Privacy Policy — BusinessDash
Version 1.7 · Effective from 30-10-2026
Status: APPROVED by BJS on 29-10-2026 (version 1.7). Written from what this product's code actually does and stores. Not legal advice; no lawyer has reviewed this text.
Built with AI: this product, including this document, was written with the help of Anthropic's Claude under human direction and review. No customer data is sent to an AI.
1. Who is responsible
Data controller: We make AI work s.r.o., IČO 29697115, Nové sady 988/2, Staré Brno, 602 00 Brno, contact support@businessdash.eu. BusinessDash is our product; this policy covers only it.
2. Our default: minimise
We collect as little as we can get away with, technically and legally (our internal rule: minimise → hash → encrypt). We do not sell data. We do not run third-party advertising or cross-site tracking. If you decline optional data, the service keeps working — with the honest trade-offs listed in §7.
3. What we collect and exactly why
This table is complete: if it is not here, we do not collect it.
| What | Why (purpose) | Legal basis | Kept for | Where |
|---|---|---|---|---|
| Your work email address — encrypted (AES-256-GCM); a keyed fingerprint lets us find your account without decrypting it | invitations, recovery links, the address you are known by; no newsletters | contract (Art. 6(1)(b)) | until you are erased | Scaleway Managed PostgreSQL, Paris (FR) |
| Your passkeys: public key, credential id, signature counter, transports, device type, backup flag, an optional label, when added and last used. The private key never leaves your device; no fingerprint or face data ever reaches us | prove it is you; notice a cloned key | contract · legitimate interest (security) | until you remove it or are erased | same |
| Sign-in challenges (random, single use) | one passkey ceremony | contract | valid 5 minutes; deleted a day after it expires | same |
| Sessions: a hash of the session token, when created, last seen and when it expires — no IP address, no browser details | keep you signed in; sign-out | contract | valid 30 days; deleted 7 days after it expires or you sign out | same |
| Invitation and recovery links — a hash only | join an organisation (valid 7 days); recover access (valid 15 minutes) | contract | deleted 7 days after it is used or expires | same |
| A sign-up request: your email address (stored encrypted, with a keyed fingerprint), your organisation's name, the module you chose and your language; the link as a hash only | send you the link; create the organisation and its trial when you follow it | steps at your request before a contract (Art. 6(1)(b)) | deleted a day after the link is used or expires (it is valid 24 hours) | same |
| Your display choice: high contrast, standard, or following your device - your own choice, on your account | show BusinessDash the way you chose, on every device you sign in on; it is used for nothing else and never shared | contract (Art. 6(1)(b)) - you set it | until you change it or close your account | same |
| Your organisations: their name, your role, who invited you and when, when you accepted | know whose account you act for, and in what role | contract | as long as the membership exists; it ends on the day the organisation is deleted | same |
| Module sign-ins: which organisation and module, when, whether revoked; one-time codes (hash only, valid 60 seconds) | let a module sign you in, and let it check later that the sign-in is still valid | contract | until you are erased; a one-time code is deleted a day after it expires | same |
| Which modules your organisation has | tell each module what the organisation may open | contract | as long as the organisation exists | same |
| Audit trail of account changes: who did what and when — ids, never your address or any content | accountability inside your organisation; security | legitimate interest | as long as the organisation exists; after your erasure it holds an id that no longer points to you; when the organisation is deleted, its entries stay without the link to it | same |
| A request to delete an organisation: which organisation, the owner who asked and when, the date it takes effect, who cancelled it, the reminders sent, and each module's confirmation (how many records it deleted and how many the law makes it keep) | delete the organisation on the date, let any owner cancel it, prove the deletion reached every module | contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) | permanently — it is the record that and when the organisation was deleted; the owner is an id that no longer points to anyone once they are erased | same |
| Notices to an organisation's owners: a deletion requested, a reminder, a deletion cancelled; an administrator's request to download a module's data (naming the administrator) | tell owners what concerns their organisation | contract (Art. 6(1)(b)) | not kept by us after sending | Scaleway Transactional Email, Paris (FR) |
| Erasure record: the anonymous id of an erased person and each module's confirmation | prove the erasure reached every module (Art. 5(2) GDPR) | legal obligation (Art. 6(1)(c)) | permanently | same |
| A recovery mail to your address, when you ask for one | deliver the recovery link | contract | not kept by us after sending | Scaleway Transactional Email, Paris (FR) |
| If you choose to sign in with Google: the account id Google gives us for you, your email address. We never receive your Google password. Google itself learns that you signed in to BusinessDash - under Google's own privacy terms, which you accept at Google | let you sign in with the account you chose - contract (Art. 6(1)(b)) | until you remove the connection or your account is erased | Scaleway Managed PostgreSQL, Paris (FR); Google is an independent controller (USA, EU-US Data Privacy Framework) | |
Your display and language choice (cookies theme, lang) | show the site the way you chose on the preferences page | contract — you set them | 1 year | your browser only |
| Technical logs: time, method, route pattern (never the address you typed — a link in it can be a key), status, duration; ids, never names, addresses or IP | keep the service running and find faults | legitimate interest (Art. 6(1)(f)) | 6 months | Scaleway Cockpit, Paris (FR) |
| Error records, redacted before they are written | the alarm and the daily error digest to our team | legitimate interest | 30 days | Scaleway Managed PostgreSQL, Paris (FR) |
| Your IP address — held in memory only, to limit requests per address; never written to a database or a log by us | protect the service from floods | legitimate interest | about a minute, in memory | Scaleway container, Paris (FR) |
4. Who else touches the data (processors)
Scaleway SAS (Paris, France): the servers, the database, transactional email and the logs — all in France. BunnyWay d.o.o. (Ljubljana, Slovenia): DNS and content delivery in front of the site; it sees your requests (including your IP address) in its own short-lived edge logs and stores nothing else about you. Our team's alarm mails arrive in Google Workspace; they contain no personal data. No AI provider receives any of this data. Each processor is bound by a data processing agreement; none may use the data for its own purposes.
5. Your rights
Access, rectification, erasure, restriction, portability, objection — write to support@businessdash.eu, we act within 30 days. You can complain to the Czech supervisory authority: ÚOOÚ, https://uoou.gov.cz. Erasure is real: our systems are built to delete (see §2).
6. Cookies and consent
| Cookie | What it does | Lifetime | Kind |
|---|---|---|---|
__Host-bd_session | keeps you signed in to BusinessDash | 30 days | strictly necessary |
__Host-bd_google_flow | only while you sign in with Google: remembers the sign-in you started, so only your browser can finish it | 10 minutes | strictly necessary |
theme, lang | the display and language you chose on the preferences page — set only when you choose | 1 year | functional; consent-exempt because you asked for it |
That is every cookie this site sets. No analytics, no advertising, no third-party cookies. So that the app can tell you when you are offline, your browser keeps a copy of our offline page and our stylesheet in its cache storage — nothing about you, and no page you were signed in on. Nothing optional exists, so there is nothing to consent to and no consent switch; the day an optional purpose is added, it runs only after you opt in, and the switch for it will be here.
7. If you decline everything — the honest trade-off
Declining costs you no core functionality and we hold no grudge. Beyond what is technically necessary to serve the page, we then track nothing — no analytics, no profiles, no ads. What you give up: nothing. This product runs no analytics, no A/B tests and no advertising, so there is nothing optional to decline — only the cookies in §6 that keep you signed in and remember the choices you made.
8. Changes
Changes to the service that touch data (new feature, new cookie, new processor, new price flow) update this policy in the same release — the version and date above always tell you where you stand. Material changes are announced in the service.