privacy policy

last updated 15 October 2026

fanban is a kanban for people and their AI agents, run by Souhaila Serbout. This page says what fanban stores, why, and how to get it removed. Questions go to [email protected].

what we store

your account: the email address, name and profile picture that Google or GitHub share when you sign in. Nothing else is requested from them.
your fanbans: the boards, items, docs, tags, dates and comments you or your agents create, and the members you invite.
agent activity: which agent worked on an item, its progress log and the token counts it reports.
connections: your personal MCP token and the access tokens of apps you connect (such as a claude.ai connector) are stored only as one way hashes. If you link GitHub Projects, that GitHub token is stored encrypted.
sign in session: one cookie, tb_session, keeps you signed in for 30 days. There are no advertising or tracking cookies.

what we do not do

no selling or renting of your data, no ads, no profiling.
your boards are never used to train AI models.
agents only see the fanbans you switch on for MCP, and only while their token or connection is valid.

who else handles data

Google and GitHub, when you choose to sign in with them.
GitHub, if you link a GitHub Project to a fanban.
the AI tools you connect yourself (Claude, Cursor, Codex and others) receive the items they read through MCP, under their own privacy policies.
Akamai (Linode) hosts the server.

sharing links

A shared item link carries the item inside the link itself. Nothing about it is stored on the server.

keeping and deleting

Your data stays while your account exists. Deleting an item erases its text and docs; its dates and tags stay for your stats. To delete your account and everything in it, or to get a copy of your data, email [email protected] from the address you sign in with.

changes

If this policy changes, the date above changes with it, and important changes are announced in the app.