Privacy Policy

This policy applies to: (a) visitors to the DASH website (das-hub.com); (b) administrators, users, and participants who access the DASH platform; and (c) individuals who submit information through DASH-powered intake forms on behalf of their organizations. If you are submitting data through a DASH-powered intake form or case workspace operated by one of our customers, that customer is the data controller for your information. Please refer to their privacy policy as well.

We collect the following categories of personal data:

Account data: Name, email address, and role, collected when you are invited to or register for a DASH organization.

Usage data: IP address, browser type, device type, session duration, and pages visited, collected automatically when you access the platform or website.

Case and communication data: Content you submit through the platform — messages, files, form responses, and case details — is stored and encrypted on your behalf as a data processor.

Billing data: Payment information is handled by Stripe. We do not store payment card details.

Contact and inquiry data: Name, email, company, and message content when you submit a contact or demo request form.

We use your personal data to:

(a) Provide, operate, and maintain the DASH platform and its features; (b) Authenticate your identity and manage your session securely; (c) Send you transactional emails, such as case notifications and account alerts; (d) Respond to inquiries and support requests; (e) Comply with our legal obligations under applicable law; (f) Detect, investigate, and prevent fraud, abuse, and security incidents; (g) Improve our platform through anonymized usage analytics.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

All data stored in DASH is encrypted at rest using AES-256-GCM with per-organization encryption keys. Data is encrypted in transit using TLS 1.2 or higher. Encryption key rotation is available and performed with automatic re-encryption of stored data. We maintain comprehensive audit logs of all data access events. Our security controls are designed to align with ISO 27001, DPDPA 2023, HIPAA, and GDPR requirements.

We retain your personal data for as long as your account is active or as needed to provide services. Organizations can configure per-case and per-organization retention periods. Archived cases can be purged according to configured retention schedules. Account data is deleted within 90 days of account termination unless a longer retention period is required by law. Audit logs are retained for a minimum of 180 days.

Subject to applicable law, you have the right to:

(a) Access the personal data we hold about you; (b) Request correction of inaccurate personal data; (c) Request deletion of your personal data ('right to be forgotten'); (d) Object to or restrict the processing of your personal data; (e) Request a portable copy of your personal data; (f) Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at hello@das-hub.com. We will respond within 30 days as required under DPDPA 2023 and GDPR.

We use essential cookies for session management and authentication. These cookies are necessary for the platform to function and cannot be disabled. We use HTTP-only, Secure, SameSite=Lax cookies for session tokens, which cannot be read by browser scripts. We do not use third-party advertising or tracking cookies.

We use the following sub-processors in providing the DASH service: Amazon Web Services (cloud infrastructure and storage), Stripe (payment processing), and AWS GuardDuty (malware scanning). Each sub-processor is bound by data processing agreements and meets applicable security and privacy standards. We do not transfer your personal data to sub-processors outside of the above list without your consent or as required by law.

DASH stores data in AWS data centers in India (ap-south-1) by default. Enterprise customers may request data residency in other AWS regions. Any cross-border transfer of personal data is subject to appropriate safeguards, including Standard Contractual Clauses where required.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at hello@das-hub.com. If you are in the EU or UK and have an unresolved complaint, you have the right to lodge a complaint with your local data protection authority.