Privacy Policy

DashVault ("we," "us," or "our") operates the DashVault website and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account, make a purchase, or contact us, we may collect:

• Account information — your email address and password (hashed; we never store plaintext passwords)
• Payment information — processed entirely by Stripe. We do not receive, store, or have access to your full credit card number, CVV, or billing address. Stripe provides us only with a transaction identifier and payment status.
• Communications — any messages, feedback, or support requests you send us via email

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

• Log data — IP address, browser type and version, pages visited, time and date of visits, time spent on pages, and referring URL
• Device information — operating system, device type, and screen resolution
• Cookies and similar technologies — see Section 5 below

1.3 Information We Do Not Collect

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process purchases and deliver template files
• Send transactional emails (purchase confirmations, download links, password resets)
• Provide customer support and respond to inquiries
• Improve the Service, including analyzing usage patterns and fixing bugs
• Detect, prevent, and address fraud or technical issues
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. How We Share Your Information

We may share your information only in the following circumstances:

• Payment processing — Stripe receives the information necessary to process your payment. Stripe's privacy policy governs their use of your data. See stripe.com/privacy.
• Authentication — Supabase provides our backend authentication and database services. See supabase.com/privacy.
• Hosting — Netlify hosts our website. See netlify.com/privacy.
• Legal requirements — we may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers — if DashVault is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data — retained until you delete your account or request deletion
• Purchase records — retained for as long as necessary to fulfill our legal and accounting obligations (typically 7 years for tax records)
• Log data — automatically deleted after 90 days

You may request deletion of your account and associated personal data at any time by contacting us at support@dashvault.co.

5. Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies — required for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the Service so we can improve it. These cookies do not collect personally identifiable information.

You can configure your browser to refuse cookies, though this may affect your ability to use certain features of the Service (e.g., staying logged in).

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Passwords are hashed using industry-standard algorithms before storage
• Authentication tokens are stored in httpOnly, Secure cookies to prevent cross-site scripting (XSS) attacks
• Our infrastructure providers (Netlify, Supabase, Stripe) maintain SOC 2 compliance
• Database access is protected by Row Level Security (RLS) policies, ensuring users can only access their own data

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Portability — request a machine-readable copy of your data
• Objection — object to certain processing of your personal data
• Withdrawal of consent — where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, contact us at support@dashvault.co. We will respond within 30 days.

8. Third-Party Links

The Service may contain links to third-party websites or services (e.g., Microsoft Power BI, Stripe checkout). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States. By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: