Privacy Policy

1.Scope & our two roles

We handle personal information in two distinct roles, and it's important to know which applies:

• As a business/controller — for personal information we collect directly, such as your account details and how you use our website and app. This policy governs that information.
• As a service provider/processor — for personal information you upload about your own prospects and clients ("Customer Data"). There, you are the business/controller and we act on your instructions under our Data Processing Addendum. We don't decide how that data is used, and requests from the people in it should generally go to you.

2.Information we collect

Information you give us

• Account & profile — name, business name, email, phone, and role when you sign up or invite team members.
• Billing — plan, transaction history, and limited payment details. Card data is handled by our payment processor (Stripe); we don't store full card numbers.
• Support & communications — messages, attachments, and information you send when you contact us.
• Connected accounts — authorization tokens for services you connect (e.g., Google Workspace), stored encrypted and used only to provide the service.

Information we collect automatically

• Usage & device data — pages viewed, features used, IP address, browser and device type, and log data, to operate and secure the service.
• Cookies — see the cookies section below.

Customer Data

When you use the platform, you upload or generate data about your prospects and clients (names, contact details, communications, notes). We process this as your service provider (see Section 1) — not for our own purposes.

3.How we use it

We use personal information we collect as a business/controller to:

• Provide, maintain, secure, and improve the service;
• Set up and manage your account and seats;
• Process payments and send billing and transactional messages;
• Provide support and respond to your requests;
• Send product, security, and (where permitted) marketing communications — you can opt out of marketing anytime;
• Detect, prevent, and address fraud, abuse, and security issues; and
• Comply with legal obligations and enforce our terms.

4.How we share it

We share personal information only as needed:

• Subprocessors — vendors that host and help run the service (e.g., cloud infrastructure, email/SMS delivery, AI, payments). We publish them in our subprocessor list, and they're bound to protect the data.
• Your own connected services — when you connect an integration, data flows to and from that provider under your direction.
• Legal & safety — when required by law or to protect rights, safety, and the integrity of the service.
• Business transfers — in a merger, acquisition, or sale of assets, subject to this policy.

5.Cookies & analytics

We use strictly necessary cookies to keep you signed in and secure the app, and limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling some may affect functionality. We honor recognized opt-out preference signals where required.

6.Your privacy rights

Depending on where you live, you may have rights to:

• Know / access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information, subject to legal retention;
• Opt out of sale or sharing — note we don't sell or share; and
• Non-discrimination for exercising your rights.

California residents have these rights under the CCPA/CPRA. To exercise them for information we hold as a business/controller, email [email protected]; we'll verify your request and respond within the timeframes the law requires. If your request concerns Customer Data held by an agency using Dane Suite, please contact that agency, and we'll assist them as their service provider.

7.Retention

We keep personal information for as long as needed to provide the service and for legitimate business and legal purposes. Because we and our customers operate in a regulated industry, certain records (such as communications and transaction logs) may be retained for a legally required period even after account closure. When no longer needed, we delete or de-identify information.

8.Security

We use technical and organizational safeguards including encryption in transit (TLS), encryption of sensitive credentials at rest, tenant isolation, and access controls. No method is perfectly secure, but we work to protect your information and align our practices with the expectations of the Gramm-Leach-Bliley Act (GLBA) and applicable NAIC data-security standards. Learn more on our Trust page.

9.Children

The service is for businesses and is not directed to children under 16. We don't knowingly collect personal information from children.

10.International

We operate in the United States, and information is processed here. If you access the service from outside the U.S., you understand your information will be processed in the U.S., which may have different data-protection rules than your location.

11.Changes

We may update this policy. If changes are material, we'll provide notice (for example, by email or in the app) and update the "Last updated" date above.

12.Contact

Questions or requests? Email [email protected]. Danesure Inc., Arizona, USA.