Bordyapp

Privacy Policy

Last updated: 2026

Bordy is a workspace and business management platform designed to help individuals and teams organize their work, projects, content, meetings, clients, documents, contracts, invoices, files, reports, and related business activities.

This Privacy Policy explains how Bordy collects, uses, stores, shares, and protects personal information when you access or use Bordy.

1. Information We Collect

The information we collect depends on how you use Bordy. It may include:
  • Name and email address
  • Account and login information
  • Workspace names and settings
  • Team member names, emails, roles, and invitation status
  • Projects, tasks, deadlines, priorities, notes, and activity
  • Meeting information and meeting notes
  • Content plans, captions, schedules, approvals, and reports
  • Social media and content-management information
  • Brand information and assets
  • Client and contact information
  • Contracts and document information
  • Invoice and payment-status information
  • Expense and service information
  • Reports and business-management information
  • Files, documents, images, videos, and other media uploaded or saved to Bordy
  • Shared links and external references
  • Information provided through support or other communications
  • Technical, security, device, browser, login, and activity information reasonably required to operate and protect Bordy
You decide what information you add to your Bordy workspace.

2. Cloud Storage

Bordy provides limited cloud saving for certain workspace information, documents, files, media, and other content. Storage limits may apply and may vary depending on the account, feature, or service available to you.
Some information may also remain on your device or be accessed through third-party services rather than being permanently stored by Bordy. Because Bordy provides limited cloud storage, users should maintain appropriate copies of important business records, documents, and files where necessary.

3. How We Use Information

We may use information to:
  • Create and manage Bordy accounts
  • Authenticate users
  • Provide and maintain Bordy workspaces
  • Save and synchronize workspace information
  • Enable collaboration between authorized workspace members
  • Provide projects, tasks, meetings, approvals, and planning tools
  • Provide content-management and scheduling features
  • Store files and documents
  • Provide client and business-management features
  • Provide contracts, invoice, expense, service, and reporting tools
  • Carry out actions requested by users
  • Manage workspace permissions
  • Maintain account and platform security
  • Detect and prevent misuse or unauthorized activity
  • Troubleshoot technical problems
  • Respond to support requests
  • Maintain, develop, and improve Bordy
  • Comply with applicable legal requirements
We do not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted by applicable law.

4. Legal Bases for Processing

Where privacy laws such as the GDPR or UK GDPR apply, Bordy may process personal information on one or more of the following legal bases:
  • Providing the service or performing a contract with you
  • Our legitimate interests in operating, securing, maintaining, and improving Bordy
  • Compliance with legal obligations
  • Consent, where consent is required
Where we rely on consent, you may withdraw your consent in accordance with applicable law. Withdrawing consent does not affect processing that was lawful before consent was withdrawn.

5. Workspace and Customer Data

Users and organizations decide what information they place into their Bordy workspaces. Workspace information may include personal information relating to clients, customers, employees, contractors, collaborators, suppliers, or other individuals.
Where a business, organization, or user decides why and how personal information is processed within its workspace, that party may act as the data controller or equivalent responsible party under applicable privacy law. Where Bordy processes that information on behalf of the customer, Bordy may act as a processor, service provider, or equivalent role under applicable law. Users and organizations are responsible for ensuring they have an appropriate lawful basis, permission, or authority to add and process personal information within Bordy.

6. Workspace Access

Information saved within a workspace may be visible to other authorized workspace members depending on their roles and permissions.
Workspace owners and administrators are responsible for inviting appropriate people, assigning appropriate roles and permissions, reviewing access, removing access when it is no longer required, and protecting confidential client and business information. Users should only access information that they are authorized to access.

7. Files, Documents and Uploads

You are responsible for files, documents, images, videos, media, and other materials you upload or save to Bordy. You should only upload information that you have the right or authority to use and store.
Some uploaded materials may contain personal, confidential, or business information belonging to another person or organization. You are responsible for making sure that you have appropriate permission or another lawful basis to store that information. Bordy should not be used as the only permanent archive or backup location for important business records.

8. Third-Party Services and Integrations

Bordy uses service providers including Google Firebase for authentication and database services, Cloudflare for hosting, security, session storage, and private file storage, Resend for transactional email delivery, and Gumroad for checkout, payment administration, and purchase verification. These providers may process account, technical, communication, file, or purchase information only as needed for their role.
Where you choose to connect Bordy with another service, information may be exchanged with that service as reasonably necessary to provide the requested functionality. Third-party services operate under their own terms, privacy policies, permissions, and security practices. Bordy does not control their availability or independent practices.

9. Social Media and External Platforms

Where Bordy allows users to connect social networks or other publishing platforms, information may be shared with those platforms when necessary to carry out actions requested by the user, including planning, scheduling, approving, or publishing content.
Your use of a third-party platform remains subject to that platform's own terms and privacy policies. Permissions may normally be removed through Bordy or the relevant third-party service where that functionality is available.

