Dashbud | Privacy Policy

Dashbud — Privacy Policy

1. Overview

Dashbud (a general partnership of Arthur Dobelis and Scott Binger) ("Dashbud", "we", "our", or "us") is committed to protecting your privacy and your data. This Privacy Policy describes how Dashbud collects, uses, stores, and safeguards information when you use our platform and services.

Dashbud is designed to minimize its footprint on your data. How we handle your data depends on how you connect it — and in all cases, our AI layer never operates on your raw data.

2. What We Collect

When you use Dashbud, we collect only the information necessary to provide and improve our services:

  • Account information: Name, email address, organization name, and authentication credentials.
  • Connection metadata: Information about the databases and data sources you connect, including schema, table names, column names, data types, and relationships.
  • Semantic model data: Business rules, column descriptions, and — with your explicit permission — unique values of low-cardinality taxonomy columns (e.g., status codes, category names) used to improve query accuracy.
  • Usage logs: Activity logs related to feature usage, query execution, error reporting, and system diagnostics.

3. How We Handle Your Data

Dashbud handles your data differently depending on how you connect it:

Direct database connections (PostgreSQL, MySQL, SQL Server)

When you connect your own database, Dashbud does not store or access your underlying data. We read only metadata — table names, column names, data types, and relationships. Queries are generated by the AI and executed against your database; raw data flows directly from your database to your browser and is never transmitted to or stored on Dashbud's infrastructure.

Query outputs are not stored. With direct connections, Dashbud never holds any of your substantive business data.

File imports and APIs (CSV, Google Sheets, API integrations)

When you import data via file upload, Google Sheets, or API, your data is ingested into a managed PostgreSQL database within Dashbud's infrastructure. Imported data is:

  • Isolated within your organization and workspace boundaries
  • Encrypted in transit and at rest
  • Governed by role-based access controls and row-level security
  • Deletable on request or upon account termination

Google Sheets and Google Drive

When you connect your Google account, Dashbud requests read-only access through Google's OAuth 2.0 authorization flow. We access only the spreadsheets you explicitly select for import and store a copy of the imported data for querying. We also store an encrypted OAuth refresh token to re-access your selected spreadsheets for data updates.

We do not access spreadsheets you have not selected, modify or delete any Google files, or share your Google data with third parties or use it for advertising.

You can disconnect your Google account at any time from your Dashbud workspace or revoke access directly from your Google Account Permissions.

4. AI and Your Data

Dashbud's AI operates as a translation layer — it receives business questions and produces SQL queries, grounded in metadata and business rules. It never operates on your raw data.

Specifically:

  • The AI receives only structural metadata (schema, column types, relationships) and business context (semantic model definitions, business rules) to generate queries.
  • Low-cardinality taxonomy values are shared with AI services only with your explicit confirmation.
  • Row-level data and query output data are never sent to AI services.
  • Dashbud does not use your data to train, fine-tune, or develop AI models.
  • All generated queries are auditable — you can see exactly what was executed.

5. How We Use Your Information

We use the information we collect strictly to:

  • Authenticate users and provide access to the Dashbud platform
  • Generate AI-assisted queries using your metadata and semantic model
  • Enforce data governance rules (column exclusion, row-level filtering, workspace scoping)
  • Improve platform performance and reliability
  • Provide support and troubleshoot issues
  • Enforce our terms and protect against abuse

We do not use your information for advertising, sell or rent it to third parties, or allow any third-party AI models to access your data for purposes other than query generation.

6. Data Governance Controls

Dashbud provides workspace-level controls that let administrators determine what data each user or team can access:

  • Column exclusion: Sensitive columns can be hidden from users and from the AI entirely — they cannot be queried, filtered on, or referenced.
  • Row-level filtering: Workspaces can restrict queries to defined subsets of data, enforced at the query level.
  • Workspace scoping: A single data source can serve multiple audiences, each with its own column and row restrictions.

These controls apply to the conversational query interface, reports, and dashboards. The AI operates within the same restrictions as the user.

7. Security

We implement technical and organizational security measures including:

  • User authentication via Auth0 (industry-standard identity platform)
  • TLS/SSL encryption for all data in transit
  • Encryption at rest for stored data, credentials, and OAuth tokens
  • Role-based access control (owner, admin, user, viewer)
  • Strict enforcement of organization and workspace boundaries
  • Production and staging environment isolation
  • Logging and monitoring of access activity and query execution

Dashbud personnel have no direct query access to your data — whether it resides in your own database (connected as a data source) or in Dashbud's infrastructure (file imports, API data). Database credentials are encrypted and used only by the application at query time; there is no administrative role, console access, or internal tool that permits Dashbud staff to read, query, or export your data. Access to connection metadata and platform configuration is restricted to authorized personnel for support and diagnostics only.

8. Third-Party Services

Dashbud does not share customer data or metadata with external third-party services unless explicitly authorized by you. AI services receive only metadata and business context as described in Section 4, never raw data.

OAuth 2.0 is used for third-party integrations (e.g., Google Sheets). Tokens are encrypted at rest and scoped to minimum necessary permissions.

9. Data Retention and Deletion

  • Account data is retained only while your account remains active.
  • Connection metadata and semantic model data are retained to support ongoing query generation.
  • Imported data (file uploads, API, Google Sheets) is retained until you remove the data source or terminate your account.
  • You may request deletion of your account, metadata, or imported data at any time by contacting us.
  • Upon termination, customer data is deleted or returned per agreement terms.

10. Data Ownership and Portability

You retain all rights to the data you upload or connect to Dashbud. Dashbud acquires no ownership interest in your data. You may request a complete export of your ingested data at any time.

11. Compliance

  • HIPAA: Dashbud is designed to support HIPAA-covered workflows. We offer a Business Associate Agreement (BAA) for customers handling protected health information. Contact us before connecting PHI.
  • Privacy by architecture: Our schema-only AI model means sensitive data is not exposed to AI services by default, reducing compliance surface area.

12. Self-Hosted Deployment

For organizations with strict data residency or security requirements, Dashbud can be deployed into your own cloud environment. In this model, the entire platform runs within your cloud account and your data never leaves your infrastructure. Contact us for details.

13. Your Rights

You have the right to:

  • Request access to your account and profile data
  • Request correction or deletion of your information
  • Request export of your ingested data
  • Withdraw consent for optional data processing
  • File a complaint with a regulatory authority, if applicable in your jurisdiction

14. Children's Privacy

Dashbud is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date. Material changes will be communicated via email or platform notification.

16. Contact Us

For any questions or concerns about this Privacy Policy, please contact us at: hello@mail.getdashbud.com

Dashbud lets you create reports and dashboards from your own data with a conversational UI.

← Back to Home