Privacy Policy
Effective Date: March 10, 2026
NaviWorks LLC, doing business as DashAdvisr ("we", "us", "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at dashadvisr.com (the "Service").
1. Information We Collect
Information You Provide
- Account data: Email address and password when you sign up.
- Business data: Business name, type, and configuration settings.
- Manual entries: Financial, staffing, inventory, and event data you enter directly.
Information from Integrations
When you connect third-party services, we receive data from those platforms:
| Integration | Data Received |
|---|---|
| Square | Transaction summaries, daily sales totals, payment methods |
| QuickBooks | Revenue, expenses, account balances, profit/loss |
| Homebase | Employee hours, schedules, labor costs |
| Eventbrite | Event listings, ticket sales, attendance |
| Google Business | Reviews, ratings, search performance |
| Toast POS | Transaction summaries, daily sales, menu item data |
| Clover POS | Transaction summaries, daily sales, payment methods |
| Gusto | Payroll summaries, employee counts, labor costs |
Automatically Collected Information
- Usage data: Pages visited, features used, timestamps.
- Device data: Browser type, operating system, screen resolution.
- Cookies: Session cookies for authentication. See our Cookie Policy.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To calculate your Waypoint Score and generate AI-powered insights (Sage AI).
- To send you weekly email briefings and important account notifications.
- To provide customer support and respond to your inquiries.
- To detect, prevent, and address technical issues or security threats.
- To comply with legal obligations.
3. AI Processing
DashAdvisr uses Anthropic's Claude AI to generate business insights through our Sage AI feature. When you use Sage AI:
- Your business data is sent to Anthropic's API for processing.
- Anthropic does not use your data to train their models (per their API terms).
- AI responses are generated in real-time and not retained by Anthropic after processing.
- We retain AI conversation history in your account for your reference.
4. Data Sharing
We do not sell your personal or business data. We share data only in these limited circumstances:
- Service providers: Supabase (database hosting), Netlify (web hosting), Anthropic (AI processing), Stripe (payment processing), Resend (email delivery). Your data is stored on servers located in the United States.
- Legal requirements: When required by law, court order, or government request.
- Business transfer: In connection with a merger, acquisition, or sale of assets, with notice to you.
- With your consent: For any other purpose you explicitly authorize.
5. Data Security
We implement industry-standard security measures:
- All data is encrypted in transit (TLS 1.2+) and at rest.
- Database access is controlled through Row Level Security (RLS) policies.
- Integration tokens are stored in Supabase Vault (encrypted secrets management).
- We conduct regular security reviews of our codebase.
No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
- Active accounts: We retain your data for as long as your account is active.
- Deleted accounts: We delete your data within 30 days of account deletion, except where retention is required by law.
- Aggregated data: We may retain anonymized, aggregated data for analytics and benchmarking purposes.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data.
- Export: Request your data in a portable format.
- Opt-out: Unsubscribe from marketing emails at any time.
To exercise any of these rights, contact us at admin@dashadvisr.com.
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA):
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as defined under CPRA.
- Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information (such as account credentials) for purposes authorized under CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, contact us at admin@dashadvisr.com. We will verify your identity and respond within 45 days as required by law.
9. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
10. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. The "Effective Date" at the top will be updated accordingly.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
NaviWorks LLC (dba DashAdvisr)
Sacramento, CA
Email: admin@dashadvisr.com