Last updated: October 25, 2026
Operated by: Aquala Holdings Ltd
Registered address: Anexartasias 16, Limassol, Cyprus
Privacy contact email: hi@boardspace.ai
Support email: hi@boardspace.ai
Welcome to Boardspace.ai ("Boardspace", "we", "us", "our"). This Privacy Policy (the "Privacy Policy" or the "Policy") explains how we collect, use, retain, share, and protect personal information relating to users, visitors, buyers, creators, creator applicants, and any other person using the website, applications, services, AI tools, community, galleries, and any other Boardspace.ai feature (collectively, the "Services").
Please read this Policy carefully. If you do not agree to this Policy, in whole or in part, please do not use the Services.
The Services are offered and operated by Aquala Holdings Ltd, a company registered in Cyprus. For relevant privacy laws, Aquala Holdings Ltd is generally the "data controller" in relation to the personal information described in this Policy, unless stated otherwise.
This Policy applies to personal information we collect when:
This Policy does not apply to third-party websites, services, or tools that are not under our control, even if links to them appear through the Services.
We may collect information you provide to us, including:
When you use the Services, we may automatically collect:
We may receive information from third parties, such as:
Some files, images, videos, briefs, or messages you upload may include sensitive information, business information, planning information, property details, commercial information, or information relating to third parties. Please upload only information you are authorized to share, use, and process.
We do not proactively request special categories of sensitive personal information; however, if you choose to include such information in uploaded content, you confirm that you have an appropriate legal basis to do so.
We may use your personal information for the following purposes:
Where required by applicable law, we process personal information on one or more of the following bases:
Where processing is based on consent, you may withdraw consent at any time, provided that withdrawal does not affect processing lawfully carried out before withdrawal.
When you use Boardspace AI tools, we may process prompts, input files, images, videos, outputs, and related content for:
Where available in the product, we will try to provide control mechanisms or opt-out options for certain uses of content for model or system improvement. However, some technical processing may always be necessary to operate the service, secure it, prevent abuse, comply with legal obligations, and maintain system integrity.
If you choose to publish work, projects, images, videos, comments, profiles, portfolios, or other content in public areas of the platform, that information may become accessible to other users or to the public. Publicly posted content may include, depending on context:
Please carefully consider what information you choose to publish. When you publish content publicly, others may be able to view, share, or quote it, subject to legal limitations and our terms of use.
We may share personal information with:
Storage providers, cloud infrastructure providers, analytics providers, support providers, security providers, CRM providers, email and messaging providers, monitoring providers, payment providers, AI providers, media storage providers, and other providers that help us operate the Services.
Where a service requires interaction between a buyer, creator, team member, or project collaborator, we may share information reasonably required to perform the service, such as display name, operational communication, brief, deliverables, work status, or delivery details.
When you choose to publish public content, information may be displayed to other users or the public.
Accountants, consultants, lawyers, auditors, and security advisors, subject to appropriate confidentiality obligations.
Where required by law, court order, regulatory request, legal process, or to protect rights, safety, property, or legitimate interests.
In case of merger, acquisition, asset sale, investment, reorganization, or ownership change, personal information may be transferred as part of the transaction, subject to reasonable safeguards.
Where you explicitly ask us to share information with a specific third party.
We do not sell personal information in the commonly understood sense of "selling data" for monetary consideration, unless explicitly stated otherwise.
The Services may rely on AI providers, storage providers, payment providers, messaging providers, analytics providers, community providers, and external integrations. These providers may process personal information on our behalf or according to the applicable legal relationship.
We are not responsible for independent policies or practices of third parties that do not act on our behalf as processors; therefore, we recommend reviewing the privacy policies of relevant external services as well.
We may use cookies, pixels, local storage, SDKs, tags, and similar technologies for:
Where required by law, we will request your consent for non-essential cookies. You may also manage some preferences through browser settings or consent tools we provide.
We retain personal information for as long as reasonably required for the purposes for which it was collected, including:
When information is no longer required, we will delete it, anonymize it, or keep it in a restricted form where legally required.
We implement reasonable technical, organizational, and managerial measures designed to protect personal information against unauthorized access, loss, alteration, misuse, disclosure, or destruction. These measures may include access controls, encryption, permission separation, monitoring, backups, vendor management, incident response processes, and employee training.
However, no security method is perfect, and we cannot guarantee absolute security.
Your personal information may be transferred, stored, or processed outside your country of residence, including in Cyprus, the European Union, the United States, and other countries where we, our affiliates, or our providers operate. Where required by law, we will implement appropriate safeguards for international transfers, such as contractual mechanisms, protective commitments, or other legal bases.