10. Payments and Financial Information

Bordy may provide features that allow users to create invoices, record expenses, track payments, manage services, or organize other business information. Purchases for Bordy access and optional cloud storage are completed through Gumroad. Gumroad handles checkout and payment information under its own terms and privacy policy, while Bordy receives purchase details needed to confirm access, such as the purchaser email, product, purchase status, and storage selection.
Bordy does not need to store full payment-card details where those details are handled directly by an external payment provider.

11. How We Share Information

Bordy does not sell personal information. We may share information where reasonably necessary to:
  • Provide and operate Bordy
  • Store and secure information
  • Allow authorized workspace collaboration
  • Provide a feature or integration requested by the user
  • Work with service providers supporting Bordy
  • Process payments through an external provider
  • Respond to lawful requests or legal obligations
  • Investigate security incidents or misuse
  • Protect Bordy, our users, or others where permitted or required by law
Service providers are provided with access only as reasonably necessary for the services they provide.

12. International Data Transfers

Bordy may be used by people and organizations in different countries. Personal information may therefore be stored or processed in a country different from the country where you live.
Where applicable law requires safeguards for international transfers of personal information, Bordy will use appropriate safeguards as required by that law. Your applicable privacy rights are not removed simply because information is processed in another country.

13. Data Retention

We keep personal information only for as long as reasonably necessary to provide Bordy, maintain accounts and workspaces, secure the service, respond to support issues, prevent misuse, meet legal obligations, and resolve disputes. Account and workspace content is generally retained while the relevant account or workspace remains active. Short-lived authentication codes, demo sessions, and rate-limit records expire automatically. Transactional, security, dispute, tax, or accounting records may be retained for the period required by law or reasonably needed to establish or defend legal claims.
Deletion from active systems may not immediately remove copies from limited backups. Backup copies are protected from ordinary use and removed or overwritten through normal retention cycles unless preservation is legally required.

14. Account and Workspace Deletion

Users may delete certain information, leave workspaces, remove members, or request account deletion. An account-deletion control removes the authentication account, but information held in shared workspaces, cloud files, transaction records, email records, or other systems may require a separate verified deletion request while Bordy completes its unified deletion process.
If information is part of a shared workspace, it may remain where another person or organization controls that workspace. To request access, correction, export, deletion, or restriction across Bordy's systems, contact the address below. Requests are subject to identity verification and lawful retention exceptions.

15. Data Security

Bordy uses reasonable technical and organizational measures designed to protect account and workspace information. These measures may include authentication, access controls, secure infrastructure, and other safeguards appropriate to the service.
No online service or storage system can guarantee absolute security. Users are also responsible for protecting their passwords, login credentials, devices, workspace permissions, and connected accounts.

16. Security Incidents

If Bordy becomes aware of a security incident involving personal information, we will investigate and take appropriate steps. Where applicable law requires notification to affected users, organizations, or regulatory authorities, Bordy will provide the required notifications.

17. Cookies and Similar Technologies

Bordy may use essential cookies, local storage, session storage, and similar technologies where necessary to provide and secure the service. These technologies may be used to keep users signed in, maintain account sessions, remember essential preferences, support security, and enable core platform functionality.

Bordy does not use these technologies for advertising or behavioural tracking.

If Bordy introduces optional analytics, advertising, or other non-essential tracking technologies in the future, they will remain disabled until any consent required by applicable law has been obtained. Read the Cookie Policy for current details and browser choices.

18. Your Privacy Rights

Depending on your location and the laws that apply to you, you may have rights relating to your personal information, including access, correction, deletion, restriction, objection, portability, withdrawing consent, and information about how personal information is handled. These rights may be subject to legal exceptions and limitations. Bordy will not discriminate against users for exercising privacy rights available under applicable law.

19. Philippines Data Privacy Rights

Bordy is operated from the Philippines. Where the Philippine Data Privacy Act applies, you may have rights to be informed, access personal information, object to certain processing, correct inaccurate information, request erasure or blocking where legally available, obtain data portability where applicable, and lodge a complaint with the National Privacy Commission.

20. GDPR, UK GDPR and Similar Privacy Laws

Where the GDPR, UK GDPR, or similar data protection legislation applies to you, you may have additional rights regarding your personal information. You may also have the right to lodge a complaint with the appropriate data protection authority in your country or region. Nothing in this Privacy Policy is intended to limit any privacy right that cannot lawfully be limited.

21. Privacy Rights in Other Countries and Regions

Privacy laws vary between countries, states, provinces, and territories. Where applicable local law provides additional privacy rights, Bordy will respect those rights where required. If a provision of this Privacy Policy conflicts with a mandatory privacy right under applicable law, the mandatory legal requirement will apply.

22. Children

Bordy is a workspace and business-management service intended only for people who are at least 18 years old or the age of legal majority where they live, whichever is higher. Bordy is not directed to children, and we do not knowingly allow children to create accounts.

23. Changes to This Privacy Policy

We may update this Privacy Policy as Bordy develops, laws change, or new features are introduced. When material changes are made, this page will be updated and appropriate notice will be provided where required by law.

24. Contact

Bordy is the service responsible for the personal information described in this notice when Bordy determines why and how it is processed. For privacy questions or rights requests, email bordyapp@outlook.com. Bordy will verify and respond to valid requests in accordance with applicable law.