Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Productboard retains the right to change its policy at any time, with non-material changes possibly only indicated by a change in the published date. A significant concern arises from the use of Model Context Protocol (MCP) Connections, which allow third-party AI agents to access and process user data, including personal information, from Productboard accounts (risk_flags-2). Productboard explicitly states it is not responsible for how these third-party AI agents use, store, train on, or otherwise process the data they access. Furthermore, the company may share personal information such as device identifiers, browsing history, and location with advertising and social media networks for targeted advertising, which could be considered a sale under California law (data_use-1). Finally, when users interact with Productboard's social media profiles or ads, social network providers collect usage information, and the extent of this processing may not be fully transparent.
87% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues that may lead to significant harm and are often hard to reverse. These are usually material, non-obvious, or require significant effort to discover. Such clauses may be deeply embedded in legal language, or be triggered by edge cases in product use. Risk flags also cover policies that grant the provider unusual, one-sided, or broad discretion that could harm users.
high90% confidence
Third-Party AI Agent Access to Personal Data
Enabling MCP Connections allows third-party AI agents or automated systems to access and process data, which may include personal data of Users or End-Users, from your Productboard account.
Why it matters: When MCP Connections are enabled, third-party AI agents can access personal data from your account, and Productboard is not responsible for how these third parties use, store, train on, or process that data.
Productboard may make available a Model Context Protocol (MCP) server or similar integration interface that allows you to connect third-party AI agents or automated systems to your Productboard account ("MCP Connections"). Where you enable an MCP Connection, the relevant AI agent or automated system will be able to access and process data, which may include Personal Data of Users or End-Users, from your Productboard account. Productboard acts solely as a conduit for that access and is not responsible for how the third-party AI agent or its provider uses, stores, trains on, or otherwise processes any data (including Personal Data) that it accesses via your account.
Google User Data, paragraph 1 · Citation strength: strong
Data Use & Sharing
1 finding
Policies that describe how your data is collected, used, and shared. These include details about data types, purposes of processing, and third-party access. Transparency and user control are key factors in this section.
medium85% confidence
Sharing Personal Information with Social Media Networks for Targeted Advertising
Productboard may share device information, identifiers, internet and electronic network activity, location information, and inference data with advertising networks and social media networks for targeted advertising, which may be considered a sale under California law.
Why it matters: Your personal information, including device identifiers, browsing history, and location, may be shared with advertising and social media networks for targeted ads, which could be considered a sale of your data under California law.
We engage in targeted (or cross context behavioral) advertising about the Websites or Services on other sites when we advertise our Services elsewhere. In connection with such advertising, we may share the following categories of information with advertising networks and providers and social media networks, which may be considered a sale under California law and is the processing of personal information for targeted advertising: device information and identifiers, such as IP address, and unique advertising identifiers and cookies; internet and electronic network activity information, such as browsing history; location information, such as city; and inference data.
Social Media Accounts, paragraph 3 · Citation strength: strong
Cancellation & Renewal
All clear
Policies related to subscription cancellations, service renewals, and associated billing practices. This includes notice periods for changes, ease of cancellation, and refund eligibility.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
All clear
Tricky clauses that may lead to unexpected outcomes. These often involve specific actions required by the user, limitations of liability, or conditions that might affect your rights or service. This section also includes clauses that may be perceived as unfair to the user.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
3 findings
User-friendly policies and features that promote transparency, control, and security. These are commitments made by the service provider that benefit the user, often exceeding basic legal requirements.
Protection95% confidence
Right to Withdraw Consent for Data Processing
Users have the right to not provide or withdraw consent at any time in situations where Productboard relies on consent to process personal information.
Why it helps: This allows users to maintain control over their personal information, enabling them to prevent or stop processing of their data when consent is the legal basis, enhancing their privacy choices.
Right not to provide consent or to withdraw consent: We may seek to rely on your consent in order to process certain personal information. Where we do so, you have the right not to provide your consent or to withdraw your consent at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
Your Privacy Rights and Choices, paragraph 1 · Citation strength: strong
Protection95% confidence
No Sale of Google User Data or Use for Targeted Advertising
Productboard explicitly states that it will not sell Google User Data or use such information for targeted advertising purposes.
Why it helps: This commitment ensures that data accessed from Google Drive will not be monetized through sale or used for targeted advertising, providing a strong privacy guarantee for users who integrate their Google Drive.
For the avoidance of doubt, we will not sell Google User Data or use such information for targeted advertising purposes.
Google User Data, paragraph 1 · Citation strength: strong
Protection90% confidence
No Sale of Personal Data Accessed via MCP Connections for Targeted Advertising
Productboard states it does not sell Personal Data accessed via MCP Connections, and such access does not constitute a sale or sharing for targeted advertising under applicable law.
Why it helps: This clarifies that even when using MCP Connections, user data is not sold or shared for targeted advertising, addressing a potential privacy concern associated with third-party AI integrations.
For the avoidance of doubt, Productboard does not sell Personal Data accessed via MCP Connections, and such access does not constitute a sale or sharing for targeted advertising under applicable law.
Google User Data, paragraph 1 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.