Subject to applicable law, you may have the following rights:
To exercise your rights, you may contact us using the contact details in this Policy. We may request identity verification information before processing your request.
If you are located in Israel, you may have additional rights under the Israeli Protection of Privacy Law, 5741-1981, related regulations, and guidance of the Israeli Privacy Protection Authority, as updated from time to time. We will seek to handle requests lawfully and within a reasonable time, subject to identity verification, request basis review, and relevant legal exceptions.
The Services are not intended for children under 13, and we do not knowingly collect personal information from children under that age. If we learn that we collected personal information from a child under 13 without required legal authorization, we will take reasonable steps to delete it promptly.
If you believe a child has provided us personal information in violation of this Policy, please contact us.
The Services may include links, embeds, integrations, or referrals to external websites and services.
We do not control the privacy policies or practices of such third parties and are not responsible for them.
We recommend reviewing the relevant policy of each external service before using it.
We may update this Policy from time to time to reflect legal, operational, business, or technological changes.
When we make material changes, we will take reasonable measures to notify you, for example through a website notice, in-account notice, or email.
The date at the top of the Policy indicates when it was last updated. Continued use of the Services after changes take effect is subject to applicable law and required consent procedures.
For questions, requests, or complaints regarding this Privacy Policy or how we process personal information, you may contact us:
Boardspace.ai / Aquala Holdings Ltd
Anexartasias 16, Limassol, Cyprus
Privacy email: hi@boardspace.ai
Support email: hi@boardspace.ai
[Phone / WhatsApp — listed on the support page]
We aim to respond within a reasonable time, and in some cases within timelines required by law.
If you choose to link Boardspace to ChatGPT, we use your authenticated account identity and connection identifiers to display basic account details and balance and associate actions with the correct account. Video creation and job-history access require separate permissions. Linking an account does not itself approve video generation.
For connections whose consent screen requests permission to share email, we send OpenAI your verified Boardspace account email address and its verified status only after your separate approval. This identifies the account and supports email-domain restrictions in a ChatGPT organizational workspace. This permission is not automatically added to an existing connection. Disconnecting stops future access through that connection but does not delete information already shared with OpenAI.
For video creation, we process the JPG/PNG images you choose to attach through ChatGPT: a starting image and optional ending image, or up to ten reference images. We also process image order and roles, the prompt, generation settings, quote and your approval, job and result identifiers, execution status, and charge/refund records for your existing Boardspace balance. These support processing, recovery, history, duplicate-charge prevention, security and support. These operations do not require your complete chat transcript; we use only the details and files sent to the tools.
After you approve the quote, input images and the prompt are sent to Kie.ai to run the Kling video model. OpenAI operates ChatGPT and receives tool-call results, including result links when provided. Hosting, storage and database providers process data to operate the integration. Private storage in Boardspace does not prevent disclosure of media to the providers needed for generation. External providers also process and retain information under their applicable terms and policies.
Input images and video outputs in this ChatGPT integration use private Boardspace storage. Image links sent to the provider last one hour; temporary video-result links last 15 minutes. The result page requires sign-in to the account that owns the result. Anyone holding a temporary media link can use it during its validity. Link expiry does not delete the file or a downloaded copy. This description applies to the ChatGPT integration and does not change sharing settings for content created in ordinary Studio or published in the gallery.
As of this update, this integration does not automatically delete input images, prompt and settings content, or quote and job records after a fixed period. They are retained without a fixed automatic deletion date for account history, recovery, support and operation. Completed videos remain in the account until a deletion request is processed. The usable lifetime of an import or quote is not the retention period of its file or record.
You can request access, correction or deletion of integration data by contacting hi@boardspace.ai. Processing may require identity verification and checking unfinished jobs. Receipt of a request does not confirm completed deletion. Minimal records needed for charges, refunds, duplicate prevention or legal obligations may be retained separately; deletion does not reverse a charge for generation already performed. Provider copies and backups are handled separately under the policies and arrangements that apply to them. Deletion in Boardspace is not a promise to recall copies already shared or downloaded.
You can disconnect through Boardspace connection settings. Disconnecting stops future access through that connection but does not itself delete images, videos or history, or invalidate temporary links already issued. For a separate deletion request or privacy questions, contact hi@boardspace.ai.
If you do not agree to this Policy, do not use the Services. Continued use is subject to applicable law and policy updates.
Last updated: October 25, 2026