BoardLightPrivacy Policy
Effective August 11, 2026
BoardLight provides financial reporting software to nonprofit organizations. This policy explains what information we collect, why we collect it, and what we do with it. We've tried to write it in plain language rather than legal boilerplate.
1. Information we collect
Information you give us
When you submit a demo request or join our early access list, we collect the information in that form: your name, email address, organization, role, approximate operating budget, QuickBooks version, board size, and anything you write in the message field.
Customer financial data
If your organization becomes a BoardLight customer, our connector reads financial data from your QuickBooks Desktop company file — chart of accounts, classes, profit & loss figures, invoices, and aging reports — and stores it so we can present it in your portal.
Our connector is read-only. It issues report and query requests to QuickBooks and nothing else. BoardLight cannot create, modify, or delete any transaction in your QuickBooks file. We also do not collect Social Security numbers, individual donor records, or payroll detail unless they appear in data you explicitly send us.
Account and usage information
For users with portal accounts we store an email address, name, role, and authentication credentials (passwords are stored only as salted hashes — we never store or can recover your plaintext password). We keep server logs of sign-ins and significant actions, which include IP address and timestamp, for security and troubleshooting.
2. How we use information
- To respond to your demo request or contact you about early access
- To provide, maintain, and support the BoardLight service
- To generate the reports, dashboards, and exports your organization uses
- To secure our systems, investigate abuse, and meet legal obligations
We do not sell your information. We do not share it with advertisers, and we do not add you to marketing lists you didn't ask to join. We do not use your organization's financial data to train machine learning models.
3. Who we share it with
We share information only with service providers that help us run BoardLight:
- Hosting and infrastructure — for running the application and storing data
- Website hosting and form processing — for this site and its contact forms
- Email delivery — for transactional messages such as sign-in invitations
These providers are bound by contract to protect your information and use it only to provide services to us. We may also disclose information if required by law, or in connection with a merger or acquisition — in which case we will notify you before your information becomes subject to a different privacy policy.
4. Security
Data is encrypted in transit and at rest. Access to the BoardLight portal is by individual named sign-in only — there are no shared passwords or shared access links anywhere in the product. Access is role-based, so board members see board-level reporting while invoice-level detail is limited to your finance staff. Each customer organization's data is isolated from every other customer's.
No system is perfectly secure, and we don't claim otherwise. If we become aware of a breach affecting your data, we will notify you promptly and tell you what we know.
5. Retention
We keep customer financial data for as long as your organization is a customer. If you cancel, we will retain your data for 30 days so you can export it, then delete it on request or within 90 days of termination. Demo requests and early access signups are kept until you ask us to remove them.
6. Your rights
You can ask us to access, correct, export, or delete your personal information at any time by emailing hello@joinboardlight.com. We'll respond within 30 days. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act; we extend the core rights described here to everyone regardless of location.
7. Cookies and tracking
This marketing site does not use advertising cookies or third-party tracking pixels. The BoardLight application uses a strictly necessary session cookie to keep you signed in. It is not used for advertising and is not shared with anyone.
8. Children
BoardLight is a financial tool used by nonprofit staff and board members. It is not directed at children and we do not knowingly collect personal information from anyone under 18. Although many of our customers are youth-serving organizations, BoardLight does not process youth program participant records.
9. Changes
If we make a material change to this policy, we will update the effective date above and notify active customers by email before the change takes effect.
10. Contact
Questions about this policy, or about how we handle your information, go to hello@joinboardlight.com.