Privacy Policy
Effective August 28, 2026
This Privacy Policy explains how [Legal entity name, e.g. Starlight Holdings LLC] (“GoDash,” “we,” “us”) collects, uses, shares and protects information when you use the GoDashwebsite and application (the “Service”), including when you connect a third-party service such as QuickBooks Online.
1. Information we collect
Information you give us
- Account information — name, email address and role, provided when you are invited to the Service and sign in.
- Support communications — the content of emails or messages you send us.
Information from Connected Services
When you authorize a connection to QuickBooks Online or another Connected Service, we retrieve data from that service on your behalf. Depending on the features you use this may include:
- company profile and settings (company name, address, fiscal year, chart of accounts, classes, locations);
- customers, vendors, items and employees as they appear in your books;
- transactions — invoices, payments, bills, expenses, purchases, deposits, journal entries — and attached documents;
- financial reports such as profit & loss, balance sheet and budgets;
- access tokens that let GoDash call the Connected Service on your behalf.
Some of this data contains personal information about your customers, vendors and staff. We process it only as your service provider, to deliver the features you have enabled.
Information you send for processing
If you use expense capture, you may forward receipts, invoices or statements by email or upload. We extract the details needed to record the expense (vendor, date, amount, line items, payment method) and keep the document for your records.
Information collected automatically
- server logs: IP address, browser type, pages requested, timestamps and error details;
- an essential session cookie used to keep you signed in. We do not use advertising cookies or third-party trackers.
2. How we use information
- to provide the Service: dashboards, reporting, budgeting and expense capture;
- to keep your Connected Services in sync and to create or update records you direct us to create;
- to secure the Service, detect abuse and keep an audit trail of who connected, viewed or changed what;
- to respond to support requests and communicate about the Service;
- to comply with law and enforce our Terms of Service.
We use automated systems, which may include machine-learning models, to categorize transactions and extract data from documents. Outputs are presented for your review. We do not use your data to train general-purpose models, and we do not sell personal information or use it for advertising.
3. How we share information
We share information only with:
- Connected Service providers (e.g. Intuit) when you direct us to read from or write to your account there;
- Infrastructure providers that host and run the Service under contract with us — currently DigitalOcean, LLC (data centers in the United States) for compute, storage and databases, and email delivery providers for transactional email;
- Processing providers that help extract or categorize data (for example, AI model providers) under agreements that prohibit them from retaining or using your data for their own purposes;
- People you authorize — colleagues and advisors you invite to your GoDash workspace;
- Authorities when required by law, or to protect the rights, safety or property of GoDash, our users or others;
- a successor in a merger, acquisition or sale of assets, subject to this Policy.
4. QuickBooks Online connections
GoDashconnects to QuickBooks Online using Intuit’s OAuth 2.0 authorization. You authorize each company individually on Intuit’s site; we never receive your Intuit password. Intuit issues GoDash access tokens, which we store encrypted and use only to perform the operations you have enabled.
You can disconnect at any time from GoDashor from QuickBooks Online (Apps → My Apps → Disconnect). On disconnect we stop all synchronization immediately and delete the stored tokens for that company. Data already synced into your GoDash workspace is retained per Section 6 unless you ask us to delete it.
5. Security
We protect information with measures appropriate to its sensitivity, including encryption in transit (TLS) and at rest, encryption of Connected Service credentials with keys held separately from the data, role-based access, multi-factor authentication for our staff, audit logging, and regular updates to our systems. No method of transmission or storage is completely secure; please report any concern to security@godash.pro. See our Security overview.
6. Retention
- Connected Service access tokens: until you disconnect or the token expires, then deleted immediately.
- Synced accounting data and uploaded documents: for as long as your workspace is active, then deleted within 90 days of termination unless a longer period is required by law or you request earlier deletion.
- Account information and audit logs: for the life of the account plus up to 7 years where needed for security, legal or accounting purposes.
- Server logs: typically 30–90 days.
7. Your choices and rights
You can access, correct or delete your account information by contacting us. You can disconnect any Connected Service at any time. Depending on where you live you may have additional rights — for example, to access, correct, delete or port personal information, or to object to certain processing. Because we act as a service provider for the businesses that use GoDash, requests about data in a business’s workspace will be referred to that business. To exercise any right, email privacy@godash.pro. We do not discriminate against anyone for exercising their rights.
8. International transfers
The Service is hosted in the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
9. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
10. Changes
We may update this Policy from time to time. Material changes will be posted on this page with a new effective date and, where appropriate, notified to account holders by email.
Contact
[Legal entity name, e.g. Starlight Holdings LLC]
[Mailing address]
privacy@godash.pro