Data Protection

The controller responsible for VisionBoard is Pyrabit UG (haftungsbeschränkt), Zimmerstr. 1a, 76530 Baden-Baden, Germany.

Contact: info@visionboard.si.

Depending on how you use VisionBoard, we may process account data, contact details, authentication data, billing-related references, uploaded documents, images, notes, prompts, generated outputs, approvals, sharing settings, product usage events, support requests, and technical logs.

Where you connect an external AI system, we also process records about that connection: the name the AI client registers with, the addresses it uses to complete sign-in, the Visions and capabilities you granted it, and timestamps and counters describing when it signed in, when it first read approved context, how often it has read, and whether it was used again after 14 and 30 days.

VisionBoard is designed around deliberate approval and sharing states. Drafts, private materials, approved context, AI-ready material, and published packages may be treated differently inside the product.

We process data to provide the product, operate accounts, secure the service, store and organize user content, enable AI-assisted workflows, generate or refine visuals, process billing, provide support, improve reliability, and comply with legal obligations.

Where AI features are used, selected prompts, context, files, references, and outputs may be processed by AI infrastructure or model providers as needed to perform the requested action.

Where the GDPR applies, processing may be based on contract performance, legitimate interests, consent, and legal obligations, depending on the specific activity.

Examples of legitimate interests include product security, abuse prevention, service reliability, product improvement, and communication with users about their account or requested support.

We may use service providers for hosting, authentication, storage, payments, analytics, email, AI processing, image generation, monitoring, and support workflows.

Payment details may be processed by payment providers such as Stripe. Infrastructure and product data may be processed by hosting, database, storage, and AI providers according to the relevant configuration and product use.

VisionBoard may allow users to share approved boards, documents, visuals, briefs, and AI-ready context with collaborators, clients, teams, or connected AI systems.

Users control what they approve and share. Drafts, outdated materials, and private files should be kept out of shared or AI-ready scopes unless the user deliberately changes their status.

VisionBoard lets you connect an external AI system — for example Claude, ChatGPT, Codex, or another client that speaks the Model Context Protocol — to your approved context. You create the connection yourself through a sign-in, it is limited to the Visions and capabilities you select, and you can revoke it at any time under AI Connectors.

This is a different situation from the AI features inside VisionBoard. When a connected AI system reads approved context, that content is transmitted to the provider of that AI system. From that point it is processed under your own agreement with that provider and under their terms and privacy policy. We do not control, and cannot delete, what a third-party AI provider retains or how it uses the content it received.

A connected AI system can only return work as attributed drafts for human review. VisionBoard does not accept approval, publication, access changes, or completion decisions from a connected AI system; those require a separate confirmation by a person.

The connection records described above are timestamps, counters and the AI client’s registration details. We do not store the prompts a connected AI system sends or the output it produces as part of measuring a connection.

Some service providers process data outside the European Economic Area, in particular in the United States. This can apply to hosting, storage, authentication, email, payment, monitoring, and AI processing.

Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards, in particular the European Commission’s standard contractual clauses together with the data processing terms of the provider concerned.

Where you connect an external AI system yourself, the resulting transfer to that provider takes place on the basis of your own relationship with that provider rather than ours.

We keep personal data and user content for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain backups, and meet security requirements.

Users may request deletion or correction where applicable, subject to legal retention duties, backup cycles, and technical constraints.

Depending on your location and applicable law, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data. Where processing is based on consent, you may withdraw consent for the future.

To exercise rights or ask privacy questions, contact info@visionboard.si. You may also have the right to lodge a complaint with a competent data protection authority.

We use technical and organizational measures intended to protect user data against unauthorized access, loss, misuse, or alteration.

No online service can be guaranteed to be completely secure. Users should protect their account credentials and avoid uploading content they are not allowed to process or share.

We may update this Data Protection page when VisionBoard features, providers, processing activities, or legal requirements change.