FireDash

Privacy Policy

Last updated: February 27, 2026

1. Introduction

FireDash ("Fire", "we", "us", "our") values your privacy. This Privacy Policy explains how we collect, use, and protect data when you use our software for handling daily engineering fires (the "Service").

By using the Service, you agree to this Privacy Policy.

2. Data We Collect

2.1 Customer Data

Fire records, logs, status updates, and operational data uploaded or generated by your organization.

This data remains your property.

We do not access or use this data except to provide the Service.

2.2 Personal Data

The only personal data we may process is:

Name (from SSO or account creation)
Email (if provided via SSO or for account notifications)

We do not collect sensitive personal data unless you provide it as part of fire records.

3. How We Use Data

We do not sell, rent, or trade your data.

To provide, maintain, and improve the Service
To create and manage accounts
To communicate with you about the Service (notifications, updates, billing)

4. Legal Basis for Processing

Under GDPR, our legal basis is:

Performance of contract: We process Customer Data to deliver the Service you subscribed to
Legitimate interest: We process minimal personal data to manage accounts and Service operations

5. Data Sharing

We do not share Customer Data with third parties, except:

With service providers (e.g., Stripe for payments, Vercel for hosting) under strict confidentiality agreements and GDPR-compliant contracts
If required by law or legal process

Personal data is only shared when necessary for account management or technical support.

6. Data Security

We implement reasonable technical and organizational measures to protect data from unauthorized access, alteration, or loss.

Measures include:

Encrypted storage of sensitive data
Restricted access to employees or contractors with a legitimate need
Regular security monitoring and updates

7. Data Retention

Customer Data is retained as long as your account is active.

Personal data from SSO/account creation is retained for as long as necessary to provide the Service and comply with legal obligations.

When you delete your account or cancel your subscription, Customer Data is deleted upon request.

8. Your Rights

Under GDPR, you have the right to:

Access your personal data
Request correction or deletion
Object to or restrict processing
Data portability (where applicable)
Withdraw consent (where processing is consent-based)

To exercise these rights, contact us at hello@firedash.ai.

9. Cookies and Tracking

We may use minimal cookies or analytics tools to maintain sessions and improve the Service. No marketing cookies are used.

10. Third-Party Services

We rely on third-party providers (e.g., Stripe, Vercel) to operate the Service.

These providers are bound by confidentiality and GDPR-compliant agreements.

11. International Data Transfers

Some third-party service providers we use (e.g., Vercel, Stripe) may process data outside the European Economic Area (EEA).

When we transfer data internationally, we ensure appropriate safeguards to protect your rights and comply with GDPR, including:

Standard Contractual Clauses approved by the European Commission
Ensuring that the third-party provides a level of data protection equivalent to EU standards

By using our Service, you consent to such international transfers for the purposes of providing, maintaining, and supporting the Service.

12. Updates to This Policy

We may update this Privacy Policy periodically.

We will notify you of major changes, and continued use of the Service constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or data processing, contact:

FireDash
Email: hello@firedash.ai