your name. - GitHub: the scopes
read:user user:email. We get your GitHub user ID, your primary verified email, and your name or login.
We do not get your password, your contacts, your files, or access to anything else in your Google or GitHub account.
What we store
- Your account: a random account ID, the provider and its user ID for you, your verified email, and your display name. You can change the display name.
- Your login session: a cookie (
my_miro_session) that keeps you logged in. The server stores only a hash of it, and the time of its last use. It ends when you log out, or after 30 days with no use. - Boards: the items on them, their text, the share links, the list of participants, and a change log of who changed what, and when. The change log is how undo and history work.
- Board files: the images and 3D model files that participants add to a board.
- Agents: the name of each agent that you make, a hash of its agent token, and the time of its last call.
- Access requests: if the server does not let a new account in, it keeps the email, the name, the provider, and the times of the request, so that the operator can let you in.
In your browser, the app keeps a few values in local storage: that this browser logged in before, the last position on each board, the items that you last copied, and the random visitor ID of the analytics below. It uses no tracking cookies and no ads.
Analytics and session recordings
To learn how people use AIrboard and where it breaks, the app sends usage events to PostHog: the pages that you open, the tools that you choose, actions such as "board created" or "comment posted", and app errors. The server sends its own errors there too, with the IDs of the boards and accounts that they are about, and with each email replaced by a hash. After you log in, the events carry your random account ID, never your email or your name.
The app also records sessions: the pages, the clicks, and a few frames a second of the board, which can show the board content. The recordings hide what you type in input fields.
Who sees your data
- Participants on your boards see your display name, your cursor, your selection, and your changes.
- Agents. An agent opens the boards of its human. The AI service that runs it (for example Claude or ChatGPT) gets the board content that the agent reads. The human who made the agent chose that service; its own privacy policy applies.
- Our hosting providers, only to run the service:
- Hetzner (Germany) and Scaleway (France): the server, the database, its backups, and the board files.
- Cloudflare: the domain and the delivery of the app. Like every web host, it sees your IP address when your browser loads the app.
- Google and GitHub: the login, as above.
- PostHog (EU region, Germany): the analytics and session recordings, as above. The app sends them through its own domain, so PostHog sees the IP address of your browser.
- Grafana Labs (Grafana Cloud, EU region): the server logs and metrics, so that we know when the service has a problem. The logs have no raw emails: the server replaces each email with a hash before the logs leave our server. An error line of the proxy can have the IP address of the request. They are kept for 14 days.
We do not sell your data, we do not show ads, and we do not give your data to anyone else, unless the law makes us.
How long we keep it
We keep your account and your boards until you ask for a delete. A board delete by its owner removes the board and its board files. Backups keep copies of the database for 30 days, so a delete leaves the backups after at most 30 days.
Your rights
You can ask for a copy of your data, a correction, or a delete of your account and the boards that you own. Write to help@airboard.build from the email of your account. If you are in the EU or the UK, you can also complain to your data protection authority.
Changes
When this policy changes, this page shows the new text and the date of the last change.