Privacy Policy

Dashplan ("we", "us", "our") is operated by an Australian individual. This Privacy Policy explains what personal information we collect, why we collect it, and how it is stored and protected. We are committed to being straightforward: we collect only what is necessary to run the service, we do not sell your data, and we do not use it for advertising.

This policy applies to all users of dashplan.com.au and related services. By using Dashplan, you agree to this policy.

Account information: When you sign up, we collect your email address. This is used only for authentication and service-related communications (e.g. password reset emails).

Content you create: Any data you enter into Dashplan — band names, member details, gig records, setlists, stage plot notes — is stored and associated with your account. This content is yours. We do not read, analyse or use it for any purpose other than displaying it back to you.

Payment information: Payments are processed by Stripe. We receive only a Stripe customer ID and subscription status from Stripe. We never see, receive, or store your card number or banking details.

Technical data: Standard web server logs may record your IP address and browser type. We do not use third-party analytics or advertising trackers.

Your data is stored in a PostgreSQL database managed by Supabase, hosted on AWS infrastructure in the ap-southeast-2 (Sydney) region. Data is encrypted in transit (TLS) and at rest.

Supabase and Vercel (our hosting provider) are our sub-processors. They do not access your data for their own purposes. Their own privacy and security practices apply to the infrastructure they provide.

Only you can see your personal data. Band members you invite can see only the content you have explicitly shared with them (stage plots, setlists) — they cannot see your gig financial records, invoices, or account information.

We do not access the content of your account unless you specifically ask us to help troubleshoot a problem, and we will tell you if we need to do so.

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

Dashplan uses session cookies only. These are required for authentication — they allow you to stay logged in. We do not use advertising cookies, tracking cookies, or any third-party cookie services.

Your data is retained for as long as your account exists. If you cancel your subscription your data remains stored (so you can resubscribe without losing your history), but you will lose the ability to create or edit content.

You can request complete deletion of your account and all associated data at any time by emailing us. We will process deletion requests within 30 days.

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your data

To exercise any of these rights, contact us at hello@dashplan.com.au.

We take reasonable steps to protect your data from unauthorised access, including encrypted connections, access controls, and using established infrastructure providers (Supabase, Vercel). No system is perfectly secure, but we use industry-standard practices.

If you believe there has been a security incident involving your data, please contact us immediately.

If we make material changes to this policy, we will notify you by email or by displaying a notice in the app before the changes take effect.

For any privacy-related questions or requests, contact us at hello@dashplan.com.au.