Privacy Policy

1. Introduction

First Layer Digital LLC ("we", "us", or "our") operates the vantagedash.io website and the VantageDash application (collectively, the "Service"), and is the controller of the personal data described below. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and password. Passwords are hashed and never stored in plaintext. Authentication is managed by a dedicated identity service.

Email Addresses from Visitors

If you use the free tools on our website or sign up for product updates without creating an account, we keep the email address you give us, and for the price tools the page you asked about. We use it only to send what you asked for: a price-change email, your store price report, or occasional product updates. Reply to any of them, or email us, and we will delete your address.

Business Information

You may provide your brand name, website URL, industry, and related business details to configure your workspace.

Shopify Store Data

If you connect a Shopify store to VantageDash, we access your store's product catalog (titles, prices, images, variants, SKUs) using the read_products scope. We do not access customer data, orders, or payment information. We store an encrypted OAuth access token to maintain the connection.

Competitor Data

We collect publicly available product information (names, prices, images, URLs) from competitor websites that you add to your workspace. This data is sourced from public storefronts and product pages.

Usage Data

We collect anonymous usage analytics (page views, feature usage) to improve the Service. We do not sell or share this data with third parties.

3. How We Use Your Information, and Why We May

Data protection law asks us to name the legal reason for each use. Ours are:

• To provide the Service you signed up for (to perform our contract with you): running your account and workspace, importing your product catalog, reading the competitor stores you add, matching products, showing comparisons and analytics, sending the alerts you set up, and sending account emails such as confirmation and password reset.
• Our legitimate interests: keeping the Service secure and preventing abuse, finding and fixing errors, improving the Service from usage counts that do not identify you, improving matching for every workspace from match decisions that keep no link to the workspace that made them (Terms of Service, section 8), and sending customers short getting-started and product emails. Every such email has an unsubscribe link, and you can object at any time.
• Your consent: product updates and price emails requested by visitors without an account. You can withdraw consent at any time by replying to any of them or emailing us.
• Legal obligations: keeping billing and tax records for as long as the law requires.

We do not sell your personal information, and we do not make decisions about you by automated means that have legal or similarly significant effects.

4. Who Receives Your Data

We use these service providers to run VantageDash. Each receives only what it needs for its task:

• Supabase: database and sign-in
• Vercel: website hosting
• Hetzner: application servers
• Cloudflare: domain name service, network security and email forwarding
• Resend: sending email
• OpenAI: AI product matching and competitor suggestions. It receives product names and prices, not your account details.
• Our payment processor: payments for plans bought directly on our website
• Shopify: billing for plans bought through the VantageDash Shopify app
• Bright Data: reading competitor websites that block automated visits. It receives competitor web addresses only.
• Google: the app shows competitor icons from Google's icon service, so your browser asks Google for them.

Usage analytics and error reports run on servers we control. Our analytics set no cookies and store no names or email addresses. Error reports record what went wrong and on which page, with sign-in details and form contents removed before they are sent. We may also disclose data if required by law, regulation, or legal process.

If You Connect VantageDash to ChatGPT or Claude

If you connect VantageDash to an AI assistant (ChatGPT or Claude), the assistant asks us questions on your behalf and we answer them from your own workspace: names and prices of your products and of the competitor products matched to them, your competitors' names and web addresses, recent changes in their prices, and when your price checks ran and whether they worked. We receive only what the question needs (for example a product name you typed), never your conversation, and we do not keep the questions: our request log records that a request arrived, not its words. The assistant cannot change anything in your workspace, and it never receives your billing details, your team or your store connection. OpenAI (for ChatGPT) or Anthropic (for Claude) is then a recipient you chose, not a provider working for us, and what the assistant keeps of its answers is covered by that company's privacy policy. You can disconnect VantageDash at any time in the assistant's settings, and when you do, it can no longer ask.

5. Where Your Data Is Stored

First Layer Digital LLC is based in the United States, and so are our database and servers, so your data is stored and processed in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, we transfer your data to the United States under data protection terms with our providers that include the European Commission's Standard Contractual Clauses, or the UK and Swiss equivalents.

6. Data Security

Each workspace's data is isolated by row-level security in the database: you can only access your own workspace data.

• Third-party credentials are encrypted at rest using industry-standard symmetric encryption
• All API communication uses HTTPS/TLS
• Authentication tokens are validated on every request
• Security headers are applied to all responses
• Rate limiting protects against abuse

7. How Long We Keep Data

• Account and workspace data: while your account is open. When you ask us to delete it, we delete it within 30 days. Encrypted backups are kept for 30 days, so a deleted record leaves them within 30 days after that.
• Competitor price history: 60 days, longer for the most recent price of each product.
• Shopify store data: Shopify asks us to erase a store's data 48 hours after the app is uninstalled, and we erase it when that request arrives.
• Visitor email addresses: until you ask us to delete them. After that we keep only a one-way fingerprint of the address, which cannot be turned back into it, so that we never email it again.
• Match decisions used to improve matching (from December 1, 2026): kept without your product's name, your prices or any link to your workspace, so they stay after your account is deleted. Email us to keep yours out.
• Billing records: as long as tax law requires.

8. Your Rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you
• Correct it. Most workspace details can be changed in Settings.
• Delete your account and all associated data
• Receive a copy of your data in a machine-readable format (JSON). Products, matches and analytics can also be downloaded as CSV or PDF from those pages.
• Restrict or object to how we use it, including any use based on our legitimate interests
• Withdraw consent where we rely on it, and unsubscribe from non-essential emails

Email privacy@vantagedash.io and we will answer within one month. If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority.

9. Cookies

We use only essential cookies, to keep you signed in. Our analytics do not use cookies, and we do not use advertising cookies.

10. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact

For privacy-related questions or requests, contact us at privacy@vantagedash.io or write to us: