ChalkyBoard

Privacy

Last updated 23 August 2026

ChalkyBoard is a whiteboard that saves your work. That means it holds some information about you, and this page says plainly what, why, and for how long. If anything here is unclear, write to us and we will explain it.

The short version. We keep your account details, the boards you draw, and the files you upload. We do not sell any of it, we do not advertise, and we do not train anything on your work. There is nowhere in ChalkyBoard for a child to have an account or enter an email address. You can ask us to delete everything at any time and we will.

Who we are

ChalkyBoard is a service of Answers Tutoring LLC, trading as College Prep System, of 3735 Franklin Rd SW #120, Roanoke, VA 24014. For data protection purposes we are the controller of the information described here. Contact: privacy@chalkyboard.com.

What we collect, and why

WhatWhyKept
Your name, email address and a hashed password. If you sign in with Google, your Google account email and name instead. To have an account at all, to sign you in, and to send you password resets.Until you delete the account.
The boards you draw, saved as a document and as an image. So they are there when you come back. This is the product. Until you delete them, or the account.
Files you upload: PDFs, images, and Content Packs. To show them on the board and keep them in your library. Until you delete them, or the account.
Names you give the people you work with, on their folders. To file boards where you can find them. First names are enough and we suggest nothing more.Until you delete them, or the account.
Notes you type or paste against a session. Because you asked us to keep them with that session. Until you delete them, or the account.
When you email boards to somebody: their address, the wording you agreed to, the time, your IP address and browser. To send the message, and to have a record of who asked us to send what if anybody ever complains about receiving it. Two years, then deleted.
Beta invitations you send: the address, the time, and whether it was delivered.To send it, to stop the same person being emailed twice, and to credit you when they join.Two years, then deleted.
The parent and guardian addresses you save against a student, up to five, with an optional label such as "Mum" and the date you confirmed each one belongs to an adult. So you can tick them next time instead of typing them again. You can remove any of them from the same panel, at any time. Until you remove the address, the student, or the account.
The domain a copy of the whiteboard is running on, with a short code identifying which account the file was served to. To find out if the product has been copied onto somebody else's website. It records a domain and a code, never anything you have drawn, written or uploaded, and never anything about a student. Until you delete the account.
How much storage you are using.To show you the meter and to apply the limit on your plan.Until you delete the account.
If you subscribe: your Stripe customer and subscription identifiers. We never see or store your card details. To know what you are paying for. As long as required by tax and accounting law.

We do not use advertising trackers, we do not build profiles for advertising, and we do not sell or rent personal information to anybody, for any purpose.

If you sign in with Google

Signing in with Google is optional. There is a password option and it does everything the Google one does.

If you choose it, Google tells us your email address, your name, and that Google has confirmed the address belongs to you. That is the whole of it, and it is the same information you would have typed yourself.

We use it for one thing: to create your ChalkyBoard account and to sign you into it. The address is how we recognise you when you come back and where we send things about your account. The name is what appears on a message when you email a lesson home, so a parent sees who it is from.

We do not ask Google for anything else. We have no access to your Gmail, your Drive, your contacts, your calendar or your photos, and we could not read them if we wanted to, because we never request permission to. We do not use anything from your Google account for advertising, we do not sell or share it, and we do not use it to train machine learning models. It is stored alongside the rest of your account and is deleted when your account is deleted.

You can disconnect ChalkyBoard from your Google account at any time at myaccount.google.com/connections. Doing that stops the Google sign-in working; it does not delete your ChalkyBoard account, and you can still get in with a password. To delete the account itself, see what you can ask for below.

What we do not collect

Children

ChalkyBoard is for people aged 18 and over. Creating an account requires you to be an adult, and we do not knowingly collect personal information from anybody under 18.

A child may be present in a lesson and may draw on a board through a link an adult sends them. That does not create an account, we do not ask them for a name, an email address, or anything else about them, and nothing about them is stored except the marks they draw, which belong to the account holder's board in the same way a mark on a piece of paper would.

If you believe a child has given us personal information, tell us at chalkyboard.com/report and we will delete it.

Who else sees it

Only the companies that make the service run, and only for that purpose. Each is bound by its own contract to handle it appropriately.

We will also disclose information where the law genuinely requires it, and to protect somebody from harm. We report child sexual abuse material to the National Center for Missing and Exploited Children where the law obliges us to, as any service in the United States must.

Where it is held

On Cloudflare's network, which stores and processes data in several countries including the United States. If you are in the United Kingdom or the European Economic Area, that means your information may be transferred outside it, under the standard contractual clauses our providers operate.

Emails we send you

Three kinds, and you can stop the third at any time.

We never email a student, and we never email a parent or guardian except at the moment you press the button that sends them work.

How long we keep it

Anything you delete is deleted. Delete a board and it goes, along with the image and the file behind it.

If you close your account, or if a paid subscription ends and is not renewed, we keep the account for one year and then delete it permanently, along with every board, image and uploaded file in it. The year exists so that somebody who stops paying over a summer does not lose three years of work. Nothing is recoverable after that, and there is no backup we can restore from.

We write to you first. At least fourteen days before anything is removed you get an email saying what will go and on what date, with a reminder that every board can be downloaded as an ordinary PDF. If we cannot reach you, nothing is deleted: an account we were unable to warn waits until we have warned it. Starting a plan again at any point stops the clock entirely and nothing is removed.

When that day comes, everything goes: boards, captures, uploaded files, students, folders, session notes, the addresses you saved for parents and guardians, and the record of what was sent to them. The one thing that survives is our own administrative log of the deletion itself, which records that an account was deleted, when, and by whom, and holds nothing you created.

You do not have to wait for it. Ask us to delete the account and we will do it within thirty days.

Cookies

Two, and neither one follows you anywhere.

No analytics cookies, no advertising cookies, no third-party trackers.

What you can ask for

Whatever country you are in, you can ask us to:

Write to privacy@chalkyboard.com and we will answer within thirty days. We will not charge you and we will not make the service worse for you because you asked.

If you are in the United Kingdom or the European Economic Area, our lawful bases are performance of a contract with you, our legitimate interest in keeping the service secure and working, and consent where you have given it. You may complain to your supervisory authority. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.

Security

Everything travels over an encrypted connection. Passwords are stored hashed and we cannot read them. Your stored files are not public: they are served only to your signed-in account, and there is no public address for them. No system is perfect, and we will tell you promptly if something happens that affects you.

Changes

If we change this page in a way that matters, we will say so on the site and, for anything significant, by email. The date at the top always tells you when it last changed.