Privacy Policy

1. Who We Are

Dashira (“we”, “us”, “our”) is an interactive dashboard platform operated under the StartupGPT.pro umbrella. Our website is https://dashira.tech. For privacy inquiries contact us at privacy@dashira.tech.

2. Data We Collect

• Account data: Email address, name, and hashed password when you register. If you sign in via Google OAuth, we receive your Google profile name and email.
• Uploaded data: Files you upload to generate dashboards (CSV, Excel, JSON, XML, Parquet, SQL). These are processed server-side and stored in your account.
• Payment data: When you subscribe to a paid plan we use Stripe as our payment processor. We never see or store your full credit card number. Stripe processes your card details under their own Privacy Policy. We store your Stripe customer ID, subscription ID, plan tier, and subscription status.
• Usage data: Server logs including IP address, browser type, pages visited, and timestamps for security and operational purposes.
• Cookies: See Section 7 below.

3. How We Use Your Data

• Provide, maintain, and improve the Dashira platform
• Process payments and manage subscriptions via Stripe
• Send transactional emails (account verification, password reset, subscription receipts)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Payment Processing & Stripe

All payment transactions are handled by Stripe, Inc. When you subscribe, you are redirected to a Stripe-hosted checkout page. Stripe collects your payment method details directly. We receive webhook notifications from Stripe about subscription events (e.g., successful payment, cancellation, failed payment). We store only:

• Stripe Customer ID
• Subscription ID and status (active, canceled, past_due)
• Plan tier (Free, Pro, Ultimate)
• Current billing period end date

You can manage your subscription and payment methods through the Stripe Customer Portal.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing
• Resend — for transactional email delivery
• Google — if you use Google OAuth for sign-in
• Law enforcement — when legally compelled to do so

6. Data Retention

We retain your account data and uploaded dashboards for as long as your account is active. If you delete your account, we will remove your personal data and uploaded files within 30 days. Payment records may be retained longer as required by tax and accounting regulations.

7. Cookies

Dashira uses the following cookies:

• Essential cookies: Authentication tokens (JWT), session identifiers, and cookie consent preferences. These are required for the platform to function.
• No tracking cookies: We do not use advertising, analytics, or third-party tracking cookies.

You can manage cookie preferences through the cookie banner shown on first visit (in regions where required by law) or through your browser settings.

8. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@dashira.tech.

9. Security

We protect your data with HTTPS encryption, bcrypt password hashing, rate limiting, CORS policies, security headers (CSP, HSTS, X-Frame-Options), and account lockout after failed login attempts. While no system is 100% secure, we follow industry best practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date and, for material changes, notify you by email or a prominent notice on our website.