Privacy Policy

Titus Board is run by Titus Hub Inc.(“we”, “us”). This policy covers the Titus Board website at titusboard.com, the signed-in app, and the Titus Board Android app: what they collect, why, who else handles it, how long we keep it, and how to have it deleted.

Who we are

Titus Hub Inc. makes Titus Board, a workspace for tasks, team chat and checklists that a head office can publish to every location. For the personal information described on this page, Titus Hub Inc.is responsible for it (the “controller”, in privacy-law terms). Questions about this policy or your information: email info@titushub.com.

Titus Board was called Titus Hub until it moved to titusboard.com. Same service, same accounts, same policy.

What we collect

Your account

When you create an account we store your email address, the name you enter, a password (kept only as a one-way hash by Firebase Authentication, never readable by us), and the date you signed up. You can add a profile photo. We record whether your email address has been confirmed, and the time of your last sign-in.

What you and your team put in the workspace

Titus Board exists to hold your work, so it stores what you enter: workspaces and their names and photos; projects, folders and task lists; tasks with their descriptions, due dates, assignees, statuses and colours; comments; chat messages; teams; and, for organizations using HQ-to-location sync, the templates a head office publishes and the progress each location reports back. Files and images you attach to tasks and comments (up to 25 MB each) are stored too.

Everything in a workspace is visible to the other members of that workspace, according to the roles its owner sets. Please don't put passwords, payment card numbers or other sensitive details in tasks or chat; we never need them.

People you invite

When you invite someone, we store the email address you enter, who invited them and to what, and we email that address an invitation from us. If they never accept, the invitation stays on record until it is cancelled or accepted.

Notifications and devices

We keep a record of the in-app notifications sent to you (a comment, a mention, an assignment, a due date). Each is marked to expire 60 days after it is created. If you install the Android app and allow notifications, we store the device token Google issues for that install so we can deliver push notifications; it identifies the app install, not you personally, and it is deleted when you sign out on that device or delete your account.

Your settings

We store your preferences: which tabs you had open, your active workspace, recent projects and notification settings. Board column widths are kept in your own browser only.

Titus Core, if you connect it

Titus Core is our voice assistant for email. If you paste a Titus Core key into Settings, we keep that key on our server, where no browser can read it, and send Titus Core, for you alone: a task assigned to you as it comes due (its title, due day, project and a link to it), and a comment that @mentions you (who wrote it, what it says and the task it is on). Titus Core reads these to you and keeps them for 30 days. Disconnecting, in Settings here or in Titus Core, stops it at once, and Titus Core deletes what we sent.

Billing, when paid plans open

Paid plans are not open yet. When they are, payments will be handled by Stripe on pages Stripe hosts. We will store the identifiers Stripe gives us for your customer record and subscription, the plan and its status, and the number of seats or locations billed. We never see or store your full card number.

Request logs

Our hosting provider, Google Cloud, logs each request to the service: the time, the page or endpoint, your IP address, your browser's user agent and the response. We use these logs only to keep the service secure and running, and to look into problems or abuse.

Cookies and browser storage

Titus Boardsets no advertising cookies and runs no analytics or third-party tracking scripts. To keep you signed in, Firebase Authentication keeps your session in your browser's local storage, and the app keeps a few display preferences there as described above. Clearing your browser's site data signs you out and forgets them.

How we use it

• To run Titus Board: show your workspaces to you and your team, sync HQ checklists to locations, and deliver notifications.
• To send the emails the service needs: confirming your address, resetting your password, invitations, and activity on tasks you are part of. You can turn task-activity emails off in Settings. We don't send marketing email.
• To answer your support requests.
• To bill you, once paid plans open.
• To prevent abuse and keep the service secure.

We don't sell your personal information, and we don't share it with anyone for advertising.

Who else handles it

We use a small number of service providers to run Titus Board:

• Google (Firebase and Google Cloud)hosts the service and stores your account (Firebase Authentication), your workspace data (Cloud Firestore) and your files (Cloud Storage) on our behalf, and delivers push notifications to the Android app (Firebase Cloud Messaging). Data is stored in Google's United States regions. See Firebase's privacy and security information.
• Brevo delivers our email on our behalf. See Brevo's privacy policy.
• Stripe will handle payments and subscriptions once paid plans open, under its own privacy policy.
• Google Workspace hosts our email, including info@titushub.com, so any email you send us arrives there.

We may also disclose information where the law requires it, or where it is needed to protect the rights, property or safety of our users, the public or us. We will update this list before we add another provider that handles personal information.

How long we keep it

• Your account and the workspaces only you own: until you delete your account. Deleting it removes your account record, your settings and your device tokens, and deletes the workspaces where you are the only member, with everything in them.
• Workspaces owned by others:tasks, comments and messages you added to a workspace someone else owns belong to that workspace and stay there after you leave or delete your account, without your profile attached. Ask that workspace's owner to remove them.
• Backups: our database is backed up. Deleted data leaves the backups within 14 days.
• Billing records, once paid plans open: for as long as tax and accounting law requires.
• Request logs:for Google Cloud's log retention period, 30 days by default. Email delivery logs: Brevo keeps a log of the emails it delivers for us, for its own retention period.

Your choices

• Delete your account from inside the app (your profile, then Delete account) or by emailing us. See how account deletion works.
• Edit your profile (name and photo) any time from the app.
• Email and notifications:turn task-activity emails and push notifications off in Settings. Emails about your account itself (a password reset you asked for, confirming your address) can't be turned off, because the account needs them.

Your rights

You can ask us for a copy of what we hold about you, to correct it, or to delete it. Email info@titushub.com from the address on your account, so we can confirm the request comes from you. There is no charge.

If you live in a US state with a consumer privacy law, such as California, you may have further rights, such as to know what we collect and why, and to opt out of the sale or sharing of your personal information. We don't sell or share personal information, but we will handle any request under those laws: email us and tell us which right you want to use. We will not treat you differently for using your rights.

If you live outside the United States, the law where you live may give you similar rights, including the right to complain to your data protection authority. Email us and we will help.

Security

Everything travels over encrypted (HTTPS) connections. Your workspace data is protected by security rules that let a signed-in member reach only the workspaces they belong to, and the operations that need more than that run on our own server. Passwords are stored only as hashes. Access to the systems behind Titus Board is limited to the people at Titus Hub Inc. who run it. No service can promise perfect security, but if a breach affects your information we will tell you as the law requires.

Children

Titus Boardis for businesses and teams and is not directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

We will update this page before we change what the service collects or who handles it. The date at the top always shows when it last changed. For a change that matters, we will also tell you by email or in the app.

Contact

Titus Hub Inc.
Email: info@titushub.com

See also our Terms of Service and how to get help.