Privacy

This website

dashmox.com sets no cookies, runs no analytics or advertising scripts, and loads nothing from anybody else's servers: no web fonts, no trackers and no embedded videos.

Like every web server, ours keeps an access log of the requests it answers: the IP address a request came from, the time, the address asked for, the page that linked to it and the browser's description of itself. We use it to keep the site running and to deal with abuse. It is deleted after 14 days, and it is never shared or sold.

When you write to us

Email to hello@dashmox.com or support@dashmox.com is kept for as long as we need it to answer you and to look after your licence. Writing to us does not put you on a mailing list.

Your Dashmox account

Buying Pro or Business, and asking for support, happen at my.dashmox.com. For that we keep:

• Your account: your name, your email address, your password in a form that cannot be turned back into it, and your authenticator settings if you turn two-factor sign-in on.
• The people in it: who you invite and the access you give them.
• Your services: your plans, their licence keys, which are stored encrypted, and the servers using each key as described below.
• Support: your tickets and the messages in them. The emails telling you about a reply never contain its words.
• An activity record of sign-ins and changes to the account, kept to protect it and to answer questions about it.
• Which terms you agreed to: the document, its version and the date, so both of us can see what was agreed when.
• The address a sign-in came from, with the email address it was attempted for, for about fifteen minutes. It is how we stop somebody guessing passwords, and it is deleted on a timer rather than kept.

my.dashmox.com sets two cookies, both needed for it to work: one keeps you signed in and one protects its forms from being sent by other websites. It sets no tracking or advertising cookies. This website, dashmox.com, still sets none at all.

If you choose to sign in with Google, Microsoft or Facebook, that provider tells us your name, your email address, whether it has confirmed that address, and an identifier for your account with them. We never receive your password for that provider, and we post nothing anywhere.

Payments

Payments are handled by Stripe. You enter your card details on Stripe's own pages, and they never reach us. Stripe tells us what we need to run your plan and keep accounts: the amount, currency, date and status of each payment, its invoice number, an identifier for you as Stripe's customer, and the name and billing address you gave Stripe at the checkout. Stripe's own use of your details is set out in its privacy policy.

We ask for that name and address in one place only, Stripe's own checkout page, and we write them onto your invoice. An invoice has to name both the seller and the buyer to be an invoice, so it keeps the name and address you gave at the time rather than whatever they are later. The same is true of a credit note, which is the document issued when money goes back.

If a payment is refunded we keep the amount, currency and date of the refund. If a payment is charged back we keep what the bank told us: the amount, the reason it gave, where the case got to, and any note our staff made while dealing with it.

We email you about your account, your plan, your payments and your support tickets. These are messages about the service you use, not marketing.

Only the Dashmox staff whose work needs it can see your account, and every action they take on it is recorded. We keep your account for as long as you have it. When you ask us to delete it, we do, except for the payment records the law requires us to keep for accounting. Those records are the invoices and credit notes described above, and they carry the name and address that was on them, because a document we were required to issue is one we are required to keep.

We keep those documents for at least six years after the end of the tax year they belong to, which is the period Canadian law asks business records to be kept for. Closing your account does not remove them and neither does asking us to delete it, because keeping them is not a choice we are making. Everything else about your account goes when you ask for it.

What a Dashmox server sends us

Dashmox runs on your server, and what it hosts stays there. It contacts Dashmox's release and licence service at license.dashmox.com for two things, and this is everything it sends:

• Checking for updates: the installation's randomly generated identifier, the version of Dashmox it runs, and whether the server is an amd64 or arm64 machine, because a release is built for one or the other and the wrong archive would download in full and then be refused.
• Applying a licence key, only when you enter one: the key, the installation's identifier, its version and the hostname its panel answers on.

The service also sees the IP address each request comes from. For a server that has applied a licence key, it records that address, the hostname and the version against the licence, so we know which server holds it.

A Dashmox server never sends us the domain names of the websites it hosts, your customers' names or email addresses, anything your websites contain, or how many websites, mailboxes or customers it has. The free plan is decided on your server and needs no licence at all.

The install command downloads the installer and the release from us, so those downloads appear in the access logs described above.

Your rights under Canadian law

Dashmox Software is a Canadian business and handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to see the personal information we hold about you, to ask us to correct it, and to withdraw your consent to our using it.

Write to hello@dashmox.com, or to the postal address at the end of this page. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Why we are allowed to hold it

We hold your account and licence details because we cannot give you the service you asked for without them. We keep payment records because the law requires us to. We keep the access logs described above for the security of our own systems, which is our legitimate interest in running them safely. Where we rely on your consent for anything, you can withdraw it at any time.

Where your data is held

Your account, your licence and this website are held on servers we run in Canada. Payments are handled by Stripe, which processes and stores payment details in the United States and in other countries where it operates. When personal information goes outside the country you live in, this policy still covers it, and so do the contracts we have with the companies that process it for us.

Your choices

Dashmox Software, the business that makes and sells Dashmox, is responsible for the information described on this page. You can write to us at Unit 101, 29485 Cabot Trail Road, Cape North, NS B0C 1G0.

Ask us what we hold about you, to correct it or to delete it, by writing to hello@dashmox.com. If this privacy policy changes, the date at the top of the page changes with it.