1. OVERVIEW

At Get Aboard Inc. (“Aboard,” “we,” “our,” or “us”), we provide employee experience and people operations software (the “Services”) and operate the public-facing website located at getaboard.co (the “Website”).

This Privacy Policy describes how we collect, use, disclose, and protect personal information:

• when you visit or interact with our Website; and
• when you use our Services, including where we process personal information on behalf of our customers.

When Aboard processes personal information on behalf of its customers in connection with the Services, Aboard acts as a data processor (or service provider), and the customer acts as the data controller (or business).

By using the Website or Services, you acknowledge that your information will be handled as described in this Privacy Policy.

‍

2. DEFINITIONS

For purposes of this Privacy Policy:

• “Agreement” means the applicable service agreement between you (or your organization) and Aboard governing use of the Services.
• “Services” means the products and services provided by Aboard under an Agreement.
• “Website” means the public-facing website located at getaboard.co and any web pages that link to this Privacy Policy.
• “Users” means individuals who access or use the Services.
• “Visitors” means individuals who visit or interact with the Website.
• “Personal Information” means information that identifies, relates to, describes, or can reasonably be associated with an individual.
• “GDPR” means the EU General Data Protection Regulation 2016/679 (as amended) and, where applicable, the UK GDPR.

‍

3. INFORMATION WE COLLECT

We collect personal information depending on how you interact with Aboard.

Information you provide directly

We may collect personal information that you provide to us, including your name, email address, company, job title, and any information you submit through forms, demo requests, job applications, or communications with us.

Information collected through use of the Services

When you use the Services, we may collect information such as account details, user activity, interactions with workflows, and other information provided by you or your organization.

Information provided by your organization

If you access the Services through your employer or another organization, we may receive personal information about you from that organization.

Automatically collected information

We and our service providers may automatically collect information such as IP address, device type, browser type, operating system, usage data, and interactions with the Website or Services.

‍

4. AUTOMATICALLY COLLECTED INFORMATION

We and our service providers may automatically collect certain information about your interactions with the Website and Services through cookies and similar tracking technologies.

This information may include:

• device and connection information, such as IP address, browser type, operating system, and device type;
• usage data, such as pages visited, features used, time spent on pages, and navigation paths;
• referral information, such as the websites or sources that led you to the Website; and
• general location information derived from your IP address.

We use this information to operate, maintain, and improve the Website and Services, analyze usage patterns, and enhance user experience.

‍

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to operate and improve the Website, analyze usage, and enhance user experience.

Cookies are small data files stored on your device that help us recognize returning visitors, understand how users interact with the Website, and improve functionality and performance.

We use a cookie consent management tool to provide transparency and control over the use of non-essential cookies. Depending on your location, you may be prompted to accept or manage your cookie preferences when visiting the Website.

You can also manage or disable cookies through your browser settings. Please note that disabling certain cookies may impact the functionality of the Website.

For more information about the cookies we use or to manage your preferences, please refer to our cookie management tool or contact us at privacy@getaboard.co.

‍

6. HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes:

• to operate, maintain, and provide the Website and Services;
• to communicate with you, respond to inquiries, and provide customer support;
• to manage accounts and user interactions;
• to personalize and improve the functionality and user experience of the Website and Services;
• to analyze usage patterns and improve performance and features;
• to send you information you have requested and, where permitted by law, information about our products or services; and
• to comply with legal obligations and enforce our agreements.

‍

7. LEGAL BASIS FOR PROCESSING (WHERE APPLICABLE)

Where applicable under data protection laws such as the GDPR, we process personal information on the following legal bases:

• to perform a contract with you or your organization;
• with your consent;
• to comply with legal obligations; and
• for our legitimate interests, provided those interests are not overridden by your rights and interests.

‍

8. YOUR PRIVACY RIGHTS

You may request access to, correction of, or deletion of your personal information by contacting us at privacy@getaboard.co.

We will respond to such requests in accordance with applicable laws.

Where Aboard processes personal information on behalf of a customer, you should direct your request to the applicable customer (such as your employer), who controls your personal information.

We may retain personal information as necessary to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate business purposes.

Providing certain personal information is necessary for the operation of the Website and Services. If you choose not to provide such information, you may not be able to access or use certain features.

‍

9. DATA SECURITY AND STORAGE

We implement reasonable and appropriate technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration.

Personal information may be stored and processed in countries other than your own, including the United States, where our service providers and infrastructure are located. We take steps to ensure that appropriate safeguards are in place to protect personal information in accordance with applicable laws.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

‍

10. SERVICE PROVIDERS AND SUBPROCESSORS

We use third-party service providers and subprocessors to support the operation of our Website and Services, including hosting, analytics, authentication, communications, and customer relationship management.

These providers are contractually required to protect personal information and use it only for the purposes for which it was disclosed.

The categories of subprocessors we use include:

Website-related providers

• Webflow (website hosting and infrastructure) — United States
• Google Analytics (web analytics) — United States
• HubSpot (customer relationship management) — United States

Service-related providers

We may use additional service providers and subprocessors in connection with the Services provided to our customers. These providers support functions such as hosting, authentication, and communications.

We may update our use of service providers and subprocessors from time to time. A current list of subprocessors is available upon request.

‍

11. CHILDREN’S PRIVACY

The Website and Services are intended for business and professional use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under 18.

If we become aware that we have collected personal information from an individual under 18, we will take reasonable steps to delete such information.

‍

12. DISCLOSURE OF PERSONAL INFORMATION

We may disclose personal information in the following circumstances:

• Service providers and subprocessors: We may share personal information with third-party service providers and subprocessors who assist us in operating the Website and Services, in accordance with this Privacy Policy.
• Business transactions: In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, personal information may be transferred as part of that transaction.
• Legal obligations: We may disclose personal information where required to do so by law or in response to valid legal requests, including from public authorities, courts, or regulators.
• Protection of rights: We may disclose personal information where necessary to enforce our agreements, protect our rights, property, or safety, or the rights, property, or safety of others, including for fraud prevention and security purposes.

‍

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time by posting a revised version on the Website. The updated Policy will become effective upon posting unless otherwise stated.

If we make material changes, we may provide notice through the Website or other appropriate means. Your continued use of the Website or Services after the effective date constitutes your acceptance of the updated Policy.

‍

14. CONTACT

If you have any questions about this Privacy Policy or our privacy practices, you may contact us at: privacy@getaboard.co.