Privacy Policy

Last updated: March 2026

1. Introduction

All Onboard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our conversation and agent management platform.

2. Information We Collect

We collect information in the following ways:

  • Account Information: Name, email address, company name, and billing information when you create an account.
  • Usage Data: Information about how you use our platform, including conversation logs, agent configurations, and feature usage.
  • Customer Data: Data that your end-users provide through conversations with AI agents, which is processed on your behalf.
  • Technical Data: IP addresses, browser type, device information, and cookies for platform functionality and analytics.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our platform
  • Process transactions and send related information
  • Improve and personalize your experience
  • Communicate with you about updates, support, and marketing (with your consent)
  • Ensure platform security and prevent fraud
  • Comply with legal obligations

4. Data Isolation & Multi-Tenancy

All Onboard operates a multi-tenant architecture where each customer organization receives a fully isolated database. Your data is never co-mingled with other customers' data. We maintain strict access controls and encryption to protect your information.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Third parties that help us operate our platform (hosting, analytics, payment processing)
  • AI Providers: Language model providers for processing conversations (data is not used for training)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Sub-Processors

We use third-party service providers in the following categories to process data on your behalf:

  • AI model providers — For processing conversations and generating agent responses
  • Database hosting — For storing your organization's data in isolated, encrypted databases
  • Vector search — For knowledge base retrieval and document matching
  • Authentication — For user identity management and access control
  • Payment processing — For billing and subscription management
  • Email delivery — For transactional notifications and invitations
  • Application hosting — For platform deployment and delivery

A current list of our sub-processors is available to customers under our Data Processing Agreement. We will notify you at least 10 days before adding or replacing sub-processors that handle your data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination, Customer Data is deleted within 30 days of your request, subject to legal retention requirements and backup schedules. Anonymized, aggregated data may be retained indefinitely for analytics purposes.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability
  • Withdraw consent at any time

9. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose; (b) request deletion of your personal information; (c) opt out of the sale or sharing of your personal information; and (d) not be discriminated against for exercising these rights. We do not sell personal information as defined by the CCPA.

10. Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, audit logging, and regular security assessments. See our Security page for more details.

11. Cookies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: Authentication, session management, and security (required for the platform to function)
  • Preference cookies: Remembering your settings such as selected organization and display preferences
  • Analytics cookies: Understanding how our platform is used to improve the experience (e.g., Google Analytics)

You can control non-essential cookies through your browser settings. Disabling essential cookies may prevent the platform from functioning correctly.

12. International Transfers

Your data may be processed in the United States where our infrastructure and sub-processors are located. By using our services, you consent to the transfer and processing of your data in the United States. We implement appropriate safeguards in accordance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at:

privacy@allonboard.ai