Privacy Policy

Dashplan ("we", "us", "our") is operated by an Australian individual. This Privacy Policy explains what personal information we collect, why we collect it, and how it is stored and protected. We are committed to being straightforward: we collect only what is necessary to run the service, we do not sell your data, and we do not use it for advertising.

This policy applies to all users of dashplan.com.au and related services. By using Dashplan, you agree to this policy.

Account information: When you sign up, we collect your email address. This is used only for authentication and service-related communications (e.g. password reset emails).

Content you create: Any data you enter into Dashplan — band names, member details, gig records, setlists, stage plot notes — is stored and associated with your account. This content is yours. We do not use it for advertising, profiling, or any purpose other than operating the service. Certain optional AI features transmit a limited subset of this data to a third-party AI provider; this is described in full in the AI Features section below.

Payment information: Payments are processed by Stripe. We receive only a Stripe customer ID and subscription status from Stripe. We never see, receive, or store your card number or banking details.

Technical data: Standard web server logs may record your IP address and browser type. We do not use third-party analytics or advertising trackers.

Some features in Dashplan use an AI service provided by Anthropic, Inc. (USA) to process content on your behalf. This section describes exactly what is sent, when, and why.

Dash AI summary: When you generate a Dash summary, your upcoming gig information (dates, venues, event names) is sent to Anthropic to produce a personalised briefing. This happens only when you tap the regenerate button — it is not automatic.

Tax transaction categorisation (opt-in): When importing a bank statement, you can choose to have Dashplan suggest ATO categories automatically. If you opt in, the transaction description text and dollar amount for each row are sent to Anthropic. No account numbers, BSB, card numbers, or other identifying financial details are transmitted — only the description (e.g. "COLES 3241 WESTFIELD") and the amount. This feature is explicitly opt-in; you can import and categorise manually without sending any data to Anthropic.

Setlist chord chart import: When you upload a PDF chord chart for conversion, the contents of that PDF are sent to Anthropic to convert the chord-above-lyric format into ChordPro notation. Only the PDF you choose to upload is transmitted.

What Anthropic does with this data: Anthropic's API terms state that data submitted via the API is not used to train their models. Data is processed transiently to produce a response and is not retained beyond a short period for safety and abuse monitoring (currently up to 30 days per Anthropic's policy). Dashplan is the data controller; Anthropic processes the data as a sub-processor on our behalf. For more information, see Anthropic's Privacy Policy.

We will always be clear in the app about when AI processing is taking place. If you have concerns, you can opt out of AI-assisted features and use all tools manually.

Your data is stored in a PostgreSQL database managed by Supabase, hosted on AWS infrastructure in the ap-southeast-2 (Sydney) region. Data is encrypted in transit (TLS) and at rest.

Our sub-processors are: Supabase (database hosting), Vercel (application hosting), Stripe (payment processing), and Anthropic (AI processing, for opt-in AI features only). None of these sub-processors access your data for their own commercial purposes. Their own privacy and security practices apply to the infrastructure they provide.

Only you can see your personal data. Band members you invite can see only the content you have explicitly shared with them (stage plots, setlists) — they cannot see your gig financial records, invoices, or account information.

We do not access the content of your account unless you specifically ask us to help troubleshoot a problem, and we will tell you if we need to do so.

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

Dashplan uses session cookies only. These are required for authentication — they allow you to stay logged in. We do not use advertising cookies, tracking cookies, or any third-party cookie services.

Your data is retained for as long as your account exists. If you cancel your subscription your data remains stored (so you can resubscribe without losing your history), but you will lose the ability to create or edit content.

You can request complete deletion of your account and all associated data at any time by emailing us. We will process deletion requests within 30 days.

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your data

To exercise any of these rights, contact us at hello@dashplan.com.au.

We take reasonable steps to protect your data from unauthorised access, including encrypted connections, access controls, and using established infrastructure providers (Supabase, Vercel). No system is perfectly secure, but we use industry-standard practices.

If you believe there has been a security incident involving your data, please contact us immediately.

Dashplan does not warrant that any information, content, or workflow guidance displayed within the platform is accurate, complete, current, or suitable for your specific circumstances. Content is provided in good faith based on common industry practice, but you should not rely on it as a substitute for professional advice. See our Terms & Conditions for our full disclaimer regarding financial and legal information.

If we make material changes to this policy, we will notify you by email or by displaying a notice in the app before the changes take effect.

For any privacy-related questions or requests, contact us at hello@dashplan.com.au.