Privacy Policy

1. Overview

Unboredly ("we", "us", "our") is built to help teams onboard employees more quickly and effectively. We take privacy seriously and design our systems to minimize data collection, protect sensitive information, and give you control over your data.

2. Information We Collect

We collect only the information necessary to operate the platform:

Account Information
Name, work email, role/title, department, organization name, and related onboarding details.

Usage Information
Interactions with the platform, including tasks completed, features used, and onboarding progress.

Onboarding Content
Tasks, check-ins, notes, and documents created or uploaded as part of onboarding workflows.

Technical Information
IP address, browser type, device data, and access logs used for security and performance monitoring.

3. How We Use Information

We use your data to:

• Provide and operate the Unboredly platform
• Personalize onboarding plans and task flows
• Authenticate users and secure accounts
• Send relevant notifications (tasks, reminders, updates)
• Improve product performance and usability
• Generate automated insights and summaries

We do not sell or rent your personal data.

4. Automated Processing

Some features are processed by third-party providers (Anthropic and OpenAI) to generate summaries, onboarding plans, and recommendations.

• Data is processed only to provide requested functionality
• Data is not used to train external models
• We limit the amount of data sent whenever possible

5. Data Storage and Security

Your data is stored on secure cloud infrastructure (Firebase/Google Cloud).

We implement:

• Encryption in transit (TLS)
• Encryption at rest
• Access controls and role-based permissions
• Continuous monitoring for unauthorized access

Only authorized personnel can access production systems.

6. Data Ownership

Your organization owns its data. Unboredly acts as a processor of that data and does not claim ownership over your content, onboarding materials, or internal information.

7. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Export your data in a portable format

To make a request, ask your organization's administrator or email us at privacy@unboredly.com.

8. Data Retention

We retain data only as long as necessary to provide the service.

• Active accounts: data is retained for the duration of service
• Deleted accounts: data is removed within 30 days
• Some data may be retained longer if required for legal or compliance purposes

9. Third-Party Services

We rely on trusted third-party providers (e.g., Firebase, Anthropic) to operate parts of the platform. These providers are contractually obligated to protect your data.

Email delivery

We send email, including the copy of an inquiry that reaches our team, through Resend. Resend handles the email addresses and message content it is given to deliver that email.

Assistant on our public pages

The assistant is provided by ElevenLabs. When you use it, ElevenLabs receives what you say or type, and returns its replies, to run the conversation. We send ElevenLabs no account information, because the assistant is not part of the signed-in product.

Video hosting

The video in our security training courses is stored and streamed by Mux. Mux receives the videos and the ordinary technical details of each playback request, such as the IP address of the device. We do not send Mux names, email addresses, or account information.

Google Calendar

If you choose to connect Google Calendar, Unboredly asks Google for your email address, basic profile, and permission to manage calendar events. We use them only to show which Google account is connected and to add, update or remove the events you schedule in Unboredly (for example, a meeting set up in chat, with an optional Google Meet link). We do not read the rest of your calendar.

• Access tokens are encrypted and stored on our servers, never in your browser
• We do not sell this data, use it for advertising, or use it to train models
• You can disconnect at any time from your Profile; events already created stay on your calendar

Unboredly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Zoom

If you choose to connect Zoom, Unboredly asks Zoom for your Zoom user ID and email address, and permission to create and delete meetings. We use them only to show which Zoom account is connected and to create a Zoom meeting for a meeting you schedule in Unboredly (and delete it if you cancel). The meeting's join link is shown to the people you invited; your host link and passcode are not stored. We do not read your other Zoom meetings, recordings or chats.

• Access tokens are encrypted and stored on our servers, never in your browser
• We do not sell this data, use it for advertising, or use it to train models
• You can disconnect at any time from your Profile; Zoom meetings already created stay in your Zoom account
• If you remove Unboredly from your Zoom account, Zoom tells us and we delete the stored tokens

10. Inquiries from Visitors

This section is about people who contact us before they are customers: through the Contact page, the LMS request form, or the assistant on our public pages.

What we keep
Your name, your email address or phone number, your company if you give it, what you asked about and the message you wrote, which form or assistant it came through, and when. If you write to us more than once, we keep your messages together in one record, with notes our team makes about following up (who is handling it, when to reply, and what was said).

What we use it for
To answer you and to follow up on what you asked. We do not sell it, rent it, or use it for anything unrelated. We do not send marketing email to people because they contacted us.

Who can see it
Our team members who handle inquiries, and no one else. Access is limited to people we have given that permission, it is checked on our servers each time, and we keep a log of who opened or changed a record. When an inquiry arrives, we also email it to our team inbox.

Messages about help and privacy
Messages sent through the Contact page about help using Unboredly, or about privacy and data, go to our support and privacy inboxes. We do not add them to our records of inquiries from prospective customers.

The LMS request form
If you choose a budget below the starting price of our LMS service, we do not send or keep what you typed on the form.

The assistant on our public pages
You can talk or type to an assistant on our public pages. Your conversation is processed by ElevenLabs, our voice and chat provider, to run the assistant. Please do not share sensitive details such as health, financial, or government identification information with it. The assistant passes your details to our team only after it asks you and you agree. Under Third-Party Services you will find who else handles this information.

How long we keep it, and your choices
We keep an inquiry for as long as we need it to respond and follow up. You can ask us at any time to see it, correct it, or delete it, or to stop contacting you, by writing to privacy@unboredly.com.

11. Changes to This Policy

We may update this policy periodically. If changes are significant, we will notify you via email or within the platform.

12. Contact

If you have questions about this policy or your data, contact us at: privacy@unboredly.com