Privacy Policy

1. Introduction

Dashlio ("we," "our," or "the Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website www.dashlioapp.com (the "Site") and when you use our SaaS real estate management platform, including client, property, tenant, document, and payment management (the "Services").

By using our Site, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Site.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us when you:

• Register for an account on our platform
• Create an organization and set up your workspace
• Add clients, properties, tenants, or other data to the platform
• Upload documents to our system
• Make payments or manage your subscription
• Complete our contact form
• Communicate with us by email or phone

This information may include:

• Account information: full name, email address, password (hashed), phone number
• Organization information: company name, team members, subscription plan
• Business data: client, property, tenant, lease agreement, and payment information that you enter into the platform
• Documents: files you upload to the platform (contracts, deeds, etc.)
• Payment information: billing data processed through Stripe (we do not store card numbers directly)
• Communication information: messages, inquiries, and correspondence

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device, including:

• Device information: IP address, browser type, operating system, language settings
• Usage data: pages visited, time spent, links clicked
• General location information: city, state, country (based on IP address)
• Cookies and similar technologies: see our Cookie Policy for more details

2.3 Information from Third Parties

We may receive information about you from analytics services (Google Analytics, Vercel Analytics), advertising platforms (Meta Pixel / Facebook), email service providers (Resend), authentication and database platforms (Supabase), and payment processors (Stripe).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing services: operating the platform, managing your account, processing subscription payments, and enabling you to manage your real estate data
• Communication: sending you information about our services, real estate market updates, and responding to your inquiries
• Improving our Site: analyzing how the Site is used to improve functionality and user experience
• Security: protecting against fraud, unauthorized activities, and maintaining Site security
• Legal compliance: complying with applicable legal and regulatory obligations
• Marketing: sending you promotional information about our services (only with your consent)

4. Disclosure of Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share your information with service providers who help us operate our business, including:

• Payment processing: Stripe (for managing subscriptions and credit card payments)
• Email services: Resend (for sending communications and notifications)
• Hosting and database: Supabase, Vercel (for data storage and Site hosting)
• Analytics: Google Analytics and Vercel Analytics (for Site usage and performance analysis)
• Advertising: Meta Platforms, Inc. (Meta Pixel for measuring the performance of advertising campaigns on Facebook and Instagram and creating custom audiences)

These providers are contractually obligated to protect your information and may only use it for the specific purposes we authorize.

4.2 Legal Compliance

We may disclose your information if required to do so by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from governmental or regulatory authorities
• Protection of our legal rights or defense against claims
• Prevention of fraud or illegal activities

4.3 Business Transactions

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Your Privacy Rights

5.1 All Users

You have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information (subject to certain legal exceptions)
• Marketing opt-out: unsubscribe from marketing communications at any time

5.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: what personal information we collect, use, and share
• Right to delete: request the deletion of your personal information
• Right to opt out: opt out of the sale of personal information (we do not sell your information)
• Right to non-discrimination: not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at: legal@dashlioapp.com

5.3 How to Exercise Your Rights

To exercise any of these rights, you may:

• Send an email to: legal@dashlioapp.com
• Call us at: +1 (561) 418-9166
• Write to us at: Dashlio, 6869 Willow Creek Run, Greenacres, FL 33463

We will respond to your request within 45 days. We may request additional information to verify your identity before processing your request.

6. Data Security

We implement technical, administrative, and physical security measures designed to protect your personal information against unauthorized access, loss, destruction, or alteration, including:

• SSL/TLS encryption for data transmission
• AES-256-GCM field-level encryption for sensitive data (addresses, financial information, tenant data)
• Full encryption of documents stored on the platform
• Multi-tenant data isolation with Row Level Security (RLS) at the database level
• Secure storage on protected servers
• Role-based restricted access to personal information (owner, admin, member)
• CSRF protection, rate limiting, and action auditing
• Credit card data is processed directly by Stripe and never passes through our servers

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless the law requires or permits a longer retention period.

The criteria we use to determine the retention period include:

• The time necessary to provide our services
• Whether you have an active account with us
• Legal, tax, or audit obligations
• Dispute resolution and enforcement of our agreements

8. Children's Privacy

Our Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a minor under the age of 18 without verification of parental consent, we will take steps to delete that information from our servers.

9. Links to Third-Party Sites

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We recommend that you read the privacy policies of each website you visit.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. We take measures to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

11. Third-Party Data You Enter

When using Dashlio, you may enter personal data of third parties into the platform, such as information about your clients, tenants, or business contacts. In this context:

• You are the Data Controller: you decide what third-party data you enter into Dashlio and for what purpose
• Dashlio acts as the Data Processor: we process that data solely to provide you with the Services according to your instructions

As a Dashlio user, you are responsible for:

• Obtaining the necessary consent from your clients and tenants to store their data on the platform
• Complying with applicable privacy laws regarding the third-party data you enter
• Informing your clients and tenants about how their data is processed

Dashlio protects this data with the same security and encryption standards described in Section 6, including AES-256-GCM encryption for sensitive data and multi-tenant isolation at the database level.

12. European Economic Area Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: we process your data based on: (a) performance of a contract (provision of the Services), (b) your consent, (c) our legitimate interests (improving the Services, security), or (d) compliance with legal obligations
• Right of access: obtain confirmation of whether we process your data and access it
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request the deletion of your data ("right to be forgotten")
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to the processing of your data in certain circumstances
• Right to restriction: request that we restrict the processing of your data
• Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

International transfers: your data may be transferred to servers located in the United States. These transfers are carried out with appropriate safeguards, including the use of providers that comply with recognized data protection frameworks.

To exercise any of these rights, contact: legal@dashlioapp.com. We will respond within 30 days.

13. Changes to this Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Material changes will take effect 30 days after publication. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: