Privacy Policy

Overview

Boardmarks (“Boardmarks”, “we”, “us”) is a free Chrome New Tab extension. This Privacy Policy explains what information the extension handles and how it is used. By installing or using Boardmarks, you agree to this policy.

Data we store locally

Boardmarks stores extension data locally in your browser using chrome.storage.local. Depending on how you use the product, this may include:

• Pages, boards, and bookmarks you create or import
• Scratch notes, calendar notes, and reminders
• Native todo lists and tasks (Boardmarks tasks, not Google Tasks)
• Settings such as wallpaper, search engine preference, and UI preferences
• Trash / soft-delete state for restored items
• Optional Google integration state (connection status, selected calendars/task lists, short-lived OAuth tokens when required by your browser)
• Short-lived local caches of Google Calendar events and Google Tasks (see below) to reduce API calls

This data remains on your device unless you choose to export it (for example as a JSON backup file) or use optional cloud backup (see below).

Google Sign-In, Calendar & Tasks (optional)

Boardmarks offers optional Google features. You are never required to connect Google Calendar or Google Tasks to use the extension.

• Google Sign-In — used for Pro licensing (free trial, license activation) and optional manual cloud backup. We receive your Google account email and basic profile information needed to verify your license.
• Google Calendar — if you connect, Boardmarks reads your calendar list and events to display them in the New Tab calendar, and can create, edit, or delete events only when you ask. Google Calendar remains the source of truth.
• Google Tasks — if you connect, Boardmarks reads your task lists and tasks to display them in the Tasks panel, and can create, update, complete, or delete tasks only when you ask. Google Tasks remains the source of truth.

Boardmarks does not copy your full Google Calendar or Google Tasks history onto our servers. Calendar and Tasks data is fetched from Google's APIs when needed, shown in the extension, and cached briefly on your device (typically up to 15 minutes for calendar events and 5 minutes for task lists). When you disconnect Google Calendar & Tasks or sign out of Google in Settings, access tokens are revoked, integration state is cleared, and local Google caches are deleted.

Data security and protection of sensitive data

Some Boardmarks features handle sensitive information (for example Google account identifiers, calendar events, and tasks). We protect this data using the following mechanisms:

• Encryption in transit — all communication with Google APIs, our licensing API, and optional cloud backup uses HTTPS (TLS). OAuth tokens and API requests are never sent over unencrypted connections.
• Local-first storage — workspace data and Google integration caches are stored in Chrome's extension-isolated local storage (chrome.storage.local), which is scoped to the Boardmarks extension and protected by your browser and operating system. Other websites and extensions cannot read this storage.
• Least-privilege access — Boardmarks requests only the OAuth scopes needed for the features you enable (for example calendar.readonly, calendar.events, and tasks). We do not request access to Gmail, Drive, Contacts, or other unrelated Google data.
• No sale or advertising use — sensitive data from Google integrations is used only to provide the features you requested inside Boardmarks. We do not sell it, rent it, or use it for advertising or credit decisions.
• Minimal retention — Google Calendar and Tasks content is cached locally for short periods to improve performance, then refreshed or removed. Disconnecting or signing out clears tokens, integration settings, and cached Google data from your device.
• User control — you can disconnect Google Calendar & Tasks at any time in Settings, sign out of Google (which also disconnects Calendar/Tasks), uninstall the extension, or clear extension data in Chrome to remove local copies.
• Server-side handling — our licensing and optional cloud-backup servers store only what is needed for those services (for example account email, license status, or a workspace backup you manually upload). Google Calendar and Google Tasks content is not continuously synced to or stored on our servers unless you explicitly use manual cloud backup, which uploads your Boardmarks workspace (not a separate copy of Google's servers).

Optional cloud backup

If you sign in with Google and choose cloud backup, you can manually upload your Boardmarks workspace (pages, boards, bookmarks, notes, calendar notes, reminders, native todos, and habits) to your account on our server. Upload and download are manual only — nothing is uploaded automatically. Wallpaper stays on your device and is not uploaded. You can replace or download the cloud copy at any time from Settings.

Permissions

Boardmarks may request these Chrome permissions:

• storage — save your workspace locally
• bookmarks — import bookmarks from Chrome when you ask
• activeTab / tabs — read tab title/URL to Quick Save the current tab or all open tabs when you use the popup
• alarms / notifications — reserved for reminder-related scheduling features in the extension package
• identity — Google Sign-In (OAuth) for optional Pro licensing, cloud backup, and Google Calendar/Tasks when you connect them
• Host access to Google APIs — only to call Google Calendar and Google Tasks on your behalf after you authorize access

What we do not do

• We do not require Google Sign-In to install the extension (Sign-In is for Pro trial, licensing, and optional features)
• We do not sell personal data
• We do not use your data for personalized advertising
• We do not use your data to determine creditworthiness or for lending
• We do not transmit your browsing or workspace data to external servers for analytics, ads, or tracking

Information you send us

If you submit our Contact form, the details you fill in (name, email, phone, company, website, the plan you are interested in, how you found us, and your message) are sent to our own support inbox and database so we can reply. We use them only to respond to your enquiry and for support records. We do not sell them or use them for advertising.

Payments

All core extension features are available on the free plan. If you buy an optional paid plan listed on our Pricing page, the payment is processed by a third-party payment gateway. The gateway collects your payment details directly and shares only the transaction status and basic billing information with us. We never receive or store your full card number, CVV, UPI PIN, or netbanking credentials. Payment data is not collected inside the extension itself.

Third-party services

Search actions opened from the New Tab (for example Google, Bing, YouTube, or DuckDuckGo) are performed by navigating to those services in your browser. Those services have their own privacy policies. Favicon images may be loaded from third-party favicon endpoints to display site icons.

When you connect Google Calendar or Google Tasks, Google processes your data according to Google's Privacy Policy. Boardmarks accesses that data only through Google's official APIs after your consent.

This marketing website may be hosted on Vercel. Standard hosting/server logs may be processed by the host according to their policies. Optional cloud backup and licensing are served from our infrastructure at whizco.net over HTTPS.

Data retention & deletion

Local extension data remains until you clear it (for example by resetting extension data, removing the extension, or clearing site/extension storage in Chrome). Exported backup files are under your control.

Google Calendar and Google Tasks caches expire automatically after short TTLs or when you disconnect. Signing out of Google or disconnecting Google Calendar & Tasks removes OAuth tokens and cached Google data from your device. If you used optional cloud backup, contact us to request deletion of your stored backup copy.

Children's privacy

Boardmarks is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of Boardmarks after an update means you accept the revised policy.

Contact

Questions about this policy or Boardmarks privacy practices? Email shantilalmukesh@gmail.com (Monday to Friday, 10:00 AM – 6:00 PM IST).