Privacy Policy

1. Introduction

CodeCraft Studios, LLC ("Company," "we," "us," or "our") operates the DashForDevs platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. The Service operates exclusively within the United States.

By using DashForDevs, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (hashed), organization name
• Billing Information: Payment method details (processed and stored by Stripe; we do not store raw card numbers)
• Content: Products, services, images, blog posts, pages, media files, and other content you upload
• Customer Data: Information about your customers collected through your frontend (orders, appointments, contact submissions, profiles)
• Communications: Messages sent through support channels or contact forms

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, API calls made, timestamps
• Device Information: Browser type, operating system, device type, screen resolution
• IP Address: Used for security, rate limiting, and approximate geolocation
• Cookies: Session cookies for authentication and preferences
• Analytics: Aggregated usage patterns to improve the Service

2.3 Information from Third Parties

• Payment status from Stripe or Authorize.net
• Shipping tracking data from ShipEngine (e-commerce organizations)
• Analytics data from PostHog and Google Analytics (if configured)

3. How We Use Your Information

• Provide the Service: Operate the platform, manage your organization, process transactions
• Process Payments: Charge subscription fees and process your customer transactions
• Improve the Service: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send transactional emails, service updates, and support responses
• Security: Detect fraud, prevent abuse, enforce rate limits, and protect accounts
• Marketing: Use uploaded content (including logos and brand materials) in marketing, promotional materials, case studies, and platform showcases, as described in our Terms of Service
• Legal Compliance: Comply with applicable United States laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

4.1 Service Providers

• Stripe / Authorize.net: Payment processing
• ShipEngine: Shipping rate calculation and label generation (e-commerce)
• Amazon Web Services (AWS): Cloud infrastructure and media storage (S3, CDN)
• PostHog: Product analytics (if enabled by you)
• Klaviyo: Email marketing (if configured by you)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose information if required by United States law, subpoena, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Your Customer Data

When you use DashForDevs to run a website, store, or service business, you act as a data controller for your customers' data. We act as a data processor on your behalf:

• You are responsible for obtaining proper consent from your customers
• You must have your own privacy policy informing your customers how their data is used
• We process customer data only as instructed by you through the Service
• We implement appropriate security measures to protect customer data
• Customer data is isolated per organization — your data is not accessible to other users
• This applies to all data types: orders, appointments, contact submissions, profiles, and custom data

6. Data Security

• Encryption: All data in transit is encrypted via TLS/HTTPS
• Password Hashing: Passwords are hashed using bcrypt
• Tokenization: Payment card data is tokenized — raw card numbers are never stored
• Access Controls: Role-based access control for team members
• API Key Security: Separate public and secret keys with different permission levels
• Rate Limiting: Protection against brute-force attacks and abuse
• Regular Backups: Automated database backups

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Account Data: Retained while your account is active, plus 30 days after deletion
• Customer Data: Retained while your account is active; deleted after account termination and grace period
• Billing Records: Retained for 7 years for tax and accounting compliance
• Server Logs: Retained for 90 days
• Marketing Content: Content used in marketing materials prior to account termination may be retained as described in our Terms of Service

8. Your Rights

You may:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Opt-Out: Opt out of marketing communications at any time
• Marketing Use: Request removal of your content from our marketing materials

To exercise any of these rights, contact us at privacy@dashfordevs.com. We will respond within 30 days.

9. Cookies

You can manage cookies through your browser settings. Disabling essential cookies may affect functionality.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. Geographic Scope

The Service is intended for use within the United States. We do not target or market the Service to individuals outside the United States. If you access the Service from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Material changes will be communicated via email or dashboard notification.

14. Contact Us

• Privacy: privacy@dashfordevs.com
• General: support@dashfordevs.com
• Website: dashfordevs.com

Last updated: March 29, 2026