BoardwalkDesk Privacy Policy

Solutions Group Unlimited, LLC · Last updated November 10, 2026

This policy explains what information Solutions Group Unlimited, LLC ("SGU", "we", "us") collects when you use BoardwalkDesk at boardwalkdesk.com, what we use it for, and who else sees it. We do not sell personal information. SGU's website and desktop software are covered by the SGU privacy policy.

BoardwalkDesk has two kinds of users:

Teams: the company that runs a desk (the "desk owner"). Team members sign in with a Microsoft work account and connect the desk to their own Azure DevOps project.
Customers: people who raise and follow tickets on a desk. They sign in with their email address and a one-time code.

Where tickets are kept

Ticket titles, descriptions, comments and attachments are stored as work items in the desk owner's own Azure DevOps project, not in BoardwalkDesk's database. BoardwalkDesk reads and updates them there on the desk owner's behalf and shows customers only what that desk's rules allow. The desk owner decides what is collected in its tickets and how long it is kept; we process that content for the desk owner. Questions about the tickets on a desk go to the company that runs it.

What we store

Team members: name and email address from Microsoft sign-in, Microsoft Entra tenant and user IDs, and your role on each desk. Changes made in the team area (for example adding an admin or disconnecting Azure DevOps) are recorded with your email address.
Azure DevOps connection: when a team admin connects a desk, Microsoft gives BoardwalkDesk a token that acts with that admin's Azure DevOps permissions. We store it encrypted and use it only to read and update work items in the connected project and to set up the notifications Azure DevOps sends us when a ticket changes.
Desk settings: the desk's name and address, the Azure DevOps organization, project and work item type it uses, its status labels and sign-up rules, its trial dates, and the email address of the person who created it.
Plan: for a desk with a paid plan, the plan and billing interval, its status (active, payment overdue or ended), the date it is paid through, whether it is set to cancel at the end of that period, and when we last checked this with SGU's billing service. We do not store card or bank details.
Customers: your email address, the display name you give (if any), when you signed up and last signed in, which tickets you raised, and whether attachments you upload are shared.
Sign-in codes: we email you a one-time code that expires after 15 minutes. We store only a salted hash of it (never the code itself), with your email address and the IP address that asked for it, and delete these records about a day after they expire.
Notifications: a record of which update emails were sent to which address, so you don't get the same email twice.
Change messages from Azure DevOps: the messages Azure DevOps sends us when a work item changes can include ticket fields. We store them so they can be processed reliably.

Email

We send sign-in codes and ticket update emails through Microsoft Azure Communication Services. We send only email about your tickets and your sign-in; we do not send marketing email from BoardwalkDesk.

Cookies

BoardwalkDesk uses only the cookies it needs to work:

bw_portal and bw_team keep customers and team members signed in. Both are encrypted.
lb_boardwalkdesk keeps your visit on the same server.
A security cookie protects forms against cross-site requests, and short-lived cookies are used while you sign in with Microsoft.

We do not use analytics or advertising cookies.

Server logs

Our servers record technical details of requests and errors, such as IP addresses and the pages requested. An error message can name the desk or email message it is about. Sign-in codes and tokens are never written to the logs. BoardwalkDesk's own logs are kept for 30 days.

Who we share information with

The desk owner sees the email address, name and tickets of the customers on its desk.
Microsoft provides the services BoardwalkDesk is built on: Microsoft Entra ID for team sign-in, Azure DevOps (where the tickets are kept, under the desk owner's agreement with Microsoft) and Azure Communication Services for email.
jsDelivr, a public content network, serves the icon font our pages use, so it receives your IP address and browser details like any web request. It sets no cookies.
Stripe processes payments for paid plans through Solutions Group Unlimited's billing service. When a team admin starts a subscription, we send the desk's ID and name, the chosen plan and the admin's email address to that service, which opens the Stripe checkout. When an admin switches the desk to another plan, we send the desk's ID and the new plan. Card details go straight to Stripe and are never seen or stored by us.

These providers may use the information only to provide their services. We may also disclose information if the law requires it. BoardwalkDesk runs on servers operated by SGU in the United States.

How long we keep it

Desk, team and customer records are kept while the desk exists. When a desk is closed we delete its BoardwalkDesk records, except what we must keep for legal, tax, accounting or security reasons. Closing a desk does not delete the work items in the desk owner's Azure DevOps project; the desk owner controls those. Sign-in code records and logs are deleted as described above.

Your choices

Customers can ask the company running the desk, or us, to see, correct or delete their information.
Team admins can disconnect Azure DevOps in the desk's settings, which deletes the stored token. You can also remove BoardwalkDesk's access from your Microsoft account or your organization's Microsoft Entra admin center.
To close a desk, or for any other request about your information, email us at the address below.

BoardwalkDesk is a business service and is not directed at children under 13.

Security

Connections to BoardwalkDesk use HTTPS. Azure DevOps tokens and webhook secrets are stored encrypted, sign-in codes are stored only as hashes, and one desk's customers cannot see another desk's tickets.

Changes

If we change this policy we will update the date at the top of this page.

Contact

Solutions Group Unlimited, LLC
Email: support@solutionsgroupunlimited.com