OOpDash← Back to home

Privacy Policy

Last updated: 23 July 2026

This policy explains, in plain language, what personal data OpDash collects, why, how it is protected, and the choices you have. If you have any questions, email privacy@opdash.co.

Who we are

OpDash is a trading name of Founder Ventures Ltd, a company registered in England and Wales (Company No. 13922868), with its registered office at Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, BL6 6HG. For anything relating to data protection, contact us at privacy@opdash.co.

The two roles we play

Depending on how you interact with us, we act in one of two roles under data-protection law:

  • As the controller. When you visit our website, join our updates list, or sign up for an OpDash account, we decide how your data is used. This policy governs that data.
  • As a processor.When one of our customers installs the OpDash assistant on their own website, the messages and contact details their visitors submit belong to that customer — they are the controller of that data, and we only process it on their behalf under our customer agreement. If you chatted with a business that uses OpDash and want to exercise your rights over that conversation, please contact that business (or contact us and we will pass your request on to them).

What we collect and why

Website visitors and updates list

  • Your email address, if you join our updates list.
  • A few basics about your visit: your approximate location (country or region), your browser language, the page or link that brought you here, and how you use the site (pages viewed and things clicked).

Legal basis: your consent for the updates list (you can withdraw it at any time), and our legitimate interest in understanding and improving the website.

Customers and account holders

  • Your name, business email, and a securely hashed password.
  • Your company and billing details, and tax information, handled through Stripe.
  • Usage data needed to run your account — for example conversation counts and quota.
  • Any support messages you send us.

Legal basis: performance of our contract with you (to provide the service and take payment), our legal obligations (for example tax and accounting records), and our legitimate interest in keeping the service secure and improving it.

End-user data captured through the assistant (we are the processor)

When a visitor chats with a customer’s assistant, we process the messages they send and any contact details they choose to share (such as a name, email, or phone number) that the assistant captures as a lead. We process this data on the customer’s instructions, as their processor. That customer is the controller and is responsible for the privacy notice shown to their own visitors.

AI processing

To generate assistant replies and to search a customer’s knowledge, relevant content is sent to our AI providers (Anthropic for replies, Voyage for search). We minimise the personal data sent to them by design, and they act as our processors under data-processing agreements, processing the content only to produce the result.

Cookies, analytics and advertising

  • This marketing website uses a small amount of cookies and similar storage to measure how it is used, and to measure and improve our advertising. Where consent is required, you choose through our cookie-consent banner, and non-essential cookies are not set until you agree.
  • We advertise online. We run ads on platforms including Google, and their tags on this website help us understand which ads bring people here. If you accept marketing cookies, this also allows those platforms to use your data to personalise the ads you see, including showing you OpDash ads again elsewhere. If you decline, or have not answered the banner, we tell them so and that personalisation does not happen.
  • Measuring a trial that started from an ad. When you arrive from one of our ads, the ad platform adds a click identifier to the link. If you go on to start a trial, our server tells that platform that the click led to a trial, along with the plan value and the advertising choice you made on the banner. We send no name, email address or phone numberfor this — only the click identifier the platform itself created. Your choice is recorded at the moment you click through; if you change it afterwards, that later change cannot be reflected in a report we have already sent.
  • The OpDash app and the chat widget are cookieless. Our product analytics set no cookies or device storage, and the widget stores only what is strictly necessary to keep a chat you started working across pages. The ad click identifier described above reaches the app in the web address, not from your device, and we store it against your workspace. Because nothing is read from or written to your device, the app shows no cookie banner.

Who we share data with

We never sell your data. We share it with a small set of vetted providers (“sub-processors”) that help us run OpDash — for hosting, our database, AI, payments, email, analytics, and error and uptime monitoring — and only so they can perform that service for us. Each one is bound by a data-processing agreement. The full, current list is on our Sub-processors page.

Advertising platforms are different.The ad platforms described above — Google in particular — do not act on our instructions when they measure and personalise advertising; they decide how they use that data themselves, under their own terms and privacy policies. So they are not our sub-processors, and what they receive is limited to what is set out in the advertising section above, governed by the choice you make on our cookie banner.

Where your data lives and international transfers

OpDash is built EU-first. Our primary database, application logs, error monitoring, product analytics, and rate-limiting store are all hosted in the European Union, and our application compute runs in the EU (Ireland). A small number of sub-processors — notably our AI, payments, email, and hosting/edge providers — process data in the United States. For those transfers we rely on an appropriate safeguard under Chapter V of the GDPR: Standard Contractual Clausesand/or the provider’s EU–US Data Privacy Framework certification, as set out in each provider’s agreement. We also minimise personal data by design — for example, our logs carry hashed identifiers rather than raw IP addresses.

How long we keep it

  • Updates-list email: until you unsubscribe or ask us to delete it.
  • Account and customer data: for as long as your account is active, and afterwards only as long as we need it to meet legal, tax, or accounting obligations (for financial records, typically up to six years under UK law).
  • End-user data we process for a customer: for as long as that customer instructs, and deleted on their request or when their account closes.
  • Analytics and logs: only as long as we need them, then deleted or aggregated.

Security

We take security seriously: EU-first hosting, encryption in transit and at rest, strict separation of each customer’s data, hashed credentials, hashed identifiers in logs rather than raw IP addresses, and least-privilege access. No system is perfectly secure, but if a breach affects your personal data we will notify you, or the relevant customer, as the law requires.

Your rights

Under UK and EU data-protection law you have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent at any time (every marketing email we send has an unsubscribe link). To exercise any of these, email privacy@opdash.coand we will respond as soon as we can. Where we hold data as a processor on a customer’s behalf, we will refer your request to that customer, who is the controller.

Children

OpDash is a business tool. It is not directed to children, and we do not knowingly collect personal data from anyone under 16.

Changes to this policy

If we update this policy, we will change the date at the top of the page and, for material changes, highlight what is important.

Contact and complaints

For any data-protection question, contact us at privacy@opdash.co. You also have the right to lodge a complaint with your data-protection authority. In the UK this is the Information Commissioner’s Office (ICO), ico.org.uk.