Effective date: 9 November 2026
This policy explains how personal data is processed when you use the ConvoBoard browser extension, buy ConvoBoard Pro, or visit this website.
The controller under the General Data Protection Regulation (GDPR) is:
Sedat Serttas, ReinLogic
Hefnerstr. 11, 81541 Munich, Germany
Email: contact@reinlogic.com
Phone: +49 176 57901370
No account, no sign-up, no sync.
Your boards and everything on them stay in your browser, on your device. We never receive them.
The extension has no analytics, no tracking, no advertising and no cookies. We don't sell or share data.
The extension only contacts a server for the Pro license (activation, a weekly check and deactivation), and only if you buy Pro.
To work, ConvoBoard reads the web address and title of your browser tabs. That lets it recognize when the page you're on is a chat, show whether it's saved, and save it when you ask.
What you save is stored only in your browser on your device (IndexedDB and extension storage). That includes boards, cards, links, titles, notes, tags, account names, settings, and page text if you use it. This data is never transmitted to us or to anyone else, and we have no access to it.
Storing this information on your device is strictly necessary to provide the service you explicitly asked for (§ 25 (2) No. 2 TDDDG). It stays there until you delete it or uninstall the extension.
Page text (Pro, off by default). If you turn it on, ConvoBoard reads the visible text of a saved chat, but only on sites you have explicitly allowed in Chrome and only when you save or update a card. The text is stored only on your device, so you can search it. You can turn this off and revoke site access at any time, in Settings or in Chrome's extension settings.
ConvoBoard Pro is sold through Lemon Squeezy, which acts as the seller (merchant of record). Lemon Squeezy processes the data needed for the purchase, payment, invoicing and taxes under its own responsibility. That includes your name, email address, billing address or country and payment details. See Lemon Squeezy's privacy policy: https://www.lemonsqueezy.com/privacy
From Lemon Squeezy we receive the order details: your name, email address, country, order number, product, amount and license key. We use them to provide your license, answer support requests and handle refunds.
Legal basis: performance of a contract (Art. 6 (1) (b) GDPR) and compliance with legal obligations (Art. 6 (1) (c) GDPR).
Retention: we keep order details for as long as you hold the license and then until the end of the regular limitation period (3 years, § 195 BGB), unless statutory retention obligations require us to keep them longer.
If you enter a Pro license key, the extension contacts Lemon Squeezy's license service (api.lemonsqueezy.com):
once to activate the key on your device,
about once a week to check that it is still valid,
and when you deactivate it on a device.
These requests contain your license key, a device label such as "Chrome on macOS" and the activation ID for that device. Like any web request, they also transmit your IP address and technical connection data. They never contain any content from your board.
Purpose: to verify that your license is valid and to manage the devices it is active on (up to 3).
Legal basis: performance of a contract (Art. 6 (1) (b) GDPR).
Recipient: Sold through Link, LLC (formerly Lemon Squeezy LLC), 222 South Main Street, Suite 500, Salt Lake City, UT 84101, USA. It processes this data on our behalf under a data processing agreement (Art. 28 GDPR).
Transfer to the USA: this is based on the EU Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).
Retention: activation records are kept for as long as your license exists. A device's record can be removed at any time with Deactivate on this device.
The license key and activation status are also stored in your browser, so Pro keeps working offline between checks.
If you email us, we process your email address and the content of your message to answer you.
Legal basis: Art. 6 (1) (b) GDPR if your request relates to a purchase or a contract, otherwise our legitimate interest in answering inquiries (Art. 6 (1) (f) GDPR).
Retention: we delete the correspondence once your request is resolved, unless statutory retention obligations apply.
This website is hosted on Google Sites, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit it, Google processes technical data needed to deliver the pages, such as your IP address, browser type, the pages you request and the time of access.
Legal basis: our legitimate interest in providing this website securely and reliably (Art. 6 (1) (f) GDPR).
Transfer to the USA: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
More information: see Google's privacy policy, https://policies.google.com/privacy
If you install ConvoBoard from the Chrome Web Store, Google processes data related to the installation under its own responsibility. See Google's privacy policy, https://policies.google.com/privacy
Chrome Web Store User Data Policy. The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide ConvoBoard's single purpose, organizing your AI chats. It is not transferred to anyone except as described above, not used for advertising, and not used to determine creditworthiness.
Tabs: to read the address and title of the current tab (section 3).
Side panel: to show the board.
Storage and unlimited storage: to keep your board on your device, with no size cap.
Context menus: for the "Save chat to ConvoBoard" right-click item.
Scripting, plus optional access to specific chat sites: only for Pro page text, and only on sites you approve when Chrome asks. Nothing is granted at install.
Export: save everything to a file (Settings → Data → Export board).
Delete: remove everything (Settings → Data → Delete everything), or uninstall the extension, which removes its stored data from your browser.
Release a Pro device: select Deactivate on this device in Settings → ConvoBoard Pro.
Under the GDPR, you have the right to:
access your personal data (Art. 15),
have it corrected (Art. 16),
have it deleted (Art. 17),
restrict its processing (Art. 18),
receive it in a portable format (Art. 20),
object to processing based on our legitimate interests (Art. 21). Where we rely on Art. 6 (1) (f) GDPR, you can object at any time for reasons arising from your particular situation.
To exercise these rights, contact us using the details in section 1. Data on your device never reaches us, so you control it directly with the tools in section 10.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can contact the authority in the EU member state where you live or work, or where you believe the infringement happened. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de.
Is providing data required? Using ConvoBoard requires no personal data from you. To buy Pro, the purchase details listed in section 4 are needed. Without them, we can't sell you a license.
Automated decisions: we don't use automated decision-making or profiling (Art. 22 GDPR).
Children: ConvoBoard is not directed at children under 16, and we don't knowingly process their data.
If this policy changes, we'll update the effective date above. If ConvoBoard ever starts handling data in a new way, we'll say so here before that version is released.