Privacy Policy

executiveos.dashcore.com is a personal assistant for one business owner. It reads your calendar and, if you connect one, your mailbox, so it can tell you what needs you, prepare you before meetings, and keep track of what was promised. This page says exactly what it collects, what leaves our systems, and what you can do about it.

Who we are

executiveos.dashcore.com is operated by Dashcore. For anything about your data, write to [email protected].

What we collect

Your account details: your name, email address, and your password stored as a hash we cannot reverse. If you subscribe, our payment processor Stripe holds your card; we never see the number and store only the last four digits and the card type.

What you tell the assistant: your conversations with it, the facts it remembers about you, the people you mention, promises made in either direction, reminders, problems, projects, and your answers to the questions it asks when you start.

What it produces for you: your daily briefings, meeting preparation, suggestions, and a record of every action it took on your behalf and every one you declined.

How you use it: every request to an AI model, what it cost us, and what it cost you in credits. This is how billing works and how we know whether the product is viable.

Google data specifically

If you connect Google Calendar, we ask for permission to read your calendar and to create, move and decline events. Reading happens on a schedule so your briefing and meeting preparation are ready before you need them. Nothing is written to your calendar without you approving it first, and declining an invitation always asks, because saying no reaches whoever invited you.

If you connect Google Mail, we ask only for read access. The permission we request cannot send, reply, or delete, and that limit is enforced by Google rather than by our own code.

We do not store the contents of your emails. A message is fetched, read once to decide what it needs from you, and let go. What we keep is who it came from, its subject line, and one line saying what it wants. If you want the message itself, it is still in your mailbox, where it always was.

What the assistant works out from your mail is a different thing from the mail itself, and some of that is kept. A briefing quotes what a message needs from you. Ask the assistant about a message and the conversation is saved, because a conversation you cannot look back at is not much use. It also keeps durable facts it learns that way, such as which company an invoice belongs to, so you do not have to tell it twice. All of that lives on the Memory screen, where you can read it and delete any of it.

We do not keep a copy of your calendar. Events are read when they are needed rather than mirrored into our database, so there is no second version of your diary here to fall out of step or to leak. Two things are written down: the title and time of a meeting we have prepared you for, so the preparation can be shown next to it, and whatever a briefing said about your day. Both are ours rather than Google's, and both go when your account does.

Your Google connections are separate. A calendar and a mailbox are two connections, authorised separately and disconnected separately, so agreeing to one is never agreeing to the other. Disconnecting either deletes the stored credentials for it immediately.

Google API Services Limited Use

executiveos.dashcore.com's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we use Google user data only to provide the features described on this page. We do not sell it. We do not use it for advertising. We do not use it to train generalised artificial intelligence models. No human at Dashcore reads it, except where you have asked us for support and the exception below applies.

Where your data goes

To answer you and to sort your mail, we send the relevant text to AI providers. Today those are Anthropic, which writes the responses and the summaries, and Voyage AI, which turns text into the numeric form that makes searching your own history possible. They process it to return a result and, under our agreements with them, do not use it to train their models.

Stripe processes payments. Google and Microsoft are the sources of the calendar and mail you choose to connect. Our servers and databases are hosted by Laravel Cloud.

We do not sell your data to anyone, ever, and there is no advertising in this product.

When a person can see your account

Support staff can open your account to reproduce a problem you have reported. Every time that happens it is recorded against your account with who did it and when, and while it is happening nothing can be approved, sent, or charged. Reading is possible; acting in your name is not.

How long we keep things

We keep your data for as long as your account exists. Delete your account and everything personal to you goes with it, including your conversations, memories, mail records, connections and stored credentials.

Two things outlast the account, deliberately. Records of when support staff opened an account, and records of who was granted administrator access, both stay so that questions about access can still be answered afterwards. Neither contains your content. Financial records are kept where the law requires it.

A data export you request is a single file containing your whole account, so it is deleted automatically after a short retention window rather than sitting on a server indefinitely.

What you can do

• Download everything we hold about you, as a file, from your settings.
• See a list of everything the assistant is able to do, and switch any of it off. Turning something off means it is never offered, not merely refused.
• Disconnect a calendar or a mailbox at any time, which deletes the stored credentials for it.
• Delete your account, which removes your data as described above.
• Ask us anything about your data at [email protected].

Security

Connection credentials are encrypted before they are stored and are never included in exports, logs, or anything sent to a browser. Every record is tied to the account that owns it and that scoping is enforced in the data layer rather than left to individual screens. Sign-in supports two-factor authentication and passkeys, and you can see your active sessions and sign other devices out.

Children

This is a product for people running a business. It is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

If we change this policy in a way that materially affects you, we will tell you rather than quietly updating the date at the top.