Privacy Policy

1. Introduction

EquipDash Software LLC ("EquipDash," "we," "us," "our") operates the equipdash.com website and the EquipDash platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use our platform, or interact with our services.

By using our website or platform, you agree to the practices described in this policy.

If you are a business customer ("Customer") using EquipDash to manage your rental or tour operations, please also refer to the Data Processing Addendum in our Subscription Agreement, which governs how we process data on your behalf.

2. Information We Collect

2.1 Information You Provide Directly:

• Account registration: Business name, contact name, email address, phone number, business address
• Payment information: Billing details are processed by Stripe. We do NOT collect or store credit card numbers, CVVs, or bank account numbers. We receive only transaction confirmation data (last four digits, transaction ID, amount, status).
• Customer support: Information you provide when contacting us (name, email, description of issue)
• Feedback and surveys: Responses to surveys, product feedback, or feature requests

2.2 Information Collected Through the Platform:

When our Customers use EquipDash to manage their business, the following data may be processed through the platform:

• End-User Data: Names, email addresses, phone numbers, booking details, waiver signatures, and other information provided by Customers' clients during booking, check-in, or waiver completion
• Booking and Transaction Data: Rental/tour details, dates, pricing, payment status, inventory selections
• Operational Data: Staff schedules, inventory records, maintenance logs, business reports

Important: This data is provided and controlled by our Customers. We process it on their behalf as a data processor. Our Customers are responsible for their own privacy notices and obtaining appropriate consents from their end-users.

2.3 Information Collected Automatically:

• Device and Browser Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, features used, clickstream data, time spent on pages, referring URLs
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies. See Section 7 for details.
• Log Data: Server logs recording access times, pages viewed, IP addresses, and referring pages

2.4 Information from Third Parties:

• Analytics providers (e.g., Google Analytics)
• Marketing partners
• Integrated third-party services connected by Customers (e.g., Stripe, QuickBooks, Viator, marketplace integrations)

3. How We Use Your Information

3.1 To Provide and Operate the Service:

• Process bookings, rentals, and tour reservations
• Manage customer accounts and subscriptions
• Process payments through Stripe
• Provide customer support
• Send transactional communications (booking confirmations, receipts, account notifications)

3.2 Dash AI Features:

Dash AI processes Customer Data and End-User Data to provide automated operations, including booking management, inventory optimization, customer follow-ups, reporting, and operational recommendations.

• AI processing occurs on our US-based infrastructure.
• AI-generated outputs are provided to assist business operations and should be reviewed by the Customer before relying on them.
• We do not use Customer Data or End-User Data to train general-purpose AI models. Data is only processed to deliver features within the Customer's own account.

3.3 To Improve and Develop the Service:

• Analyze usage patterns and trends (using aggregated, anonymized data)
• Develop new features and functionality
• Conduct research and analytics
• Perform quality assurance and testing

3.4 Marketing and Communications:

• Send marketing communications about EquipDash products and services (with consent or legitimate interest)
• Personalize your experience on our website
• You may opt out of marketing emails at any time via the unsubscribe link

3.5 Legal and Compliance:

• Comply with legal obligations
• Enforce our terms and agreements
• Protect against fraud, unauthorized transactions, or other liability
• Respond to legal process or government requests

4. How We Share Your Information

4.1 Service Providers and Sub-Processors:

We share information with third-party service providers who assist in operating our business:

• Stripe (payment processing, refunds, payment links, security deposit holds)
• Amazon Web Services (cloud hosting, storage, and transactional and campaign email delivery via SES)
• Twilio (SMS delivery for booking messages, and inbound STOP handling)
• Google (Sign-in with Google; Google Calendar sync; Google Drive archiving of signed waivers — each only where the Customer connects their own Google account)
• Open-Meteo (weather and marine forecasts used by weather rules and the daily forecast — we send location coordinates only, never customer data)
• AI model providers (OpenAI by default, or the Customer's own Anthropic, Google, xAI, Moonshot, or DeepSeek key) for AI-generated listing content, the Dash AI assistant, and scheduled bots
• Analytics providers (website analytics and product improvement)

These providers are contractually obligated to protect your data and use it only for the purposes we specify. Our current sub-processors, with each provider's purpose and location, are listed at equipdash.com/subprocessors.

4.2 At Customer Direction:

When a Customer connects third-party integrations (e.g., QuickBooks, Xero, Mailchimp, Viator, GetYourGuide), data may be shared with those services as directed by the Customer. EquipDash is not responsible for the privacy practices of third-party integrations.

