Privacy Policy
IRISBOARD, operated by Scrum System Pvt Ltd. Last updated 16 October 2026.
IRISBOARD is a digital noticeboard for internal communication. An organisation subscribes, its HR team creates notices in a web console, and those notices play on display screens the organisation installs at its own sites. This policy covers both halves — the IRISBOARD display app for Android, and the web console at irisboard.com.
The display app collects no personal information
The app runs on a wall-mounted screen. It has no sign-in, no user account and no way to identify anyone. It does not use the camera or microphone, does not request location, does not read contacts, files or messages, and contains no advertising or analytics SDK.
It sends the following to the IRISBOARD service, so that the organisation that owns the screen can see whether the screen is working:
| What | Why |
|---|---|
| Pairing code, then an access token for the screen | To register the display against the organisation that owns it, and to authenticate afterwards |
| App version and content version | To tell the screen whether new content is waiting |
| Free storage space, time since restart, whether playback is working, and the text of any error | So an administrator can see that a screen has stopped without visiting it |
| Time, duration and size of each content download | To diagnose a screen that is failing to update |
None of this identifies a person. It describes a device, and it is visible only to the organisation that installed that device.
The web console collects information about the people who sign in
To use the console, an organisation's administrators and staff have accounts. For each we store a name, work email address and phone number, and a securely hashed password. These are used to sign the person in, to send one-time codes, and to record who created or approved a notice. We do not sell this information, and we do not use it for advertising.
We also store the notices and documents an organisation creates or uploads, and a record of what was published to which screen and by whom.
This website and the demo request form
When you ask for a demo on irisboard.com, we receive the name, company, work email address, phone number, number of locations and message you type. We store them and email them to our sales team so we can reply, and we use them only to contact you about IRISBOARD. You can ask us to delete them at any time.
So that we can tell which of our emails, posts or links brought a visitor here, the site
remembers, in your own browser and for 30 days, the campaign tags on the link you arrived by
(the utm_ parameters), the website that referred you and the first page you
landed on. If you then send a demo request, that information is stored with it. It is held in
your browser's local storage, not in a cookie, and it is not used to follow you around other
websites.
When a link with campaign tags is opened, we also count the visit: the tags, the page and the referring website. That count holds no IP address, no cookie and no information about your device, and it cannot be tied back to you.
Who else sees the data
- Microsoft Azure — hosts the service and stores the data.
- OpenAI — when someone uses the console to generate a notice with AI, the text of their request is sent to OpenAI to produce the artwork. Sign-in details and personal contact information are never sent.
Beyond these, we disclose information only where the law requires it. Each organisation's data is isolated from every other organisation's.
Security
Everything travels over encrypted connections (HTTPS/TLS). Passwords are stored as salted hashes and cannot be read back by us or by anyone else. Access to an organisation's data is restricted at the database level, not only in the application.
Retention
We keep an organisation's data for as long as its subscription is active. When a subscription ends, the data is retained for a limited period so it can be restored if the organisation returns, and is deleted after that on request or at the end of that period.
Children
IRISBOARD is a workplace product. It is not directed at children and we do not knowingly collect information from anyone under 18.
Your rights
If you are named in an IRISBOARD account, you may ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Contact your own organisation's IRISBOARD administrator first — they control the account — or write to us at the address below and we will help.
Changes
If this policy changes materially we will update the date at the top of this page and, where the change affects how we use personal information, notify account administrators by email.
Contact
Scrum System Pvt Ltd
sales@scrum-system.com