Chalkroom Privacy Policy

Effective date: 25 October 2026

Who we are

Chalkroom, including Chalkroom Board and Chalkroom LMS, is provided by Ali Bin Mazhar Sultan, trading as Chalkroom, who is responsible for the personal data described here. On Google Play the developer name is Ninja_Developer. For privacy questions or account-deletion requests, contact ninjadeveloper35@gmail.com.

Who can use Board

Board is intended for people aged 13 or older, including guests. If the minimum age for using an online service without parental permission is higher where you live, follow that requirement. We do not offer Board accounts or guest access to children under 13. Contact us if you believe a child under 13 has provided personal data so we can investigate and remove it.

Information we process

For an account, we process your name, email address, account identifier and authentication information. Passwords are stored as salted hashes. If you use an existing Chalkroom LMS account, Board uses that account's identity and organisation association to determine access.

We store boards you create or edit, including text, drawings, uploaded images, sharing permissions and edit history. We process board and AI usage counts to enforce your plan. For guests, we process a display name, a guest-session identifier, board activity and live cursor positions. A nickname is enough for guest participation.

Our server and hosting services process connection and request information, such as IP addresses, timestamps and security or error logs, to operate and protect the service. The Android app stores authentication tokens and preferences on your device using the operating system's storage facilities. We do not receive your device's biometric templates.

How we use information

We use this information to sign you in, save and synchronise boards, enable sharing and live collaboration, deliver account emails, enforce plan limits, provide requested AI features, answer support requests, and prevent abuse. If you join the Board Pro waitlist, we use your email to contact you about that waitlist; you can ask to be removed.

Who receives information

People with access to a board can see its contents and participants' display names and live cursors. A person holding an active share link may be able to join, view or edit according to its permissions. Share links only with people you intend to give access to.

Payments

When you buy a plan by card or online, Paddle.com is the Merchant of Record: Paddle sells the plan on our behalf and processes your payment details, billing address and tax information under its own privacy policy at https://www.paddle.com/legal/privacy We do not receive or store your full card number. Paddle shares with us what we need to provide the plan: your name, email address, country, the plan and its price, payment and subscription status, and order identifiers.

For rupee passes, Safepay processes the payment and shares the payment status and order details with us. For bank transfers we keep the invoice and transfer reference. We keep payment records for as long as tax and accounting law requires.

Our hosting and email-delivery providers process data to operate Board. Account verification and password-reset emails are sent through Brevo.

When you request an AI feature, the request and the relevant board text, drawing information and, for some features, a page or selection image are sent through OpenRouter to the configured model provider. This processing is optional: you can use ordinary drawing and collaboration without requesting AI. Do not put confidential or sensitive personal information in an AI request. Provider processing is also governed by their applicable policies.

The current release does not use advertising SDKs. Product analytics through PostHog are not enabled in this release. If we change data practices, we will update this policy and the relevant disclosures. We do not sell your personal data or use board content for third-party advertising.

Storage, security and retention

Board data and uploads are stored on our server. Connections to the Board service use HTTPS and secure WebSockets. Access controls limit who can open a board. No storage or transmission system is completely secure. Hosting, email and AI providers may process data outside your country.

We keep account and board information while needed to provide the service, until you delete it or ask us to delete it, subject to necessary security or legal retention. Board Free edit history is kept for 7 days; this does not automatically delete the current board. Older boards can become read-only when a plan limit is reached.

Deleting an account removes its active account record, owned boards and their uploaded files. Other people's boards are not deleted by your account deletion, and content you contributed to their boards may remain with those boards. Restricted backups may retain earlier copies until those backups are replaced. Limited information may be retained where necessary to resolve security incidents or meet applicable legal obligations.

Your choices and deletion

You can update your account information where controls are available, revoke share links you manage, delete your boards, and delete a personal account from Settings > Delete account. In the web app, sign in at https://board.chalkroom.pro and open Settings. Organisation-managed accounts must be handled by the organisation administrator.

You can also request deletion without installing the app by emailing ninjadeveloper35@gmail.com with the subject "Chalkroom Board account deletion" from your registered email address. We will verify ownership before acting. Do not send your password. See https://board.chalkroom.pro/delete-account.html for the steps and scope.

Contact us at the same address for questions about access, correction or deletion of your information. This policy is available at https://board.chalkroom.pro/privacy.html