Privacy policy

1. Who we are

My Board of Advisors is operated by TOG Products Inc. (“we,” “us,” or “the Service”), which runs the website at myboardofadvisors.ai, an AI-powered advisory service for business owners and executives. This policy describes how we handle personal information across the site and the member boardroom. It should be read together with our cookie policy and terms of service.

2. Information we collect

Information you provide

• Account information — your name, email address, and password (stored as a one-way hash, never in plain text), or your Google account identifier if you sign in with Google.
• Session content — the decisions, questions, and business context you submit to the advisory council, and the responses generated for you. This may include commercially sensitive information; treat what you share accordingly, and see section 4 for how it is processed.
• Billing information — when paid subscriptions launch, payments will be handled by a payment processor (such as Stripe). We will receive subscription status and limited billing metadata, never your full card number.
• Communications — messages you send through our contact form or by email, including your name, email, and company.

Information collected automatically

• Usage data — session counts, features used, and token usage associated with your account, which we use to enforce plan limits and operate the Service.
• Technical data — IP address, browser type, and similar log data generated by our web server.
• Cookies — as described in our cookie policy. Non-essential cookies are set only with your consent.

3. How we use information

We use your information to:

• Provide the Service — run your advisory sessions, save your history, and let you return to past deliberations
• Operate your account — authentication, security, and support
• Enforce plan limits and, when billing launches, process subscriptions
• Improve the Service — understand aggregate usage patterns (with consent where analytics cookies are involved)
• Communicate with you about your account, changes to the Service, and, with your consent, marketing
• Comply with legal obligations and enforce our terms

4. AI processing of your sessions

This is the most important section of this policy. When you submit a decision to the board, your question and relevant session context are sent to Anthropic's Claude API, the large-language-model service that powers the advisory council. This means:

• Your session content is processed by Anthropic on our behalf to generate the advisers' responses.
• Anthropic's handling of API data is governed by its own commercial terms; as of this policy's date, Anthropic states that API inputs and outputs are not used to train its models by default.
• We store your sessions in our own database so your history works; we do not use your session content to train AI models, and we do not sell it.
• AI-generated advisory content is machine-generated and may be inaccurate. It is not legal, financial, medical, or other professional advice; see our terms of service.

5. Legal bases

Where laws such as the GDPR apply, we process personal information on these bases: performance of a contract (running your account and sessions), legitimate interests (securing and improving the Service), consent (non-essential cookies and marketing, which you may withdraw at any time), and legal obligation (tax, accounting, and lawful requests).

6. Sharing and disclosure

We do not sell personal information. We share it only with:

• Service providers — Anthropic (AI processing, section 4), our hosting provider, and, when billing launches, a payment processor. Each receives only what it needs to perform its function.
• Authentication providers — Google, if you choose to sign in with Google.
• Legal and safety — where required by law, or where necessary to protect the rights, safety, or property of the Service, our members, or the public.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may transfer with the business, subject to this policy.

7. Data retention

We keep your account information for as long as your account exists. Session history is kept so you can return to it; you may request deletion of specific sessions or your entire account (section 9). Contact-form messages are kept as long as needed to handle the inquiry. Log data is retained for a limited period for security and diagnostics. When information is no longer needed, we delete it or anonymize it.

8. Security

We protect your information with industry-standard measures: passwords are stored as salted one-way hashes, sessions are protected against cross-site request forgery, database access is restricted, and connections to the Service and to our AI provider are encrypted in transit. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

9. Your rights

Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you may have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate information
• Delete your information, including your session history
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time, including via the “Cookie preferences” link in the footer
• Not be discriminated against for exercising these rights

To exercise any of these rights, contact us using section 13. We will respond within the timeframe required by applicable law.

10. International transfers

The Service is operated from the United States, and our service providers (including Anthropic) are U.S.-based. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. Children

The Service is designed for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Service evolves — for example, when subscription billing launches. We will update the “Last updated” date above and, for material changes, provide notice on the site or by email before the changes take effect.

13. Contact

For privacy questions or to exercise your rights:

TOG Products Inc. — My Board of Advisors
Email: sales@myboardofadvisors.ai
Web: Contact page