4.3 AI Assistants and Connectors (MCP):

A Customer may connect EquipDash to an AI assistant (for example Claude or ChatGPT) using the EquipDash connector — an MCP server at app.equipdash.com/mcp/v1, authorized with the Customer's own API key or sign-in. When a Customer does this:

• The assistant can read and act on that Customer's own EquipDash data — bookings, customers, products, staff, payments, and reports — limited by the scopes on the API key and the permissions of the signed-in user. Data is scoped to that one business and never spans Customers.
• Data returned to the assistant is processed by the AI provider the Customer chose (for example Anthropic or OpenAI) under that provider's own terms, not as an EquipDash sub-processor.
• Actions taken through the connector reach the same third parties the platform normally uses: taking a payment or issuing a refund goes to Stripe; sending a text goes to Twilio; sending an email goes to Amazon SES; a calendar sync writes to the Customer's Google Calendar; archiving a signed waiver writes to the Customer's Google Drive; a weather lookup sends location coordinates to Open-Meteo; and AI-generated listing content is produced by the configured AI model provider.
• Connector activity is logged in the Customer's account, and access can be revoked at any time from Settings › API & Integrations.

4.4 Business Transfers:

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

4.5 Legal Requirements:

We may disclose information if required by law, regulation, legal process, or governmental request. We may disclose information to protect our rights, property, or safety, or that of our users or the public.

4.6 With Consent:

We may share your information with your consent or at your direction.

4.7 Aggregated/Anonymized Data:

We may share aggregated or anonymized data that cannot reasonably identify you, for industry analysis, benchmarking, or marketing purposes.

4.8 Advertising Partners:

When your cookie settings allow it, our website shares limited activity with Meta Platforms (Facebook and Instagram), Google, Reddit and X (formerly Twitter) so we can show EquipDash ads to people who visited our site and measure whether those ads work. See Section 7.6 for what is shared and how to opt out.

So that paying customers do not see our ads, we also send Meta a list of our paying customers' email addresses, converted into one-way codes (hashed) before they leave our systems. Meta uses the list only to match and leave those people out of our ads.

5. Data Retention

• Account Data: Retained for the duration of the subscription plus 30 days for data export.
• Customer Data and End-User Data: Retained during the subscription term. After termination, Customer has 30 days to export data. After that, data is deleted within 30 additional days.
• Website Usage Data: Retained for up to 26 months (consistent with standard analytics retention).
• Legal Obligations: We may retain certain data longer if required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information.

• Encryption: Data encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Access Controls: Role-based access, multi-factor authentication for staff, least-privilege principles.
• Infrastructure: Hosted on AWS with SOC 2 certified infrastructure.
• Monitoring: Continuous monitoring for unauthorized access and security threats.
• Incident Response: We maintain incident response procedures and will notify affected parties of security breaches as required by law.

While we strive to protect your data, no method of transmission or storage is 100% secure.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use:

• Essential Cookies: Required for the website and platform to function (session management, authentication, security).
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics). These collect anonymized usage data.
• Marketing Cookies: Set by the Meta Pixel, Google Ads, Reddit Pixel and X Pixel tags to show our ads to past visitors and measure campaign results. See Section 7.6.
• Preference Cookies: Remember your settings and preferences.
• Affiliate Referral Cookies: A cookie named ed_ref is set when you arrive at our website through an affiliate referral link (e.g., equipdash.com/r/<code>). It records an opaque referral identifier so we can credit the referring affiliate if you later sign up. See Section 7.5 for full details.

7.2 Third-Party Analytics:

We use Google Analytics and other analytics tools to understand website traffic and usage patterns. Google Analytics may set cookies and collect data as described in Google's Privacy Policy.

7.3 Managing Cookies:

• You can control cookies through your browser settings.
• Disabling certain cookies may affect the functionality of our website or platform.
• For more information, visit aboutcookies.org or allaboutcookies.org.

7.4 Do Not Track:

Our website does not respond to "Do Not Track" browser signals. It does honor Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and do not load advertising cookies.

7.5 Affiliate Referral Tracking (ed_ref Cookie):

If you visit our website through a link from one of our affiliates (for example, a URL of the form equipdash.com/r/<code>), we set a first-party cookie named ed_ref so that the referring affiliate can be credited if you subsequently sign up for EquipDash.

