Privacy Policy

Effective and last updated 5 August 2026.

This Privacy Policy explains how the organization operating Dashboard Grid (“Dashboard Grid”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit our website, create an account, use the analytics platform, contact support or purchase a subscription.

1. Scope and roles

This policy applies to the Dashboard Grid website, application, support and billing services. For account, marketing and billing information, Dashboard Grid generally acts as the data controller. For datasets uploaded or connected by a customer, the customer controls the purpose and permitted use of that data and Dashboard Grid processes it to provide the service.

2. Information we collect

• Account information, including name, work email, password hash, company, role, department and verification status.
• Company and subscription information, including billing region, selected plan, entitlements, usage, invoices, payment status and payment evidence.
• Customer content, including uploaded spreadsheets, connected-source data, models, dashboards, prompts, AI responses and saved configurations.
• Support and communication information, including enquiries, tickets, invitation details and email delivery records.
• Technical and security information, including IP address, authentication events, browser or device information, audit events and diagnostic logs.
• Cookie and preference information described in our Cookie Policy.

3. How we use information

We use information to create and secure accounts; isolate customer workspaces; import, model and visualize data; provide AI-assisted analytics; process subscriptions and invoices; deliver service messages; respond to support; detect misuse; maintain, troubleshoot and improve the service; and comply with legal obligations.

4. AI processing

When hosted AI is enabled, relevant prompts, dataset profiles and grounded analytical evidence may be sent to the configured AI provider to generate an answer. Dashboard Grid is designed to minimize the information sent and may withhold category labels where fields appear sensitive. Customers should not submit personal, confidential or regulated information to AI features unless they have authority and an appropriate agreement to do so. When hosted AI is not configured or available, supported questions may be answered by the local analytics engine.

5. Legal bases and customer instructions

Depending on location and context, processing may be necessary to perform a contract, take steps requested before a contract, comply with law, protect legitimate security and operational interests, or act on consent. Customer content is processed according to the customer’s authorized instructions and the applicable service agreement.

6. Sharing and service providers

We do not sell customer datasets or personal information. Information may be shared with authorized customer administrators and vetted providers supporting hosting, storage, email, security, payment processing, support and AI functionality. We may also disclose information when legally required, to protect rights or safety, or as part of a corporate transaction subject to appropriate safeguards.

7. International transfers

Service providers may process information in countries other than the user’s country. Where required, Dashboard Grid and the customer should use appropriate contractual and organizational safeguards for international transfers.

8. Retention and deletion

We retain account and customer content while the service is active and as needed to provide exports, security, billing, dispute handling and legal compliance. Authorized administrators may request deletion of a company workspace. Deleted information may remain in protected backups until the applicable backup cycle expires. Payment, audit or legal records may be retained longer where required.

9. Security

Dashboard Grid uses company-scoped access, role authorization, password hashing, email verification, lockout controls, antiforgery protection, security headers, audit events and other technical and organizational safeguards. No system is completely secure, so customers must also protect credentials, limit administrators and promptly report suspected incidents.

10. Your rights and choices

Subject to applicable law, individuals may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Customer users should normally contact their company administrator first because the customer controls workspace data. You may also control optional cookies, update account information and request support through the application.

11. Children

Dashboard Grid is a business service and is not directed to children. Do not create an account or provide a child’s personal information unless the customer has a lawful basis, appropriate authority and required safeguards.

12. Policy changes

We may update this policy to reflect product, provider or legal changes. The revised version will show a new effective date. Material changes may also be communicated through the service or account email.