Privacy Policy

Last updated November 4, 2026

Dash (usedash.co, and its iPhone and Mac apps) is made by Find Community, Inc. (dba Stan) (“Stan”, “we”, “us”). This policy explains what Dash collects, why, who helps us run it, how long it’s kept and the choices you have. It also covers dash.js, the script owners add to their own sites so Dash can count where their visitors come from.

Who this is about

  • Owners and their teammates: people who sign up for Dash and use it. For their information, Stan decides how it’s used.
  • Their visitors and customers: people whose visits, sign-ups and purchases an owner tracks with Dash, and people an owner finds or reaches out to through Dash. Dash handles their information on the owner’s behalf, as the owner’s service provider. The owner decides what to track and who to contact, and is responsible for telling those people (in the owner’s own privacy notice) and for asking their consent where the law requires it.

What we collect from owners

  • Your account: your name, email address and profile picture, from signing in with an email code or with Google or Apple (sign-in is run by Clerk).
  • Your products: what you tell Dash and what it finds while setting up, such as your product’s name, site, code repositories and funnel.
  • Your conversations with the team: what you write to Dash, Iris, Summit and Nova, images you add, and what they write back.
  • Accounts you connect: when you connect LinkedIn, X, Gmail, a code host (GitHub, GitLab, Bitbucket), a host (Vercel, Railway, Cloudflare, Render), a payment tool or another tool, Dash keeps the access it grants, encrypted, and reads what it needs: your posts and their reach; on X, your direct messages and likes; on Gmail, only the emails to and from people in your Outreach list; your deploys; your sales.
  • LinkedIn in Dash’s browser: if you sign in to LinkedIn in Dash’s cloud browser, that browser keeps your session (at Browserbase) so Dash can send the messages you approve and read replies from the people you’ve messaged. Browserbase keeps a recording of each browser session.
  • Billing: your plan and invoices. Card details go straight to Stripe and never reach us.
  • Devices: on iPhone and Mac, a token for sending you notifications.
  • Running Dash: what each piece of AI work cost, error reports and performance traces.

What dash.js collects on owners’ sites

  • It sets a first-party cookie, dash_vid: a random visitor ID that lasts a year. It keeps the same ID in the browser’s local storage, and a Dash link’s click ID there for 30 days.
  • It sends the referring page, UTM tags, the name (never the value) of an ad platform’s click ID, and the landing page’s address without its query string. Dash keeps only the referring site’s name, not the whole address.
  • Dash doesn’t store visitors’ IP addresses. Rate limits keep a one-way hash of one for an hour at most.
  • An owner’s product can also send Dash people’s names or email addresses, what they do in the product, waitlist sign-ups and sales.

People Dash finds

When an owner asks Dash to find people who might want their product, Dash searches public sources: Google results (through Serper), public posts and profiles on platforms such as Reddit, X and LinkedIn (through Apify), Stack Exchange, and the AI’s own web searches. It keeps only what’s public on the page (a name or username, the profile link, what they said, and their role, company or location if they state them) and never looks up emails, phone numbers or home addresses. What it finds is kept for 90 days, unless the owner saves the person or reaches out to them.

How we use it

  • To run Dash for you: the team’s work, tracking your funnel, designing and building, and the outreach you approve.
  • For AI: Dash’s team runs on Anthropic’s Claude. To answer you or do a piece of work, Dash sends Anthropic what that work needs, such as your product’s numbers and the people, posts or code it looks at. Under Anthropic’s commercial terms, Anthropic doesn’t train its models on it. We don’t use your content to train AI models either.
  • To keep Dash working and safe: fixing errors, preventing abuse and limiting how fast it can be used.
  • To bill you, and to send you messages about your account and Dash.

We don’t sell personal information, share it for advertising, or use it to advertise to you.

Information from Google

Dash’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Dash reads Gmail only for the emails between you and the people in your Outreach list, to show you their replies and help you follow up. It never sends email, never reads the rest of your inbox, never uses Gmail data for advertising, and never uses it to develop, improve or train general AI models. Nobody at Stan reads it unless you ask us to, or it’s needed for security or the law.

Who helps us run Dash

These companies process information for us, only to provide their part of Dash:

  • Vercel (hosting), PlanetScale (database), Inngest (background work) and Clerk (sign-in).
  • Anthropic (the AI behind the team) and Browserbase (Dash’s cloud browser).
  • Code Storage by Pierre (each product’s own repository for its site and brand).
  • Serper and Apify (finding people on the public web).
  • Stripe (payments) and Apple (app notifications).
  • Sentry (errors and performance), which receives no AI prompts or answers and, about a person, only their ID. Braintrust (AI monitoring), which receives only each AI call’s numbers (model, tokens, timing, tool names and cost), never its words.

Services you connect get what Dash sends them on your behalf, such as a message you approved or a pull request. We may also share information if the law requires it, to protect people or Dash, or as part of a merger or sale of Stan’s business, under this policy.

Cookies

On usedash.co, Dash uses cookies to keep you signed in (Clerk) and one, dash-product, to remember which product you have open. It uses no advertising or analytics cookies. If something breaks while you’re using Dash, Sentry may record a replay of that page with its text and fields hidden, to help us fix it. On owners’ sites, dash.js sets dash_vid, as described above.

How long we keep it

  • Chats with the team, and images in them: 90 days after the last message. The same goes for the team’s own conversations, what they asked of you, browser runs, people searches and drafts that were never sent.
  • People Dash found: 90 days, unless you saved them or reached out to them.
  • Outreach and its conversation: a year after anything last happened.
  • Everything else about a product: until you remove the product, which deletes what Dash keeps under it, or until your account is closed. Repositories and Stripe accounts made for you are yours and stay where they are.
  • Error reports and AI monitoring data: for a limited time set by those services, after which they’re deleted.

Your choices and rights

  • You can disconnect any account, remove a product and its information, or delete a person from your product in Dash at any time. A connected source that still has that person (PostHog or X, say) may bring them back on its next sync.
  • To see, correct, export or delete your information, or to close your account, email friends@stanwith.me. We answer within 30 days. Depending on where you live, laws such as the GDPR or the CCPA give you these rights; we honour them for everyone.
  • If you’re a visitor or customer of a product that uses Dash, contact that product’s owner first. We’ll help them with your request.

Security

Everything travels over encrypted connections. The access you give Dash to other accounts is encrypted with a key only Dash’s servers hold, and only the people who run Dash can reach its systems. No system is perfectly secure, but we work to protect your information and will tell you if it’s exposed.

Where it’s processed

Dash runs in the United States. If you use it from elsewhere, your information is transferred to and processed in the US.

Children

Dash is for people 18 and over running a product or business. It isn’t meant for children, and we don’t knowingly collect their information.

Changes

When this policy changes, we update it here with a new date. If a change matters, we’ll tell you in Dash or by email before it applies.

Contact

Find Community, Inc. (dba Stan), 99 Wall Street, Suite 917, New York, NY 10005. Email friends@stanwith.me.