Privacy
Last updated October 28, 2026
Who we are
BoardroomList operates boardroomlist.com and is the controller of the personal data described here. Questions about this policy go through the contact page.
What we collect
Members: your email address, your answers to the onboarding questions, the roles you save or hide, and which roles you open. Payments are processed by Stripe; we never see or store card details. Visitors: standard server logs (IP address, user agent, pages requested) and aggregate, anonymous page-view analytics. No account is needed to search.
What we use it for
To run your membership, show you relevant roles, and email you about your account. We don’t sell your data, and we never share it with employers or recruiters.
Discretion
There is no public profile. Nobody, including the companies listed, can see that you use the service.
Cookies and analytics
We set one cookie: a sign-in cookie that keeps you signed in. It is signed, lasts for your session, and is used for nothing else. We also use two items of browser storage. localStorage holds a random id and the email you typed during onboarding, so you can continue your own answers; it is removed when onboarding finishes. sessionStorage holds a timestamp that stops the page from reloading in a loop after a site update. Neither is sent to anyone else. Visit counts use PostHog, which loads through our own address (boardroomlist.com/ph). Visits are counted per day using a one-way code made on the analytics provider’s server, with no cookie and no ID stored on your device. It does not record sessions, and IP addresses are discarded afterwards. It does not start at all if your browser sends Global Privacy Control or Do Not Track. We do not use Google Analytics, advertising pixels or any other tracker.
Who receives it
Our hosting provider, where the database runs. Stripe, which processes payments and sees your card, not us. SMTP2GO, our email provider, which delivers account messages (Resend is a backup if it is down). Cloudflare, which sits in front of the site. PostHog, which receives anonymous usage data as described under cookies and analytics. Nobody else: not employers, not recruiters, not advertisers.
How long we keep it
Account data for as long as the account exists, then deleted within 30 days of a deletion request, except invoices the law makes us keep. Server logs for 30 days. Saved, hidden and viewed role marks are deleted with the account.
ChatGPT and Claude apps
Boardroomlist.com is available as an app inside ChatGPT and as a connector in Claude. When you use either, ChatGPT (operated by OpenAI) or Claude (operated by Anthropic) sends requests to our server at boardroomlist.com/api/mcp or boardroomlist.com/api/mcp/claude on your behalf. We receive the tool called and its parameters: search words, filters or a role id. We receive no ChatGPT or Claude account details, no name, no email address and no conversation history, and we keep nothing about app use beyond standard server logs for 30 days. Responses contain what any visitor sees on the site: role titles, levels, locations, posted pay ranges, dates and links. Company names, descriptions and apply links are never included. Links from the app carry a tag (utm_source=chatgpt or utm_source=claude) so our analytics can tell app visits apart; it identifies the app, not you. How OpenAI or Anthropic handles your conversation is covered by their own privacy policies, not this one.
Your controls
Ask for a copy of your data, correct it, or have the account and everything tied to it deleted, from the contact page at boardroomlist.com/contact. You can also cancel membership from your account at any time. We answer within one business day.