Privacy Policy

We use collected information to:

• Process transactions and deliver purchased products
• Provide customer support and respond to inquiries
• Send transactional emails (purchase confirmations, download links)
• Send marketing communications (with your consent, opt-out available)
• Improve our products and services based on usage data
• Detect and prevent fraud or abuse
• Comply with legal obligations

We process your data under the following legal bases:

• Contract performance: To fulfill purchase orders
• Legitimate interests: To improve services and prevent fraud
• Consent: For marketing communications and non-essential cookies
• Legal obligation: For tax and accounting purposes

We share data with trusted third-party service providers:

• Stripe: Payment processing
• Resend: Transactional emails
• Supabase: Data storage and authentication
• Google Analytics: Website analytics
• Vercel: Website hosting

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

We NEVER sell your personal data to third parties.

We retain your data for:

• Account data: Until you request deletion
• Transaction records: 7 years (legal requirement)
• Marketing data: Until you unsubscribe
• Analytics data: 26 months (Google Analytics default)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion ("right to be forgotten")
• Portability: Receive your data in machine-readable format
• Restriction: Limit processing of your data
• Object: Opt-out of marketing communications
• Withdraw consent: At any time for consent-based processing

To exercise your rights, contact us at legal@dashkit.online. We'll respond within 30 days.

We implement industry-standard security measures:

• SSL/TLS encryption for data transmission
• Secure payment processing via PCI-compliant Stripe
• Regular security audits and updates
• Access controls and authentication
• Data encryption at rest

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Your data may be transferred to and stored on servers located outside your country. We ensure adequate protection through:

• EU-US Data Privacy Framework certification (for US-based providers)
• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe we've collected data from a child, contact us immediately.

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on our website. Continued use after changes constitutes acceptance.