Privacy Policy

DashyCast ("we", "our", or "us") operates the website at dashycast.com and the application at app.dashycast.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using DashyCast, you agree to the practices described here.

Account information. When you sign up, we collect your email address and, if you connect Salesforce, the OAuth access and refresh tokens necessary to read your Salesforce data on your behalf. We do not store your Salesforce password.

Salesforce data. DashyCast fetches report and dashboard data from your Salesforce org to render charts. This data is fetched live on demand and cached temporarily for performance. We do not permanently store your Salesforce records.

Usage data. We collect standard web analytics including pages visited, features used, and error logs. This helps us improve the product.

Billing information. Payment is processed by Stripe. We do not store credit card numbers. We receive a customer ID and subscription status from Stripe.

• To provide and operate the DashyCast service
• To authenticate you with Salesforce via OAuth
• To render and serve your published embeds and image URLs
• To process payments and manage your subscription
• To send transactional emails (account, billing, security)
• To diagnose bugs and improve the service

We do not sell your data. We do not use your Salesforce data for any purpose other than rendering your own charts.

We use the following third-party services:

• Salesforce — OAuth authentication and data access. Governed by Salesforce's privacy policy.
• Stripe — Payment processing. Governed by Stripe's privacy policy.
• Supabase — Database and authentication infrastructure. Data is stored in the US.
• Vercel — Hosting and edge delivery.

We use session cookies to keep you signed in and preference cookies to remember your settings. We do not use third-party advertising cookies. You can clear cookies at any time through your browser settings, though this will sign you out.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data and Salesforce tokens within 30 days. Anonymised usage data may be retained for analytics purposes.

Depending on your location, you may have rights including: access to your data, correction of inaccurate data, deletion of your data, and objection to certain processing. To exercise any of these rights, contact us at the address below.

If you are in the EU or UK, you have rights under GDPR. If you are in California, you have rights under CCPA.

We use industry-standard security practices including encrypted connections (HTTPS), encrypted storage of tokens, and access controls. No system is perfectly secure — if you discover a vulnerability, please contact us responsibly at legal@dashycast.com.

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of DashyCast after changes constitutes acceptance.

Questions about this policy? Email us at legal@dashycast.com.