• What it stores: A randomly generated, opaque referral identifier. It does not contain your name, email, IP address, or any directly identifying information.
• Cookie attributes: First-party, scoped to .equipdash.com (so it is readable by both the marketing site and our application at app.equipdash.com), HttpOnly, Secure, SameSite=Lax.
• Lifetime: 90 days from the most recent qualifying visit. The cookie is refreshed on later affiliate visits and replaced if you arrive through a different affiliate's link (last-touch attribution).
• How it is used: If you sign up for an EquipDash account during the cookie's lifetime, we record the referral against the affiliate so they may earn commission under our affiliate program. The cookie is not used for advertising, retargeting, profiling, or sale of personal data.
• Sharing: The referral identifier and limited signup metadata (e.g., signup timestamp, subscription status) are transmitted between our marketing site and our platform via a signed, server-to-server webhook. No data is shared with third parties for advertising purposes.
• Legal basis (EEA/UK/Switzerland): Legitimate interest in operating our affiliate program and accurately compensating partners. You may object to this processing at any time by clearing the cookie or contacting us using the details in Section 13.
• Opt-out: You can delete the ed_ref cookie at any time through your browser's cookie settings, or visit our website without using an affiliate link. Declining or removing the cookie will not affect your ability to use the website or sign up for EquipDash.

7.6 Advertising and Retargeting (Meta, Google, Reddit and X):

We use the Meta Pixel, Google Ads, Reddit Pixel and X Pixel tags on equipdash.com to show EquipDash ads on Facebook, Instagram, Google sites, Reddit and X to people who visited our website, and to count sign-ups that came from those ads.

• What is shared: the pages you view, clicks on our Start free trial and demo buttons, the time of the visit, your IP address, browser and device details, and identifiers stored in cookies (such as _fbp, _fbc, _rdt_uuid, _twclid and Google's ad cookies). We do not share the content of any form you fill in with these partners.
• How these partners use it: under their own terms and privacy policies, to deliver and measure ads and, where you have an account with them, to connect the visit to that account.
• EEA, UK and Switzerland: these tags only load after you choose Accept in our cookie banner.
• Everywhere else: these tags load by default. You can turn them off at any time in Cookie settings, which switches off analytics and advertising cookies in that browser. A GPC signal does the same for advertising cookies.
• More control: you can also manage ads in your Meta ad preferences, your Google ad settings, and the ad settings in your Reddit and X accounts.

8. Your Rights and Choices

8.1 All Users:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Opt-Out of Marketing: Unsubscribe from marketing communications via the link in any email or by contacting us.
• Data Portability: Request your data in a structured, machine-readable format.

8.2 California Residents (CCPA/CPRA):

• Right to Know: What personal information we collect, use, and disclose.
• Right to Delete: Request deletion of personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information for money. Our website shares limited browsing activity with Meta, Google, Reddit and X for cross-context behavioral advertising (Section 7.6), which California law treats as "sharing". You can opt out in Cookie settings, or by sending a Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise your rights: Email support@equipdash.com with "CCPA Request" in the subject line. We will verify your identity before processing.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf.

8.3 European Economic Area, UK, and Swiss Residents (GDPR):

Note: EquipDash's primary operations are in the United States. If you are located in the EEA, UK, or Switzerland:

• Legal Bases: We process personal data based on: (a) contract performance; (b) legitimate interests (operating and improving our Service); (c) consent (for marketing, and for analytics and advertising cookies, which only load after you choose Accept); (d) legal obligations.
• Additional Rights: Right to restrict processing, right to object to processing, right to lodge a complaint with a supervisory authority.
• International Transfers: Your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses or other approved mechanisms where required.

To exercise your rights: Email support@equipdash.com.

8.4 End-Users:

If you are an end-user of one of our Customers (e.g., you booked a rental or tour through a business that uses EquipDash), your personal data is controlled by that business. Please contact the business directly to exercise your data rights. If the business directs us, we will assist in fulfilling your request.

9. Children's Privacy

• Our Service is not directed to children under 16 (or under 13 where COPPA applies).
• We do not knowingly collect personal information from children.
• If we learn we have collected a child's information, we will delete it promptly.

If you believe a child has provided us personal information, contact us at support@equipdash.com.

10. Third-Party Links and Integrations

• Our website and platform may contain links to third-party websites and integrate with third-party services.
• We are not responsible for the privacy practices of third parties.
• We encourage you to review the privacy policies of any third-party services you connect.

11. International Data Transfers

EquipDash is based in the United States. All data is processed and stored on AWS infrastructure in the United States.

If you access our website or platform from outside the United States, your information will be transferred to and processed in the United States.

We implement appropriate safeguards for international transfers, including Standard Contractual Clauses where required under GDPR.

12. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time.
• We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date.
• For material changes affecting platform users, we will also send email notification.
• Continued use of our website or platform after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

EquipDash Software LLC
1021 E Lincolnway Suite #9844
Cheyenne, Wyoming 82001
United States
Email: support@equipdash.com

© 2026 EquipDash Software LLC. All rights reserved.