Privacy Policy

Dashboard Driven ("we", "us", or "our") operates a data visualization and analytics platform. This Privacy Policy explains how we collect, use, and protect information about you when you use our Service. By using the Service you agree to the practices described here.

Account information. When you sign up, we collect your name, email address, and authentication provider (e.g., Google, Microsoft).

Workspace data. You may configure your workspace with a name, branding assets (logo, colors), and member lists. For individual or personal-use accounts, this is limited to your own profile and any members you invite.

Connected data sources. When you connect a data source (e.g., Google Sheets, OneDrive, QuickBooks), we store the OAuth credentials needed to retrieve data on your behalf and cache the resulting data to power your dashboards.

Usage data. We collect logs of actions taken within the Service (e.g., dashboard views, connector syncs) for reliability, security, and product improvement.

Payment information. Billing is processed by Stripe. We do not store full card numbers. We receive and store transaction records and subscription status.

• Provide, operate, and improve the Service
• Authenticate your identity and manage your session
• Process payments and manage your subscription
• Send transactional communications (e.g., invitations, billing receipts)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal data to third parties, and we do not use your data to train AI models without your explicit consent.

We share your information only in the following circumstances:

• Service providers. We use trusted sub-processors (e.g., Google Cloud Platform for hosting, Stripe for payments, Resend for email) who process data on our behalf under strict data protection agreements.
• Within your workspace. Administrators or owners of your workspace can see member lists and activity. For personal or group accounts, data is shared only with the family or group members you invite.
• Legal requirements. We may disclose information if required to do so by law or in response to a valid legal process.
• Business transfers. In the event of a merger or acquisition, your information may be transferred as part of that transaction, with notice provided to you.

When you connect a third-party service (Google Sheets, Microsoft OneDrive, QuickBooks, etc.), that service's own privacy policy applies to data held by them. We access only the data scopes you explicitly authorize during the OAuth flow.

Certain features use AI models to generate narrative summaries or insights from your dashboard data. Your data is sent to the AI provider (Anthropic) solely to fulfill your request and is not used to train external models. You can disable AI features in your organization settings.

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for 30 days before permanent deletion, unless a longer retention period is required by law.

Cached connector data is refreshed on your configured schedule and older snapshots are pruned automatically.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, secrets management via Google Cloud Secret Manager, and access controls. No system is completely secure, and we cannot guarantee absolute security of your data.

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@dashboarddriven.com. We will respond within 30 days.

Organization administrators can export or delete their organization's data from the organization settings page.

We use a single session cookie (dd_session) that is strictly necessary for authentication. We do not use advertising cookies or cross-site tracking technologies.

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

Our infrastructure is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Your continued use after the effective date constitutes acceptance of the updated policy.

Questions or concerns about this Privacy Policy? Contact us at privacy@dashboarddriven.com.