Privacy policy
Last updated 30 September 2026
This policy explains which personal data we process when you visit this website, join the waitlist for the EaseKit closed beta, or use features of the EaseKit app that talk to this website. We keep it short because we collect little: no advertising, no tracking cookies, no data sales.
Who is responsible
Boardly Systems OÜTartu mnt 67/1-13b, 10115 Tallinn, Harju maakond, Estonia
Registry code 17561458
hello@board.ly
For any question about your data, or to use one of your rights below, write to hello@board.ly.
Visiting the website
The site is hosted by Vercel Inc. (USA). When you open a page, Vercel processes technical data your browser sends — IP address, time, requested page, browser and device type — to deliver the page and keep the service secure. Our own server code uses your IP address only for a moment, in memory, to limit abusive request rates; we do not store it. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
We set no cookies. The site remembers your light or dark theme choice in your browser's local storage; it never leaves your device. Fonts are served from this site, not from third parties.
Waitlist and beta invitations
If you join the waitlist we process your email address to confirm your sign-up (double opt-in), to invite you to the closed beta and to send you news about EaseKit. Your address is stored with our email provider Resend (Resend, Inc., USA); whether and when we invited you is stored with Vercel. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to hello@board.ly; we then delete your address. Otherwise we keep it until the beta ends and delete it when it's no longer needed.
Share links from the app
When you create a share link in the EaseKit app, the shared animation is uploaded to this website and stored with Vercel, so that anyone with the link can view it. Only share what you want others to see. We store nothing else about you with it. Ask us at hello@board.ly and we delete a shared animation. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).
Viewers of a share link can leave comments and replies. We store the name you type, your comment, the moment and spot it points at, and a random token kept in your browser so you can edit or delete your own comments later. The owner of the link sees them in the app, where they may be passed to the owner’s AI provider as part of an AI request. Legal basis: performance of the service (Art. 6(1)(b) GDPR).
Purchases
Licenses are sold through Polar (Polar Software Inc., USA), which acts as the merchant of record: it handles the checkout, payment, taxes, invoices and your license key under its own privacy policy. We receive your email address, what you bought and the license status, to deliver and support your license. We never see your card details. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legal duty to keep records (Art. 6(1)(c) GDPR).
Usage statistics from the app
If you turn on usage statistics in the app, it sends anonymous events — which features were used, never what you made, your name or your email — to this website, where they are stored with Vercel by day. They help us decide what to improve. Legal basis: your consent (Art. 6(1)(a) GDPR); turn it off in the app at any time.
AI features
The app's chat talks to the AI provider you choose (for example Anthropic or OpenAI) with your own account or key, directly from your Mac. Those requests do not pass through our servers; the provider's own privacy policy applies.
Transfers outside the EU
Vercel, Resend and Polar are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time with effect for the future. You may also complain to a data protection authority — in Estonia, the Andmekaitse Inspektsioon (Data Protection Inspectorate, aki.ee), or the authority where you live or work.
Changes
We update this policy when what we do changes. The date at the top shows the latest version.