Privacy Policy

This policy explains what Built on Purpose, LLC (Georgia, USA) collects when you use the Forward Motion application or this website, and what we do with it. The short version: we collect what the service needs to work, nothing more, and we don’t sell any of it.

One thing worth being clear about up front: the records in your board’s instance belong to your board, not to us. Your board decides what goes in and who has access; we process that data only to run the service. This policy covers what we do on our side.

What we collect

In the application

Your board’s instance stores what your board puts in it: member names and email addresses, roles and terms, meeting records (agendas, attendance, motions, votes, minutes), action items, governance records (conflict-of-interest attestations, compliance items, onboarding progress, evaluation responses), and links to documents in your own storage. Email addresses are used for sign-in links and the notifications your members choose to receive.

On this website

We use Fathom Analytics, a privacy-focused analytics service that uses no cookies and collects no personal information — we see page views and anonymous, aggregate statistics only. If you email us or schedule a call, we have what you send us. If you subscribe to the blog, we store your email address in our own customer database and use it only to send you blog posts; every email includes an unsubscribe link, and unsubscribing stops them.

What we don’t do

• We don’t sell or rent data — yours or your members’.
• We don’t use your board’s data for advertising or profiling.
• We don’t use your data to train machine-learning models.
• We don’t place tracking cookies on this website.

Confidentiality inside your board

Some records are confidential within your board by design: individual evaluation responses are readable only by the person who wrote them — not board officers, not administrators, and not bypassed by our operator tooling. Fundraising records deliberately cannot store per-member gift amounts.

Who processes data

Data is hosted with Supabase (database, authentication) and Vercel (application), with email delivered by Resend — all processing in the United States. This website’s analytics are processed by Fathom. We access your instance only to operate and support it.

How data is protected

Each board runs on its own isolated instance — its own database and application deployment — so there is no shared database between customers. Sign-in uses emailed links rather than passwords, so there are no passwords to steal. Access rules are enforced in the database itself, all connections are encrypted in transit, and data is encrypted at rest by our hosting providers.

Retention & deletion

Your board’s data is retained while your subscription is active. On termination, you receive a complete export and the instance is deleted 30 days after you confirm you have your data. Individual members who leave a board are removed from access immediately by the board’s administrator; their historical governance records (votes, attendance) remain part of the board’s corporate record, which the board controls.

Your choices

Board members can control which email notifications they receive in the app. Because your board controls its own records, requests about board data (corrections, removals) go to your board’s administrator — the app makes those changes easy. For anything else, or if you’re not sure who to ask, email team@keepforwardmotion.com — a person reads it.

Changes

Material changes to this policy are announced to board administrators by email before they take effect.