Privacy Policy

Effective date: September 2026

This Privacy Policy explains what personal data Dash Architect collects, why, and what rights you have over it. It applies to our website and the Dash Architect add-ins for Microsoft Excel and Google Sheets.

1. Who we are

Dash Architect is operated by Individual Entrepreneur ROMAN KHAIDAROV, registered in Georgia, acting as the data controller for the personal data described in this policy. Contact: dasharchitect@proton.me.

2. Data we collect

Data	Why we collect it
Email address and account credentials (a password, or, if you sign in with Google, your Google account email and basic profile information: name and profile picture)	To create and secure your account, and to send you service-related emails (access, receipts, product updates you've opted into)
Product usage data: how many dashboards you generate, when, and whether in Excel or Google Sheets	To apply the free-plan limit and to understand how the product is used so we can improve it. This does not include the content of your spreadsheets
Billing information (e.g. subscription status, receipts)	To manage your subscription. Full card details are collected and stored by Paddle, our payment provider — we never see or store your full card number
Website visit data (traffic source, referring site, time zone, language, device type). Collected without cookies	To understand how people find and use our website

Sign in with Google. If you choose "Continue with Google", Google shares with us only your email address and basic profile information (your name and profile picture); we do not request access to your Google Drive, Gmail, contacts, calendar, or any other Google data. We use your email address to create and identify your account, to link it to your subscription, and to send you service-related emails. Your name and profile picture are stored by our authentication provider (Supabase) together with your account but are not displayed or used for any other purpose, and we do not share them with anyone or use them for advertising. The Google Sheets add-on itself can access only the spreadsheet you open it in. You can delete your account and this data at any time by contacting us at dasharchitect@proton.me.

We do not receive, store, or transmit the contents of your spreadsheets to our servers. The cell range you select is read and turned into a dashboard by the add-in itself, inside your Excel or Google Sheets session. Dashboard settings (the selected range, column roles, title, and theme) are saved inside your own workbook or spreadsheet, not on our servers. In Google Sheets, the add-on runs on Google's Apps Script platform under your own Google account, so your data is handled by Google, not sent to us.

3. Data Protection and Security

We take the protection of your data seriously and apply the following measures:

Encryption in transit: All data exchanged between your device, Excel or Google Sheets, and our servers is encrypted using HTTPS/TLS.
No spreadsheet content storage: We access the content of your spreadsheet only to generate a dashboard inside the file you are actively using. This content is processed in real time and is not stored on our servers, and we do not sell, rent, or share it with third parties.
Minimal account data: We store only what is needed to run your account: your email address and credentials (or, if you sign in with Google, your Google account email, name, and profile picture), your usage data (dashboard generation count, timestamps, and platform), and, for paying customers, billing information such as subscription status and receipts — full card details are held by Paddle, not by us. See Section 2 for the complete list.
Data minimization: For sign-in and the Google Sheets add-on, we only request the Google API scopes strictly necessary for authentication and dashboard generation — never access to your Drive, Gmail, contacts, or calendar.
Data retention: Spreadsheet content is never stored. Account and usage data is retained for as long as your account is active, and for a reasonable period afterward as described in Section 6; you can request deletion at any time (Section 8).
Third-party processors: We use a small number of third-party services to operate the app — Supabase for authentication and database hosting, and Paddle for payment processing — each bound by their own privacy and security obligations. See Section 5 for the complete list. None of these providers receive your spreadsheet content.
Access controls: Access to the account data we store is restricted to what is necessary to operate the Service (authentication and usage tracking) and to respond to your support or data requests; it is never sold or shared for advertising.
Contact: If you have questions about how your data is protected, contact us at dasharchitect@proton.me.

4. Legal basis for processing (EEA/UK users)

We process your data on the basis of: performance of a contract (to provide the Service you subscribed to), our legitimate interest (to improve and secure the Service), and your consent (for optional marketing emails, which you can withdraw at any time).

5. Who we share data with

We use the following third-party processors to operate the Service:

Supabase — account authentication and database hosting
Paddle — payment processing, billing, and tax collection, acting as Merchant of Record
Netlify — website hosting
Microsoft — the Excel/Office Add-ins platform through which the Excel add-in runs
Google — the Google Sheets and Apps Script platform through which the Sheets add-on runs, optional Google sign-in, and storage of website visit statistics

We do not sell your personal data to third parties.

6. Data retention

We retain account and usage data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or tax obligations. You can request deletion of your account and associated data at any time (see Section 8).

7. International transfers

Our service providers may process data outside your country of residence, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by our processors.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at dasharchitect@proton.me. We will respond within a reasonable time and in accordance with applicable law.

9. Cookies

Our website does not use cookies. The add-ins keep your sign-in session in your browser's local storage so you stay signed in, and nothing else is stored there. We do not use analytics cookies or third-party advertising cookies.

10. Children's privacy

The Service is not directed at children under 16, and we do not knowingly collect personal data from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or a notice on our website before they take effect.

12. Contact

Questions or requests regarding this policy can be sent to dasharchitect@proton.me.