Scope
DashUI is the product name used for this website and its account services. This policy covers dashuiobd.com, the browser sign-in flow, account security features, authorized Investor Portal access, and information voluntarily sent to support. The Android app may process vehicle data on a device; this website account system does not claim to receive or store diagnostic data unless you send it to support.
Account data
When you create or use an account, the platform stores your email address, account timestamps, email-verification state, and a password verifier. It does not need to store your plain-text password. Email/password signup, verification, and password-reset messages are delivered through the production email service.
If you use Google sign-in or explicitly link Google from Account Security, the platform receives the Google identity information needed to authenticate and maintain that connection. DashUI does not automatically link a new Google identity to an existing account merely because an email address matches.
Sessions and security
DashUI uses server-backed sessions for browser authentication. The production session and CSRF cookies are configured as secure, HttpOnly where applicable, same-site cookies. The platform also records security-relevant account state such as authentication events, session-management records, and MFA configuration needed to operate TOTP, passkeys, and recovery-code flows.
Security and administrative audit events use structured records and intentionally exclude raw passwords, tokens, secrets, nonces, and recovery codes from event metadata.
Investor access
Authorized Investor Portal accounts may have an active access grant, published project updates, roadmap items, funding entries, research entries, and private documents associated with that access. Investor documents are stored outside the public website root and are delivered only through the protected portal after server-side authorization checks.
Download statistics
The public APK download counter records aggregate download totals by released version. The counter response exposes totals and current-version counts; it is not an account profile or a vehicle diagnostic record.
Website measurement
Some public pages load GoatCounter page-visit measurement to display an aggregate page-visit count. The current public pages do not include a marketing-pixel or subscription-billing system. Review GoatCounter's own privacy information for its processing of requests to its measurement service.
Service providers
DashUI uses service providers to operate the platform, including Google for Google sign-in, Resend for production account-email delivery, hosting and reverse-proxy infrastructure, and GoatCounter for the limited page-visit measurement described above. These providers process information only as needed to provide their services; DashUI does not describe this as selling account information.
Retention and requests
The current implementation does not publish fixed retention periods. Account, security, audit, investor, support, and operational records may be retained as needed to provide the service, protect accounts, maintain authorized access, meet operational requirements, or comply with law.
There is no self-service account-deletion workflow in the current account UI. For access, correction, or deletion questions, contact DashUI using the address below. We may need to verify account control and may retain information where required for security, legal, or operational reasons.
Contact
For privacy or account-data questions, email [email protected] and include “Privacy Request” in the subject. DashUI is the public product identity used here; no separate legal entity is stated by this policy.