1. Data We Collect
- Personal Information: Name, email address, and billing address (collected by payment processors).
- Usage Data: IP addresses, browser types, and navigation history to improve Service performance.
- Whiteboard Data: We store your canvas coordinates and metadata (JSON) to allow for cloud saving.
2. Legal Basis for Processing (GDPR)
We process your data based on:
- Contractual Necessity: To provide the Service you subscribed to.
- Consent: When you sign up for our newsletter or updates.
- Legitimate Interests: For security and platform optimization.
3. Data Storage & Third Parties
We utilize industry-leading third-party services to ensure your data is safe:
- Hosting: AWS Lightsail (Singapore Region).
- Security & CDN: Cloudflare and Bunny.net.
- Payments: LemonSqueezy (International) and Tripay (Local).
- Communication: Postmark or Brevo (SMTP for transactional emails).
4. Children’s Privacy (COPPA & FERPA)
True Whiteboard is a tool for educators. We do not knowingly collect information from children under 13.
- Teachers/Schools: You are the “Data Controller” regarding student data. We act as a “Data Processor.” You must comply with local regulations (like COPPA) when using our tool in a classroom setting.
5. User Rights
You have the right to:
- Access & Export: Request a copy of your personal data.
- Correction: Update your account information.
- Deletion: Request that we delete your account and all associated cloud data (“Right to be Forgotten”).
6. Data Security
We implement SSL/TLS encryption for all data transfers. Whiteboard data is stored in a secured MariaDB environment with restricted access. In the event of a data breach, we will notify affected users within 72 hours.